General

  • Target

    Use 2024 Passwords.7z

  • Size

    17.3MB

  • MD5

    e39857950b47a73882270114f1b87528

  • SHA1

    6ebd0d15332300ed11e9b07958acde33bf4ae238

  • SHA256

    c582286832ea0c85e988d92bb957879bad55de912f7a69ebf453bcaafc75dc1c

  • SHA512

    25059b93c0bac79f27b4a4374f990d8e92b7c875c89437bb3344405669f1a8d103a26b305a6c437c41815eec1c69b6ca36d5817495e57b5e90a785f01141618f

  • SSDEEP

    393216:K5EBgwidJdjFnl3/JD5+Hq+OPG8AN4xd7GEWKk2kCX53:mRwedjzPJd+kPG8THGEjoCX53

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Use 2024 Passwords.7z
    .7z

    Password: Malware

  • CMap/Identity-H
  • CMap/Identity-V
  • CMap/Locals/am.pak
  • CMap/Locals/ar.pak
  • CMap/Locals/fi.pak
  • CMap/Locals/fil.pak
  • CMap/Locals/fr.pak
  • CMap/Locals/gu.pak
  • CMap/Locals/he.pak
  • CMap/Locals/hi.pak
  • CMap/Locals/hr.pak
  • CMap/Locals/hu.pak
  • CMap/Locals/id.pak
  • CMap/Locals/lt.pak
  • CMap/Locals/lv.pak
  • CMap/Locals/x64/AdonisUI.ClassicTheme.dll
    .dll windows:4 windows x86

    Password: Malware

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CMap/Locals/x64/AdonisUI.ClassicTheme.xml
    .xml
  • CMap/Locals/x64/AdonisUI.dll
    .dll windows:4 windows x86

    Password: Malware

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CMap/Locals/x64/AdonisUI.xml
    .xml
  • CMap/Locals/x64/SQLite.Interop.dll
    .dll windows:6 windows x64

    Password: Malware

    a42f73521c784fa06f1d886fcbcefcba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CMap/Locals/x86/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86

    Password: Malware

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CMap/Locals/x86/BouncyCastle.Crypto.xml
    .xml
  • CMap/Locals/x86/SQLite.Interop.dll
    .dll windows:6 windows x86

    Password: Malware

    39ace63b362beb47a2a7a8202a5c4f2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CMap/UCS2-GBK-EUC
  • CMap/UniKS-UTF16-H
  • CMap/UniKS-UTF16-V
  • Setup.exe
    .exe windows:6 windows x86

    Password: Malware

    04eeee7e0ac4d5f8af791b0364196af3


    Code Sign

    Headers

    Imports

    Sections

  • demux/libadaptive_plugin.dll
    .dll windows:4 windows x64

    Password: Malware

    7f44bc5c736a5be88bc345aee31d3cfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libaiff_plugin.dll
    .dll windows:4 windows x64

    Password: Malware

    09480affdefc78e00ad91896808aa857


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libasf_plugin.dll
    .dll windows:4 windows x64

    747cd74131f6a6bf0bd82baf6366d343


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libau_plugin.dll
    .dll windows:4 windows x64

    9b9f9252d833e964870da3e3cf4b7f6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libavi_plugin.dll
    .dll windows:4 windows x64

    48f9809878f8c16d045bb00bb57d49e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libcaf_plugin.dll
    .dll windows:4 windows x64

    cbba7d2d7a50708d5f89400417d739bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libdemux_cdg_plugin.dll
    .dll windows:4 windows x64

    c331faaccd7acd1c8b57a5b7eec99b8a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libdemux_chromecast_plugin.dll
    .dll windows:4 windows x64

    e61e934712a8aadcd319e772407ee0be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libdemux_stl_plugin.dll
    .dll windows:4 windows x64

    54b41316c64c9a8234d500ade22ced8d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libdemuxdump_plugin.dll
    .dll windows:4 windows x64

    c7293b682110d84c3a590ec99554d04b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libdiracsys_plugin.dll
    .dll windows:4 windows x64

    9cfd99b21cf1e8e6475fcd10aa464e8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libdirectory_demux_plugin.dll
    .dll windows:4 windows x64

    825563512f7b47245d152ea939903314


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libes_plugin.dll
    .dll windows:4 windows x64

    5538c2bec1e5ed822993ac669e658b8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libflacsys_plugin.dll
    .dll windows:4 windows x64

    024644197bea3fe6dd89431c02a83d71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libh26x_plugin.dll
    .dll windows:4 windows x64

    ffbe5ed04d6d003bf1fa70d4c9fff7fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libimage_plugin.dll
    .dll windows:4 windows x64

    a9d34197a2a3b205e2758202c08747af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libmjpeg_plugin.dll
    .dll windows:4 windows x64

    91005a8306c416a166da8e4d0eeaa686


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libmkv_plugin.dll
    .dll windows:4 windows x64

    e0b67baad922459c18eaca60ef8ba4bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libmod_plugin.dll
    .dll windows:4 windows x64

    0bd0e2f8b1fa61eacdfbaa6f33b81515


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libmp4_plugin.dll
    .dll windows:4 windows x64

    aab3f128c6b1c10ca4b4a7f1bc51a063


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libmpc_plugin.dll
    .dll windows:4 windows x64

    86d7588fe04e95a69ab261cd3b005418


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libmpgv_plugin.dll
    .dll windows:4 windows x64

    83c406f5009b43548851f7ebf272802e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libnoseek_plugin.dll
    .dll windows:4 windows x64

    649cecf4b2ce900c6512733c29149b2a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libnsc_plugin.dll
    .dll windows:4 windows x64

    a2aa4d5004e9eab89148e18626ad6c15


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libnsv_plugin.dll
    .dll windows:4 windows x64

    09480affdefc78e00ad91896808aa857


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libnuv_plugin.dll
    .dll windows:4 windows x64

    4516989100febce04a4607cd32950dff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libogg_plugin.dll
    .dll windows:4 windows x64

    0678aa6318ac0233109abb1a03d29385


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libplaylist_plugin.dll
    .dll windows:4 windows x64

    d1c93dec03e7aa69118ccc21d17b8a44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libps_plugin.dll
    .dll windows:4 windows x64

    ce4ef7544b421821ef6dd5df4e83f67c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libpva_plugin.dll
    .dll windows:4 windows x64

    774d6d302486335a64f0277481c583c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/librawaud_plugin.dll
    .dll windows:4 windows x64

    812333718fe4e1cd42d95b5ca40009f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/librawdv_plugin.dll
    .dll windows:4 windows x64

    7f2bf78f47bcc763afce02429723bce7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/librawvid_plugin.dll
    .dll windows:4 windows x64

    71f2d6dc95a72d6c314e9f1e566b245b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libreal_plugin.dll
    .dll windows:4 windows x64

    636bf3ac6d8eb6c5280016141925a901


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libsid_plugin.dll
    .dll windows:4 windows x64

    e42e8da6d13c503a5ddefca17f77412a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libsmf_plugin.dll
    .dll windows:4 windows x64

    039c2d72e10c2d26dad1680bfb4f3698


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libsubtitle_plugin.dll
    .dll windows:4 windows x64

    2bf92130461e400061e844599ab64b40


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libts_plugin.dll
    .dll windows:4 windows x64

    d042412f555cab5a3e0d71c420e219b4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libtta_plugin.dll
    .dll windows:4 windows x64

    ef331b3f8e7f7c71195b232df0e1db56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libty_plugin.dll
    .dll windows:4 windows x64

    88a3f13c36759cbb2da2f8bfba9d4100


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libvc1_plugin.dll
    .dll windows:4 windows x64

    bc92b1ca50503013044d3e0b3af064f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libvobsub_plugin.dll
    .dll windows:4 windows x64

    f941f0dd148bd5125c6aa6f1f13c405f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libvoc_plugin.dll
    .dll windows:4 windows x64

    e10d8e3372046b3c66224e09d3011259


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libwav_plugin.dll
    .dll windows:4 windows x64

    64a20a84978596df3fccd44a96bfb2af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • demux/libxa_plugin.dll
    .dll windows:4 windows x64

    7c03b546030bfa88c16e75da1d70307e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/AMD64/vstor2-mntapi20-shared.sys
    .sys windows:6 windows x64

    1237b4dd99e535a333942f70ae004212


    Code Sign

    Headers

    Imports

    Sections

  • lib/AMD64/vstor2-x64.sys
    .sys windows:6 windows x64

    3d4a16e3109f5295d8cbcada460ba47e


    Headers

    Imports

    Sections

  • lib/AMD64/vstor2-x86.sys
    .sys windows:6 windows x86

    cd6e013227a31b45efc2fbcdd1a07151


    Headers

    Imports

    Sections

  • lib/AMD64/vstor2.cat
  • lib/AMD64/vstor2.inf
  • lib/expat.dll
    .dll windows:6 windows x64

    6b44fccd71dba70aac211207c97d024e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/glib-2.0.dll
    .dll windows:6 windows x64

    ce2f875d8951d0e9b3509856e8b884f5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/gobject-2.0.dll
    .dll windows:6 windows x64

    11aedb8049063fbf96f92d5c838c70f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/gthread-2.0.dll
    .dll windows:6 windows x64

    4366a24603338f8c0f465a69d567401b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/gvmomi.dll
    .dll windows:6 windows x64

    f8ea8926c0db26789ca15ef512db3be4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/iconv.dll
    .dll windows:6 windows x64

    0a4b54f6d6e0632e747539e85645c94a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/intl.dll
    .dll windows:6 windows x64

    b1609a5afa213774e204949fc55ed727


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/libcurl.dll
    .dll windows:6 windows x64

    5be037a950b4200b7a4536120e234d9d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/libeay32.dll
    .dll windows:6 windows x64

    dd8f10626b82b0fafe231ab786bff83d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/liblber.dll
    .dll windows:5 windows x64

    59a279efc04bd6d06c39783e7b812c4e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/libldap.dll
    .dll windows:5 windows x64

    259d9e5c6648b09ac082d2d00abbce5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/libldap_r.dll
    .dll windows:5 windows x64

    76eee82d14b11354b56a19e5640024b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/libxml2.dll
    .dll windows:6 windows x64

    6166d30d3c527e375696c1f6af288716


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/pcre.dll
    .dll windows:6 windows x64

    77e6aa5114a09083c1c4ba3d4d0a4041


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/ssleay32.dll
    .dll windows:6 windows x64

    c42d6d682efbb38cd9fe98725d4015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/ssoclient.dll
    .dll windows:6 windows x64

    c12c40bc912a668c594963048552cb1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/vixDiskLibVim.dll
    .dll windows:6 windows x64

    967dc696e2d277a060ba706c2e1f6a41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/vixMntapi.dll
    .dll windows:6 windows x64

    0a9e863da1d24da317e5fde1818cd6b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/vmacore.dll
    .dll windows:6 windows x64

    92038a1d507ae44898c8a4a8ac77189e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/vmomi.dll
    .dll windows:6 windows x64

    28989fd650edf4a5e511826db8ae3d22


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lib/vstor2install.bat
    .bat .vbs
  • lib/vstor2uninstall.bat
    .bat .vbs
  • lib/zlib1.dll
    .dll windows:5 windows x64

    018e63f9f73181ffc7b6efcfada320e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vixDiskLib.dll
    .dll windows:6 windows x64

    9502ba35618b2024620ad1d4203a69db


    Code Sign

    Headers

    Imports

    Exports

    Sections