General

  • Target

    NEAS.31b292608cd39e45aaf06eae9721f260.cab

  • Size

    7.2MB

  • MD5

    31b292608cd39e45aaf06eae9721f260

  • SHA1

    365edf5046497692d81856f75f8ff0354f1022f1

  • SHA256

    188f44c4c53ce27b8cfa5758e9228cfda737d6fae19ece8a6fb11884b0357c2e

  • SHA512

    990b42f1615c8679ee4b8e0d1cd2b3c2402936f08d4eca69aa9eb5820ecedf75d53258e50f8caab997991c807269095a76d740ce93de5274f21149273ea6d401

  • SSDEEP

    98304:yMW8Vly6ZPa/GCfUHSKCTtLwtb0wrw3EPHJ/g5f6Vh12un+78D0ROZ5d:IsaesUr+urw3r5fIh1x+78D3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.31b292608cd39e45aaf06eae9721f260.cab
    .cab
  • avp.exe
    .exe windows:5 windows x86

    b6e1ba760cbeffdce764e8827f82651a


    Headers

    Imports

    Sections

  • avp.kcat
  • avp_azure.exe
    .exe windows:5 windows x86

    4eb087fb4320d9c065cf54041a998208


    Headers

    Imports

    Sections

  • avp_azure.kcat
  • avp_start_menu.ico
  • avpinst.dll
    .dll windows:6 windows x86

    cc0c2623401ed3270c19a410475b2d27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avpuilauncher.ico
  • backup.dll
    .dll windows:6 windows x86

    31cfab900ccdfb01cd8ec9471eee6c52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cm_km.inf_x86
  • cm_km.sys_x86
    .sys windows:6 windows x86

    b390f3b1c3b4525025a1b4d847439aa5


    Code Sign

    Headers

    Imports

    Sections

  • cm_km_sha1.inf_x86
  • cm_km_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • cm_km_sha1_reg.inf_x86
  • com_antivirus.dll
    .dll regsvr32 windows:6 windows x86

    0905d26fb0d23b9337f22f8cc513caa0


    Headers

    Imports

    Exports

    Sections

  • kl1.inf_X86
  • kl1.sys_X86
    .sys windows:6 windows x86

    02ce1e671517f13ca341eabf5a84e8d4


    Code Sign

    Headers

    Imports

    Sections

  • klbackupdisk.inf_x86
  • klbackupdisk.sys_x86
    .sys windows:6 windows x86

    8105b1c0b247b39581de25548eea58bc


    Code Sign

    Headers

    Imports

    Sections

  • klbackupdisk_sha1.inf_x86
  • klbackupdisk_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klbackupdisk_sha1_reg.inf_x86
  • klbackupflt.inf_x86
  • klbackupflt.sys_x86
    .sys windows:6 windows x86

    0eb047bfec5a8f0653e7664ed7cfcccc


    Code Sign

    Headers

    Imports

    Sections

  • klbackupflt_sha1.inf_x86
  • klbackupflt_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klbackupflt_sha1_reg.inf_x86
  • kldisk.inf_x86
  • kldisk.sys_x86
    .sys windows:6 windows x86

    2b2486d2b52c827e14e64a7031d90f1c


    Code Sign

    Headers

    Imports

    Sections

  • kldisk_sha1.inf_x86
  • kldisk_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • kldisk_sha1_reg.inf_x86
  • klelam.inf_X86
  • klelam.sys_X86
    .sys windows:6 windows x86

    0226665b79d72b1b3955fe60cba26ac9


    Code Sign

    Headers

    Imports

    Sections

  • klelam.sys_backup_X86
    .sys windows:6 windows x86

    0226665b79d72b1b3955fe60cba26ac9


    Code Sign

    Headers

    Imports

    Sections

  • klim6.cat_x86
  • klim6.inf_x86
  • klim6.sys_x86
    .sys windows:6 windows x86

    e300c3c0a9d50f78348e73451e9189ce


    Code Sign

    Headers

    Imports

    Sections

  • klim6_sha1.cat_x86
  • klim6_sha1.inf_x86
  • klim6_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klim6_sha1_reg.inf_x86
  • klkbdflt.inf_x86
  • klkbdflt.sys_x86
    .sys windows:6 windows x86

    26946d36deda0de0b26cbd53c2f2c97f


    Code Sign

    Headers

    Imports

    Sections

  • klkbdflt_sha1.inf_x86
  • klkbdflt_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klkbdflt_sha1_reg.inf_x86
  • klmouflt.inf_x86
  • klmouflt.sys_x86
    .sys windows:6 windows x86

    d590fedd522e1d16479206794bceeb22


    Code Sign

    Headers

    Imports

    Sections

  • klmouflt_sha1.inf_x86
  • klmouflt_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klmouflt_sha1_reg.inf_x86
  • klpd.inf_x86
  • klpd.sys_x86
    .sys windows:6 windows x86

    4902b41c981257cf56be747f13d15e36


    Code Sign

    Headers

    Imports

    Sections

  • klpd_sha1.inf_x86
  • klpd_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klpd_sha1_reg.inf_x86
  • klpnpflt.inf_x86
  • klpnpflt.sys_x86
    .sys windows:6 windows x86

    c34a880363a50325518db27ff2e55ac7


    Code Sign

    Headers

    Imports

    Sections

  • klpnpflt_sha1.inf_x86
  • klpnpflt_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klpnpflt_sha1_reg.inf_x64
  • klpnpflt_sha1_reg.inf_x86
  • klwfp.inf_x86
  • klwfp.sys_x86
    .sys windows:6 windows x86

    c2f2413e485ad3ea485862231d571ed0


    Code Sign

    Headers

    Imports

    Sections

  • klwfp_sha1.inf_x86
  • klwfp_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klwfp_sha1_reg.inf_x86
  • klwtp.inf_x86
  • klwtp.sys_x86
    .sys windows:6 windows x86

    9c20c7c2b36c82458320fdbdaea0e12b


    Code Sign

    Headers

    Imports

    Sections

  • klwtp_sha1.inf_x86
  • klwtp_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • klwtp_sha1_reg.inf_x86
  • kneps.inf_x86
  • kneps.sys_x86
    .sys windows:6 windows x86

    fc9982b2cd4753ce2e3b656ad08cd7b9


    Code Sign

    Headers

    Imports

    Sections

  • kneps_sha1.inf_x86
  • kneps_sha1.sys_x86
    .sys windows:10 windows x86

    353b327b4b9806f958ef4b37d0be1aa2


    Code Sign

    Headers

    Imports

    Sections

  • kneps_sha1_reg.inf_x86
  • mcou.dll
    .dll regsvr32 windows:6 windows x86

    004d531c18a7f638e62dfdfee3d6d5d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • passwords.ico