Overview

overview

7

Static

static

7

extensions...rol.js

windows7-x64

1

extensions...rol.js

windows10-2004-x64

1

ac'tivAid.exe

windows7-x64

7

ac'tivAid.exe

windows10-2004-x64

7

extensions...ew.exe

windows7-x64

7

extensions...ew.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99f7d0a7921458577c7b6aeea4d35ac13651dd11793d22879a653bba032a325e.zip.zip

  • Size

    947KB

  • MD5

    36f9bb1fc11c0ba1bd99957623743428

  • SHA1

    95bedc1392fa5173737bc12c0f46c7b59c6c22c9

  • SHA256

    f99a6e138372b0ef8876506751656477627a0376e951d3414e0603e973aee39e

  • SHA512

    460bedb2bc89d648d0a2e55e09e90ef15ed7e6e06e303f93df387a4a2d0a4ac0883ef1c56b87c9f751b599bdba058eeeee8c203ea4208dc06498b3d4b93ca53c

  • SSDEEP

    12288:aOCr59Vv6bGxbvcEtwUnZ2uTebpaDbfVawFyPOKxaWayowXaseMkctVlUW2TQL4H:4rHLKFuTecDTSxafR2alTQLf8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 99f7d0a7921458577c7b6aeea4d35ac13651dd11793d22879a653bba032a325e.zip.zip
    .zip

    Password: infected

  • 99f7d0a7921458577c7b6aeea4d35ac13651dd11793d22879a653bba032a325e.zip
    .zip
  • 0522-210.txt
  • activaid.zip
    .zip
  • ac'tivAid Changelog.txt
  • ac'tivAid LiesMich.txt
  • ac'tivAid.ahk
  • ac'tivAid_main.ahk
  • development/Eigene Erweiterungen.txt
  • development/Language-File Creator.ahk
  • development/Template.ahk
  • extensions/UserHotkeys-scripts/320MPH New.ahk
  • extensions/UserHotkeys-scripts/320MPH Old.ahk
  • extensions/_header.ahk
  • extensions/_main.ahk
  • extensions/ac'tivAid_CommandLine.ahk
  • extensions/ac'tivAid_Eject.ahk
  • extensions/ac'tivAid_Eject_eject.gif
    .gif
  • extensions/ac'tivAid_FilePaste.ahk
  • extensions/ac'tivAid_FreeSpace.ahk
  • extensions/ac'tivAid_HotStrings.ahk
  • extensions/ac'tivAid_LeoToolTip.ahk
  • extensions/ac'tivAid_LikeDirkey-Menu.ahk
  • extensions/ac'tivAid_LikeDirkey.ahk
  • extensions/ac'tivAid_MusicControl.ahk
    .js
  • extensions/ac'tivAid_MusicControl_mute.gif
    .gif
  • extensions/ac'tivAid_MusicControl_vol.gif
    .gif
  • extensions/ac'tivAid_MusicControl_vol.wav
  • extensions/ac'tivAid_MusicControl_vol2.gif
    .gif
  • extensions/ac'tivAid_NewFolder.ahk
  • extensions/ac'tivAid_PackAndGo.ahk
  • extensions/ac'tivAid_QuickChangeDir Indexer.ahk
  • extensions/ac'tivAid_QuickChangeDir.ahk
  • extensions/ac'tivAid_QuickNote.ahk
  • extensions/ac'tivAid_QuickNote.wav
  • extensions/ac'tivAid_ReadingRuler.ahk
  • extensions/ac'tivAid_RecentDirs.ahk
  • extensions/ac'tivAid_ThesauroToolTip.ahk
  • extensions/ac'tivAid_UserHotkeys.ahk
  • extensions/ac'tivAid_WebSearch on MButton.ahk
  • extensions/ac'tivAid_WebSearch.ahk
  • extensions/ac'tivAid_WindowToBottom.ahk
  • extensions/ac'tivAid_WindowsControl.ahk
  • settings/QuickNote.txt
  • settings/WebSearch/AutoHotkey-Forum.ico
  • settings/WebSearch/Deutsches Wrterbuch.ico
  • settings/WebSearch/Google.ico
  • settings/WebSearch/Heise-Newsticker.ico
  • settings/WebSearch/LEO.ico
  • settings/WebSearch/Wikipedia.ico
  • settings/WebSearch/Wortschatz-Lexikon.ico
  • settings/ac'tivAid.ico
  • settings/ac'tivAid_off.ico
  • settings/ac'tivAid_on.ico
  • activaid_exe.zip
    .zip
  • ac'tivAid Changelog.txt
  • ac'tivAid LiesMich.txt
  • ac'tivAid.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • extensions/UserHotkeys-scripts/320MPH New.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • settings/QuickNote.txt
  • settings/WebSearch/AutoHotkey-Forum.ico
  • settings/WebSearch/Deutsches Wrterbuch.ico
  • settings/WebSearch/Google.ico
  • settings/WebSearch/Heise-Newsticker.ico
  • settings/WebSearch/LEO.ico
  • settings/WebSearch/Wikipedia.ico
  • settings/WebSearch/Wortschatz-Lexikon.ico
  • versions.ini