Overview

overview

7

Static

static

3

driver/RNDISMPK.dll

windows7-x64

1

driver/RNDISMPK.dll

windows10-2004-x64

1

driver/rndismpm.dll

windows7-x64

1

driver/rndismpm.dll

windows10-2004-x64

1

driver/rndismpw.dll

windows7-x64

1

driver/rndismpw.dll

windows10-2004-x64

1

driver/usb8023k.sys

windows7-x64

1

driver/usb8023k.sys

windows10-2004-x64

1

driver/usb8023m.sys

windows7-x64

1

driver/usb8023m.sys

windows10-2004-x64

1

driver/usb8023w.sys

windows7-x64

1

driver/usb8023w.sys

windows10-2004-x64

1

fscommand/...up.exe

windows7-x64

7

fscommand/...up.exe

windows10-2004-x64

7

fscommand/...04.pdf

windows7-x64

1

fscommand/...04.pdf

windows10-2004-x64

1

fscommand/RT104.exe

windows7-x64

7

fscommand/RT104.exe

windows10-2004-x64

7

fscommand/...se.exe

windows7-x64

1

fscommand/...se.exe

windows10-2004-x64

1

fscommand/...se.exe

windows7-x64

1

fscommand/...se.exe

windows10-2004-x64

1

fscommand/...nd.exe

windows7-x64

1

fscommand/...nd.exe

windows10-2004-x64

1

fscommand/...um.exe

windows7-x64

7

fscommand/...um.exe

windows10-2004-x64

7

kurulum.exe

windows7-x64

1

kurulum.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2abd8a5789f0ec202e317456ae48bc5e

  • Size

    25.5MB

  • MD5

    2abd8a5789f0ec202e317456ae48bc5e

  • SHA1

    95167f3e125f9d62afeb37ba063c79027637b9fd

  • SHA256

    41b65ed7787740a5553a8aba70fb2ee26d18e954d16636fddb849956ce87eb84

  • SHA512

    4c574b84aae0d564acf7ac3da3f80ed3235a4fc7e186f8bcf815b8b92bc7ce2d53e729edcd6aeeba7a1aa7e9755169f5b3d27bc156a33b99cd86bac4b82a927b

  • SSDEEP

    786432:wPDEWkHs1hfsp7xYWjq4l+DHVd/Hf4YCSYwC3/WW5YSj:wbEWd/Ep7xYWj1l+D1mYCSYw2/WW5lj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 2abd8a5789f0ec202e317456ae48bc5e
    .zip
  • AirTies.ico
  • autorun.inf
  • driver/RNDISMPK.sys
    .dll windows:6 windows x86 arch:x86

    81281826d5160226603248e2647aca73


    Headers

    Imports

    Exports

    Sections

  • driver/bcmdslur.inf
  • driver/broadcom.cat
  • driver/rndismpm.sys
    .dll windows:5 windows x86 arch:x86

    799e94d6de66a90d0559f19db693b4c5


    Headers

    Imports

    Exports

    Sections

  • driver/rndismpw.sys
    .dll windows:5 windows x86 arch:x86

    62c6c065770552943e5fb1d6aba93133


    Headers

    Imports

    Exports

    Sections

  • driver/usb8023k.sys
    .sys windows:6 windows x86 arch:x86

    4c56f1feade2e5f3fc54d7a165afa94d


    Headers

    Imports

    Sections

  • driver/usb8023m.sys
    .sys windows:5 windows x86 arch:x86

    0375c1b2b8d8f2910edef3244fe5c2e0


    Headers

    Imports

    Sections

  • driver/usb8023w.sys
    .sys windows:5 windows x86 arch:x86

    d5e9a88d5d6ff40a8a96298ec562d446


    Headers

    Imports

    Sections

  • fscommand/ADSL_util_Setup.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • fscommand/Doc/RT-104.pdf
    .pdf
  • fscommand/RT104.exe
    .exe windows:4 windows x86 arch:x86

    c6b41176d3a4990ea711be428f8c774a


    Headers

    Imports

    Exports

    Sections

  • fscommand/UtilClose.exe
    .exe windows:4 windows x86 arch:x86

    fbb0adb4dfc61d46beb6898e65a7a256


    Headers

    Imports

    Exports

    Sections

  • fscommand/adslclose.exe
    .exe windows:4 windows x86 arch:x86

    fbb0adb4dfc61d46beb6898e65a7a256


    Headers

    Imports

    Exports

    Sections

  • fscommand/adslsound.exe
    .exe windows:4 windows x86 arch:x86

    fb73a5b0601a39509679a3a38bd406eb


    Headers

    Imports

    Exports

    Sections

  • fscommand/pdf_okuyucu_kurulum.exe
    .exe windows:4 windows x86 arch:x86

    78edf21f658dec92426ece2d04e0ddfc


    Headers

    Imports

    Sections

  • fscommand/welcomeEL.wav
  • fscommand/welcomeEN.wav
  • fscommand/welcomeRU.wav
  • fscommand/welcomeTR.wav
  • kurulum.exe
    .exe windows:4 windows x86 arch:x86

    9e604fa03f90625680ac2f8bef162aff


    Headers

    Imports

    Sections