Overview

overview

3

Static

static

3

X.exe

windows7-x64

1

X.exe

windows10-2004-x64

1

FM20.dll

windows7-x64

1

FM20.dll

windows10-2004-x64

1

FM20ENU.dll

windows7-x64

1

FM20ENU.dll

windows10-2004-x64

1

Mswinsck.dll

windows7-x64

1

Mswinsck.dll

windows10-2004-x64

1

Server #2.exe

windows7-x64

1

Server #2.exe

windows10-2004-x64

1

server.exe

windows7-x64

1

server.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    04889414d8aa1a2cb102111a3bf22ea6

  • Size

    834KB

  • MD5

    04889414d8aa1a2cb102111a3bf22ea6

  • SHA1

    300e3557f9d55641f7454fe1d314fd884ab8c21f

  • SHA256

    56efed806bc8d688ddb580d9d9981712ef193c28846c9cdddf0eebc1fc51963a

  • SHA512

    d8e8b776cc5504d573b8299b6686629344d2352719167600bccf19d3aef2198fe265e223c9c772a870c74ad0515285ae7e9129e7929b0cf02616553e601ef17b

  • SSDEEP

    24576:8VFUZzeLhzYwkpTapd8V6gWALixhguD0W8SkLR5QWpjoA7dccRv1w:ieS9zYwkpC8VtWUixxQWXkV5QwcAecXw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 04889414d8aa1a2cb102111a3bf22ea6
    .zip
  • Client.zip
    .zip
  • Sound/connected.WAV
  • Sound/disconnected.wav
  • X.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • FM20.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    53c6722b6270f41aab956e1671f43d3b


    Headers

    Imports

    Exports

    Sections

  • FM20ENU.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Mswinsck.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb0275eec9ac31b6d4d44320e576fadb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Readme.txt
  • Server.zip
    .zip
  • Server #2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • server.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections