General

  • Target

    Archive.rar

  • Size

    28.2MB

  • MD5

    8988dd76e0075a66d1030daa58d220f1

  • SHA1

    73d1016057559a6468779ca13ca099c17809ff86

  • SHA256

    c4818189e772ada93116ca28a6226f5b86f763daaf6fe8dc2ad8ab0c87f7a90a

  • SHA512

    bca4c6fbf6618c20ec3403d08d3a2537371839ba1d0a1c4fd84a622b38527384880400656adbfbb4a6158e163d332a08967dd73bf5c9a971d66a1b963d61a6b1

  • SSDEEP

    393216:Xo5JIcjxzuHjmJydtTQHRRns+rZfeayhSXBpgrMyY3fv2zwjGyM9lE48v9/NBLD1:Yj16m/s+VeVmurMDfvYwjfM/GvhvLnp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Archive.rar
    .rar

    Password: 1234

  • PROPAMAT/BingMaps.d
    .dll windows:10 windows x64

    Password: 1234

    6858de0d7f98c27c4ba700bc92b21099


    Headers

    Imports

    Exports

    Sections

  • PROPAMAT/mstscax.dl7
    .dll regsvr32 windows:10 windows x64

    Password: 1234

    96c95abb640e70c3d90c4ffb3af289b0


    Headers

    Imports

    Exports

    Sections

  • Setup.exe
    .exe windows:6 windows x64

    Password: 1234

    46afc61b34fb8e20ac7399f0df86ba31


    Headers

    Imports

    Sections

  • Templates/Appraisd — копия.ini
  • Templates/Appraisd.ini
  • Templates/Appraiser_Data — копия.ini
  • Templates/Appraiser_Data.ini
  • Templates/Appraiser_Telemed — копия.xml
    .xml
  • Templates/Appraiser_Telemed.xml
    .xml
  • Templates/Appraiser_TelemetryRunList — копия.xml
    .xml
  • Templates/Appraiser_TelemetryRunList.xml
    .xml
  • Templates/RenoirCore.WindowsDesktop — копия.dll
    .dll windows:6 windows x86

    Password: 1234

    66505c7290631bc408c29cf5f9681bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/RenoirCore.WindowsDesktop.dll
    .dll windows:6 windows x86

    Password: 1234

    66505c7290631bc408c29cf5f9681bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/ResIL — копия.dll
    .dll windows:6 windows x86

    Password: 1234

    77b2a6efb5db23bab61e38152791c9e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/ResIL.dll
    .dll windows:6 windows x86

    Password: 1234

    77b2a6efb5db23bab61e38152791c9e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/aadcloudap — копия.dl
    .dll regsvr32 windows:10 windows x64

    Password: 1234

    fe7d16e48099ae2800333706a2d4ae90


    Headers

    Imports

    Exports

    Sections

  • Templates/aadcloudap.dl
    .dll regsvr32 windows:10 windows x64

    fe7d16e48099ae2800333706a2d4ae90


    Headers

    Imports

    Exports

    Sections

  • Templates/aadtb — копия.dll
    .dll windows:10 windows x64

    a376813196de922b439e966ef391171e


    Headers

    Imports

    Exports

    Sections

  • Templates/aadtb.dll
    .dll windows:10 windows x64

    a376813196de922b439e966ef391171e


    Headers

    Imports

    Exports

    Sections

  • Templates/appraid — копия.sdb
  • Templates/appraid.sdb
  • Templates/appraiser — копия.sdb
  • Templates/appraiser.sdb
  • Templates/backup — копия.sdb
  • Templates/backup.sdb
  • Templates/bde — копия.sdb
  • Templates/bde.sdb
  • Templates/dbghelp — копия.dll
    .dll windows:6 windows x86

    fa6b094f828920cf8999743ff0004319


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/dbghelp.dll
    .dll windows:6 windows x86

    fa6b094f828920cf8999743ff0004319


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/lgc_api — копия.dll
    .dll windows:6 windows x86

    098d9da01bf31c47c55b1f232fc293c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/lgc_api.dll
    .dll windows:6 windows x86

    098d9da01bf31c47c55b1f232fc293c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/vivoxsdk — копия.dll
    .dll windows:6 windows x86

    efaa61aec68c12fcf59804931c998357


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Templates/vivoxsdk.dll
    .dll windows:6 windows x86

    efaa61aec68c12fcf59804931c998357


    Code Sign

    Headers

    Imports

    Exports

    Sections