General

  • Target

    NetSpot Enterprise v3.0.405.0 Portable.rar

  • Size

    38.3MB

  • MD5

    2b556db8d1b1523b4b7131d56377bc62

  • SHA1

    ce42995feb726cb67d23dd6f4b72a36c7437e6e9

  • SHA256

    6448b0c8f932a4743aa387223f5ea0fbf08c5001f7b4c93b04fed8c58c4ba2af

  • SHA512

    95d2ab5df5fe673babbd0b66104f277e0c91e1e2dbf94a3180f8c92e8d4a3806b89573b93f0631205a5b5c425cc80668d00db0e0f33cbf4c1dadce3e07f4205e

  • SSDEEP

    786432:fnplvTC2SiTbbKdiTJ5vbkxfm4ACrj+NlwlC7i6/bcq35rXZbaAYcfVh:wWbudiTJ5oxfm4BmNlwlC7ikp35889h

Score
10/10

Malware Config

Signatures

  • Detected Ploutus loader 1 IoCs
  • Ploutus family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • NetSpot Enterprise v3.0.405.0 Portable.rar
    .rar
  • NetSpot Enterprise v3.0.405.0 Portable/App/AppInfo/AppIcon.ico
  • NetSpot Enterprise v3.0.405.0 Portable/App/AppInfo/AppInfo.ini
  • NetSpot Enterprise v3.0.405.0 Portable/App/AppInfo/Launcher/NetSpot Enterprise.ini
  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/BouncyCastle.Crypto.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/ITextSharp.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/LegacySurveyProject.ico
  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/Microsoft.WindowsAPICodePack.Shell.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/Microsoft.WindowsAPICodePack.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Base.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Base.dll.config
  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Core.Base.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Core.Data.Discover.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Core.Data.Predictive.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Core.Data.Survey.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Core.Data.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Core.Heatmaps.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Discover.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.Policies.Activator.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.Predictive.Format.NETSPU.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.Predictive.Format.NP.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.Predictive.Math.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.Predictive.Parameters.JSON.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.Survey.Format.NETSPU.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.Survey.Format.NETSPW.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.Survey.Iperf.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Infrastructure.WlanService.Native.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Predictive.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.Survey.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/NetSpot.exe.config
    .xml
  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/Newtonsoft.Json.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/PredictiveProject.ico
  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/Resources/Sounds/Survey_ScanFail.mp3
  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/Resources/Sounds/Survey_ScanSuccess.mp3
  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/SurveyProject.ico
  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/System.Data.SQLite.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/de/NetSpot.Base.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/en/NetSpot.Base.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/es/NetSpot.Base.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/fr/NetSpot.Base.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/it/NetSpot.Base.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/ja/NetSpot.Base.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/pt/NetSpot.Base.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/ru/NetSpot.Base.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x64/Act.dll
    .dll windows x64

    18866ce4d05279cd5aa01c3a6311c516


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x64/Predictive.Interop.dll
    .dll windows x64

    2aed380de12cffdd079b57f9f4e9de0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x64/SQLite.Interop.dll
    .dll windows x64

    9c208621f87838d81aaabd3b0bd652ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x64/cygwin1.dll
    .dll windows x64

    bdf455819b9d2bf6aff413f00aa16fb6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x64/iperf3.exe
    .exe windows x64

    ec74fa88e06c69d82ab466b38601105c


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x86/Act.dll
    .dll windows x86

    0b632afc8fd472fb2879a15efbe59be1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x86/Predictive.Interop.dll
    .dll windows x86

    0cd563dc5259ba151c94277e90e4673b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x86/SQLite.Interop.dll
    .dll windows x86

    ae94e7e35747470c61bf70e22ccd5d26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x86/cyggcc_s-1.dll
    .dll windows x86

    0abd4046f60f3a541d737e4fb950dae8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x86/cygwin1.dll
    .dll windows x86

    66ea049507f6d1f92e8a5a2958da194a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/App/NetSpot/x86/iperf3.exe
    .exe windows x86

    ef275e6a44d8099f84341c04e3b05b74


    Code Sign

    Headers

    Imports

    Sections

  • NetSpot Enterprise v3.0.405.0 Portable/NetSpot Enterprise.exe
    .exe windows x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections