Overview

overview

3

Static

static

3

Temp/Setup/FB.exe

windows7-x64

1

Temp/Setup/FB.exe

windows10-2004-x64

1

Temp/Setup/JAV.exe

windows7-x64

1

Temp/Setup/JAV.exe

windows10-2004-x64

1

Temp/Setup/MCB.exe

windows7-x64

1

Temp/Setup/MCB.exe

windows10-2004-x64

1

Temp/Setup/SUMO.exe

windows7-x64

1

Temp/Setup/SUMO.exe

windows10-2004-x64

1

Temp/Setup/Setup.exe

windows7-x64

1

Temp/Setup/Setup.exe

windows10-2004-x64

1

Temp/Setup/StdWzd.dll

windows7-x64

1

Temp/Setup/StdWzd.dll

windows10-2004-x64

3

Temp/Setup/Tips.ps1

windows7-x64

1

Temp/Setup/Tips.ps1

windows10-2004-x64

1

Temp/Setup/VNukE.exe

windows7-x64

1

Temp/Setup/VNukE.exe

windows10-2004-x64

1

Temp/Setup/VScr32.exe

windows7-x64

1

Temp/Setup/VScr32.exe

windows10-2004-x64

1

Temp/Setup...er.exe

windows7-x64

1

Temp/Setup...er.exe

windows10-2004-x64

1

Temp/Setup...er.exe

windows7-x64

1

Temp/Setup...er.exe

windows10-2004-x64

1

Temp/Setup/VTJOOB.exe

windows7-x64

1

Temp/Setup/VTJOOB.exe

windows10-2004-x64

1

Temp/Setup/VcLoNe.exe

windows7-x64

1

Temp/Setup/VcLoNe.exe

windows10-2004-x64

1

Temp/Setup/about.htm

windows7-x64

1

Temp/Setup/about.htm

windows10-2004-x64

1

Temp/Setup/alias1.ps1

windows7-x64

1

Temp/Setup/alias1.ps1

windows10-2004-x64

1

Temp/Setup...es.htm

windows7-x64

1

Temp/Setup...es.htm

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    216f4b392d4b58d40d8adf1f08211824

  • Size

    2.9MB

  • MD5

    216f4b392d4b58d40d8adf1f08211824

  • SHA1

    5f277db3aab4d18380fbc3d75d96985a4007676f

  • SHA256

    2fee1b8af2bfd8bc7639c5d2e8c5c2baa77742b3e9f74bb12643178742187963

  • SHA512

    291e0fb956c0a11a37ec1360c66b8c526f40ab02dc376c6e440d07090017416cfef0bcc11e34a667694b99e48c5571dc4386d416225cc635159eabc7f62f53fe

  • SSDEEP

    49152:jCzbYDG5Y2o7FO20wvkIYZ9cRR7QMpNxPwa35u+wngBHYo5StzGVTXa:+Y1hl0wsIYfcRNTNxXIgBHdjBXa

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 216f4b392d4b58d40d8adf1f08211824
    .cab
  • Temp/Setup/!!HEART0.TXT
  • Temp/Setup/!!HEART1.TXT
  • Temp/Setup/!!HEART2.TXT
  • Temp/Setup/!!HEART3.TXT
  • Temp/Setup/!!HEART4.TXT
  • Temp/Setup/!!HEART5.TXT
  • Temp/Setup/!!HEART6.TXT
  • Temp/Setup/!!HEART7.TXT
  • Temp/Setup/!!HEART8.TXT
  • Temp/Setup/!!HEART9.TXT
  • Temp/Setup/!!hearts4.txt
  • Temp/Setup/!!hearts6.txt
  • Temp/Setup/!!hearts7.txt
  • Temp/Setup/!!hearts8.txt
  • Temp/Setup/!!hearts9.txt
  • Temp/Setup/0.bmp
  • Temp/Setup/1.bmp
  • Temp/Setup/10.bmp
  • Temp/Setup/11.bmp
  • Temp/Setup/12.bmp
  • Temp/Setup/12Roses.txt
  • Temp/Setup/13.bmp
  • Temp/Setup/14.bmp
  • Temp/Setup/15.bmp
  • Temp/Setup/2.bmp
  • Temp/Setup/3.bmp
  • Temp/Setup/4.bmp
  • Temp/Setup/5.bmp
  • Temp/Setup/6.bmp
  • Temp/Setup/7.bmp
  • Temp/Setup/7s.txt
  • Temp/Setup/8.bmp
  • Temp/Setup/9.bmp
  • Temp/Setup/AKISS.TXT
  • Temp/Setup/ANGROSE.TXT
  • Temp/Setup/Accept.FLD
  • Temp/Setup/BALLOON.TXT
  • Temp/Setup/BALOONS.TXT
  • Temp/Setup/BEARS.TXT
  • Temp/Setup/Batman.txt
  • Temp/Setup/Beavis-n-buthed.txt
  • Temp/Setup/CAKE2.TXT
  • Temp/Setup/CAKE3.TXT
  • Temp/Setup/Cats.txt
  • Temp/Setup/Chat.wav
  • Temp/Setup/Client.FLD
  • Temp/Setup/Coke.txt
  • Temp/Setup/Couple.txt
  • Temp/Setup/DYNAMITE.TXT
  • Temp/Setup/Dalnet.PoP
  • Temp/Setup/Dance.txt
  • Temp/Setup/DccChat.FLD
  • Temp/Setup/DccSend.FLD
  • Temp/Setup/ECHO.FLD
  • Temp/Setup/FB.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Temp/Setup/FROG1.TXT
  • Temp/Setup/FUCKOFF.TXT
  • Temp/Setup/FUCKOFF1.TXT
  • Temp/Setup/FUCKOFF2.TXT
  • Temp/Setup/FUN.TXT
  • Temp/Setup/File.wav
  • Temp/Setup/Finger.FLD
  • Temp/Setup/Fish.txt
  • Temp/Setup/Flowers.txt
  • Temp/Setup/Font.txt
  • Temp/Setup/Fserve.txt
  • Temp/Setup/GREETHUG.TXT
  • Temp/Setup/Goaway.txt
  • Temp/Setup/GoodBye.txt
  • Temp/Setup/HOTTUB.TXT
  • Temp/Setup/HOTTUB2.TXT
  • Temp/Setup/Heart.txt
  • Temp/Setup/Heartbeat.txt
  • Temp/Setup/Hello.txt
  • Temp/Setup/Hello2.txt
  • Temp/Setup/Hour.wav
  • Temp/Setup/Hug.txt
  • Temp/Setup/HugsBig.txt
  • Temp/Setup/ILOVEYOU.TXT
  • Temp/Setup/Invited.wav
  • Temp/Setup/Ircops.pop
  • Temp/Setup/Island.txt
  • Temp/Setup/JAV.INI
  • Temp/Setup/JAV.exe
    .exe windows:4 windows x86 arch:x86

    38fd7c7719b9b68260cc0808c149f529


    Headers

    Imports

    Sections

  • Temp/Setup/Join.wav
  • Temp/Setup/K9.PoP
  • Temp/Setup/KEWLSMIL.TXT
  • Temp/Setup/KISSING.TXT
  • Temp/Setup/KISSYOU.TXT
  • Temp/Setup/Kewl.txt
  • Temp/Setup/Kiss.txt
  • Temp/Setup/KissAss.txt
  • Temp/Setup/LIPS.TXT
  • Temp/Setup/LOGOUT.TXT
  • Temp/Setup/LOL.TXT
  • Temp/Setup/LOLLIPOP.TXT
  • Temp/Setup/License.txt
  • Temp/Setup/LittleAngel.txt
  • Temp/Setup/LoL1.wav
  • Temp/Setup/LoL2.wav
  • Temp/Setup/LoL3.wav
  • Temp/Setup/LoL4.wav
  • Temp/Setup/LoL5.wav
  • Temp/Setup/LoL6.wav
  • Temp/Setup/Love_Birds.txt
  • Temp/Setup/Love_Birds2.txt
  • Temp/Setup/MCB.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Temp/Setup/MONALISA.TXT
  • Temp/Setup/MOON.TXT
  • Temp/Setup/MOOO.TXT
  • Temp/Setup/MOUSE.TXT
  • Temp/Setup/MOUSE2.TXT
  • Temp/Setup/Mirc.ini
  • Temp/Setup/Nananana.txt
  • Temp/Setup/NetSplitz.txt
  • Temp/Setup/NukeTheNet.txt
  • Temp/Setup/OPMOBIL.TXT
  • Temp/Setup/Op.wav
  • Temp/Setup/PEPSICAN.TXT
  • Temp/Setup/PINKROSE.TXT
  • Temp/Setup/POOF!!.TXT
  • Temp/Setup/Page.wav
  • Temp/Setup/Ping.FLD
  • Temp/Setup/Pizza.txt
  • Temp/Setup/Ports.pop
  • Temp/Setup/Private.FLD
  • Temp/Setup/RLicense.txt
  • Temp/Setup/ROS.TXT
  • Temp/Setup/ROSE1.TXT
  • Temp/Setup/ROSE3.TXT
  • Temp/Setup/ROSE5.TXT
  • Temp/Setup/ROSE9.TXT
  • Temp/Setup/ROSES12.TXT
  • Temp/Setup/ROZE.TXT
  • Temp/Setup/RReadme.txt
  • Temp/Setup/Readme.txt
  • Temp/Setup/Roadrnnr.txt
  • Temp/Setup/Rose.txt
  • Temp/Setup/Rose2.txt
  • Temp/Setup/Roses.txt
  • Temp/Setup/SEAHORSE.TXT
  • Temp/Setup/SEEYOU.TXT
  • Temp/Setup/SEXYBOD.TXT
  • Temp/Setup/SKULL.TXT
  • Temp/Setup/SMBUTFLY.TXT
  • Temp/Setup/SMHEART.TXT
  • Temp/Setup/SMILE.TXT
  • Temp/Setup/SMILEY.TXT
  • Temp/Setup/SMILEYS2.TXT
  • Temp/Setup/SMILIE.TXT
  • Temp/Setup/SMROSE.TXT
  • Temp/Setup/SUMO.EXE
    .exe windows:4 windows x86 arch:x86

    86dbf85c98a5b4225edd608fb7647497


    Headers

    Imports

    Sections

  • Temp/Setup/Send.FLD
  • Temp/Setup/Setup.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Temp/Setup/Setup.sss
  • Temp/Setup/Shut.wav
  • Temp/Setup/Start.wav
  • Temp/Setup/StartUp.Mrc
  • Temp/Setup/StdWzd.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Temp/Setup/Swear.Mrc
  • Temp/Setup/Swear.pop
  • Temp/Setup/TANKS.TXT
  • Temp/Setup/TEDDY.TXT
  • Temp/Setup/TEDDYB.TXT
  • Temp/Setup/TEDDYROS.TXT
  • Temp/Setup/TEDDYS.TXT
  • Temp/Setup/TWEETY.TXT
  • Temp/Setup/TakeOver.wav
  • Temp/Setup/Teddyrs.txt
  • Temp/Setup/Thx.wav
  • Temp/Setup/Time.FLD
  • Temp/Setup/Tips.PoP
  • Temp/Setup/Tips.txt
    .ps1
  • Temp/Setup/Ultra.FLD
  • Temp/Setup/UserInfo.FLD
  • Temp/Setup/VBack.bmp
  • Temp/Setup/VMain.BMP
  • Temp/Setup/VNukE.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Temp/Setup/VScr2000.ico
  • Temp/Setup/VScr32.exe
    .exe windows:1 windows x86 arch:x86

    d40cad94b5a31b8b735421d3f39bcda5


    Headers

    Imports

    Exports

    Sections

  • Temp/Setup/VTJBOMBER.INI
  • Temp/Setup/VTJBomber.exe
    .exe windows:4 windows x86 arch:x86

    3db732ffa3dc1cfac73adc8e1ab50096


    Headers

    Imports

    Sections

  • Temp/Setup/VTJNUKER.INI
  • Temp/Setup/VTJNuker.exe
    .exe windows:4 windows x86 arch:x86

    9f78f94084e30a94e2144123447b5b93


    Headers

    Imports

    Sections

  • Temp/Setup/VTJOOB.exe
    .exe windows:4 windows x86 arch:x86

    a89e063d8d0a01949e7c2748e6a8d2fe


    Headers

    Imports

    Sections

  • Temp/Setup/VTbar.bmp
  • Temp/Setup/VTheme.Thm
  • Temp/Setup/VTheme0.Thm
  • Temp/Setup/VTheme1.Thm
  • Temp/Setup/VTheme10.Thm
  • Temp/Setup/VTheme11.Thm
  • Temp/Setup/VTheme12.Thm
  • Temp/Setup/VTheme13.Thm
  • Temp/Setup/VTheme14.Thm
  • Temp/Setup/VTheme15.Thm
  • Temp/Setup/VTheme16.Thm
  • Temp/Setup/VTheme2.Thm
  • Temp/Setup/VTheme3.Thm
  • Temp/Setup/VTheme4.Thm
  • Temp/Setup/VTheme5.Thm
  • Temp/Setup/VTheme6.Thm
  • Temp/Setup/VTheme7.Thm
  • Temp/Setup/VTheme8.Thm
  • Temp/Setup/VTheme9.Thm
  • Temp/Setup/VcLoNe.Mrc
  • Temp/Setup/VcLoNe.PoP
  • Temp/Setup/VcLoNe.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Temp/Setup/VerReply.FLD
  • Temp/Setup/Version.FLD
  • Temp/Setup/VirusScript2000.txt
  • Temp/Setup/Vservers.Mrc
  • Temp/Setup/Vstart1.mrc
  • Temp/Setup/Vstart2.mrc
  • Temp/Setup/Vstart3.mrc
  • Temp/Setup/W.PoP
  • Temp/Setup/WOLF.TXT
  • Temp/Setup/WhatsNew.txt
  • Temp/Setup/X.PoP
  • Temp/Setup/a.txt
  • Temp/Setup/about.htm
    .html
  • Temp/Setup/acnvrule.gif
    .gif
  • Temp/Setup/addrbk.ini
  • Temp/Setup/address.buk
  • Temp/Setup/alarm.wav
  • Temp/Setup/alias1.ini
    .ps1
  • Temp/Setup/alias2.ini
  • Temp/Setup/alias3.ini
  • Temp/Setup/alias4.ini
  • Temp/Setup/alias5.ini
  • Temp/Setup/alias6.ini
  • Temp/Setup/alias7.ini
  • Temp/Setup/aliases.htm
    .html
  • Temp/Setup/assault.exe
    .exe windows:4 windows x86 arch:x86

    efe58a241df7e9b7c95a917038e60642


    Headers

    Imports

    Sections

  • Temp/Setup/bi.txt
  • Temp/Setup/ch.wav
  • Temp/Setup/cia.txt
  • Temp/Setup/click.exe
    .exe windows:4 windows x86 arch:x86

    5f61498830ce0fab681a67a193bd17c5


    Headers

    Imports

    Sections

  • Temp/Setup/clonesc.ini
  • Temp/Setup/cnvbkgnd.jpg
    .jpg
  • Temp/Setup/cprotm.gif
    .gif
  • Temp/Setup/cseen.bat
  • Temp/Setup/d_info.txt
  • Temp/Setup/data.ini
  • Temp/Setup/delseen.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Temp/Setup/disable.wav
  • Temp/Setup/discon.wav
  • Temp/Setup/enable.wav
  • Temp/Setup/events.ini
  • Temp/Setup/finger.txt
  • Temp/Setup/greet.txt
  • Temp/Setup/hit.wav
  • Temp/Setup/hotkeys.htm
    .html
  • Temp/Setup/hotkeys.mrc
  • Temp/Setup/icmpwtch.exe
    .exe windows:4 windows x86 arch:x86

    eb9017803b0134e59ca1fc605f571cbc


    Headers

    Imports

    Sections

  • Temp/Setup/impres.wav
  • Temp/Setup/index.htm
    .html
  • Temp/Setup/kicks.txt
  • Temp/Setup/l_info.txt
  • Temp/Setup/language.ini
  • Temp/Setup/mIRCpills.txt
  • Temp/Setup/mail.bmp
  • Temp/Setup/mail.mrc
  • Temp/Setup/mirc.hlp
  • Temp/Setup/musicscr.ini
  • Temp/Setup/n1.txt
  • Temp/Setup/n2.txt
  • Temp/Setup/netbus.ini
  • Temp/Setup/nnabber.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Temp/Setup/notify.wav
  • Temp/Setup/nukes.gif
    .gif
  • Temp/Setup/open.wav
  • Temp/Setup/popupm.gif
    .gif
  • Temp/Setup/popupn.gif
    .gif
  • Temp/Setup/popups.gif
    .gif
  • Temp/Setup/popups.htm
    .html
  • Temp/Setup/popups.ini
  • Temp/Setup/protect.htm
    .html
  • Temp/Setup/protm.gif
    .gif
  • Temp/Setup/r_Info.txt
  • Temp/Setup/raw.ini
  • Temp/Setup/rp_info.txt
  • Temp/Setup/rpopups.ini
  • Temp/Setup/rpopups0.ini
  • Temp/Setup/rpopups1.ini
  • Temp/Setup/rpopups2.ini
  • Temp/Setup/rr-paint.mrc
  • Temp/Setup/rr-paint.rap
  • Temp/Setup/s_info.txt
  • Temp/Setup/scan.PoP
  • Temp/Setup/seenscr.ini
  • Temp/Setup/servers.ini
  • Temp/Setup/settings.htm
    .html
  • Temp/Setup/settings.ini
  • Temp/Setup/snd_info.txt
  • Temp/Setup/sndlist.mrc
  • Temp/Setup/sprotm.gif
    .gif
  • Temp/Setup/sprotm2.gif
    .gif
  • Temp/Setup/sr.txt
  • Temp/Setup/sys_info.txt
  • Temp/Setup/t_info.txt
  • Temp/Setup/telnet.mrc
  • Temp/Setup/tips.htm
    .html
  • Temp/Setup/urls.ini
  • Temp/Setup/users.ini
  • Temp/Setup/utils.htm
    .html
  • Temp/Setup/v2000.htm
    .html
  • Temp/Setup/variables.ini
  • Temp/Setup/vctcp.ini
  • Temp/Setup/vs.htm
    .html
  • Temp/Setup/vs.wav
  • Temp/Setup/war.htm
    .html
  • Temp/Setup/war_info.txt
  • Temp/Setup/warm.gif
    .gif
  • Temp/Setup/whatsnew.htm
    .html
  • Temp/Setup/yasarozg.htm
    .html