Overview

overview

7

Static

static

3

AntiSpywareControl.js

windows7-x64

1

AntiSpywareControl.js

windows10-2004-x64

1

CacheDumpControl.js

windows7-x64

1

CacheDumpControl.js

windows10-2004-x64

1

Debug/fgdump.exe

windows7-x64

7

Debug/fgdump.exe

windows10-2004-x64

7

HostDumper.js

windows7-x64

1

HostDumper.js

windows10-2004-x64

1

PWDumpControl.js

windows7-x64

1

PWDumpControl.js

windows10-2004-x64

1

ProtectedS...rol.js

windows7-x64

1

ProtectedS...rol.js

windows10-2004-x64

1

PwDump.exe

windows7-x64

1

PwDump.exe

windows10-2004-x64

1

Release/fgdump.exe

windows7-x64

7

Release/fgdump.exe

windows10-2004-x64

7

ResourceLoader.js

windows7-x64

1

ResourceLoader.js

windows10-2004-x64

1

cachedump.exe

windows7-x64

1

cachedump.exe

windows10-2004-x64

5

cachedump/autocash.pl

windows7-x64

3

cachedump/autocash.pl

windows10-2004-x64

3

cachedump/...mp.exe

windows7-x64

1

cachedump/...mp.exe

windows10-2004-x64

1

cachedump64.exe

windows7-x64

1

cachedump64.exe

windows10-2004-x64

1

fgexec.exe

windows7-x64

1

fgexec.exe

windows10-2004-x64

1

fgexec/Deb...ec.exe

windows7-x64

1

fgexec/Deb...ec.exe

windows10-2004-x64

1

fgexec/Rel...ec.exe

windows7-x64

1

fgexec/Rel...ec.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    44cf98853b30767d8d0ffb595cc44c2a

  • Size

    1.7MB

  • MD5

    44cf98853b30767d8d0ffb595cc44c2a

  • SHA1

    b93fd97c3e056107908658c7662560680f663f52

  • SHA256

    5383d81bc6f5535de414c3448b424aa55b7cb234b35bf97e1e0c5addd2944eca

  • SHA512

    daba6058018f8a38b0f76a925d9022753dd7e3fdb8a2f780331be5976217af99fb4500d794e89a201761bc8bd7d0960d4c57c5a0486c7b9a8b04a7d46417f049

  • SSDEEP

    49152:hOFD6cnG2l3+QBxVgC7mhlgE0+eacAssNgUMyP:KucnG2h+QBpMgE0+/c9s+9k

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 44cf98853b30767d8d0ffb595cc44c2a
    .zip
  • AUTHORS
  • AVStatus.h
  • AntiSpywareControl.cpp
    .js
  • AntiSpywareControl.h
  • COPYING
  • CacheDumpControl.cpp
    .js
  • CacheDumpControl.h
  • Debug/fgdump.exe
    .exe windows:4 windows x86 arch:x86

    c8a6cf8c1bec90b627bdb6937e0a4d96


    Headers

    Imports

    Sections

  • ErrorHandler.cpp
  • ErrorHandler.h
  • HostDumper.cpp
    .js
  • HostDumper.h
  • INSTALL
  • Impersonator.cpp
  • Impersonator.h
  • LogBase.cpp
  • LogBase.h
  • LogFailedWriter.cpp
  • LogFailedWriter.h
  • LogWriter.cpp
  • LogWriter.h
  • Main.cpp
  • McAfeeControl.cpp
  • McAfeeControl.h
  • NetUse.cpp
  • NetUse.h
  • PWDumpControl.cpp
    .js
  • PWDumpControl.h
  • Process.cpp
  • Process.h
  • ProtectedStorageControl.cpp
    .js
  • ProtectedStorageControl.h
  • PwDump.exe
    .exe windows:4 windows x86 arch:x86

    1781f06048a7e58b323f0b9259be798b


    Headers

    Imports

    Sections

  • README
  • RegQuery.cpp
  • RegQuery.h
  • Release/fgdump.exe
    .exe windows:4 windows x86 arch:x86

    fd35e4db9753c3fb74671af9bb4e4e64


    Headers

    Imports

    Sections

  • ResourceLoader.cpp
    .js
  • ResourceLoader.h
  • ServiceControl.cpp
  • ServiceControl.h
  • ShareFinder.cpp
  • ShareFinder.h
  • SophosControl.cpp
  • SophosControl.h
  • StringArray.cpp
  • StringArray.h
  • SymantecAVControl.cpp
  • SymantecAVControl.h
  • TrendControl.cpp
  • TrendControl.h
  • XGetopt.cpp
  • XGetopt.h
  • cachedump.exe
    .exe windows:4 windows x86 arch:x86

    bddfe6be997296991b781fdb913371cb


    Headers

    Imports

    Sections

  • cachedump/autocash.pl
  • cachedump/cachedump.cpp
  • cachedump/cachedump.exe
    .exe windows:4 windows x86 arch:x86

    b6bdadddfdf2339497981a90c3884563


    Headers

    Imports

    Sections

  • cachedump/cachedump.h
  • cachedump/cachedump.sln
  • cachedump/cachedump.vcproj
    .xml
  • cachedump/getpid.cpp
  • cachedump/getpid.h
  • cachedump/lsastuff.cpp
  • cachedump/md5.c
  • cachedump/md5.h
  • cachedump/rc4.c
  • cachedump/rc4.h
  • cachedump/readme.txt
  • cachedump/service.cpp
  • cachedump/version.txt
  • cachedump64.exe
    .exe windows:4 windows x64 arch:x64

    fd79fe570f68ca17237c03003519d3b1


    Headers

    Imports

    Sections

  • fgdump.cpp
  • fgdump.h
  • fgdump.rc
  • fgdump.sln
  • fgdump.vcproj
    .xml
  • fgexec.exe
    .exe windows:4 windows x86 arch:x86

    5652942959a5cb6994ae8b6d76cdbf00


    Headers

    Imports

    Sections

  • fgexec/AUTHORS
  • fgexec/COPYING
  • fgexec/Debug/fgexec.exe
    .exe windows:4 windows x86 arch:x86

    1453fbc48f97e1c7fe3909a06d21ab7c


    Headers

    Imports

    Sections

  • fgexec/INSTALL
  • fgexec/Process.cpp
  • fgexec/Process.h
  • fgexec/README
  • fgexec/Release/fgexec.exe
    .exe windows:4 windows x86 arch:x86

    f5ca537c40e7246de506f3cadd1c9d5a


    Headers

    Imports

    Sections

  • fgexec/XGetopt.cpp
  • fgexec/XGetopt.h
  • fgexec/fgexec.cpp
    .js
  • fgexec/fgexec.vcproj
    .xml
  • fgexec/stdafx.cpp
  • fgexec/stdafx.h
  • lsremora.dll
    .dll windows:4 windows x86 arch:x86

    bb5e3a676545eeb9803b748c9238b292


    Headers

    Imports

    Exports

    Sections

  • lsremora64.dll
    .dll windows:4 windows x64 arch:x64

    50e89823e32eb1d31266289c86e014e8


    Headers

    Imports

    Exports

    Sections

  • pstgdump.exe
    .exe windows:4 windows x86 arch:x86

    f38a14b98597618926f15856879f2f5f


    Headers

    Imports

    Sections

  • pstgdump/AUTHORS
  • pstgdump/COPYING
  • pstgdump/Debug/pstgdump.exe
    .exe windows:4 windows x86 arch:x86

    a90c02abb8e70055e03e9c555fc4eb35


    Headers

    Imports

    Sections

  • pstgdump/INSTALL
  • pstgdump/ProtectedStorage.cpp
  • pstgdump/ProtectedStorage.h
  • pstgdump/README
  • pstgdump/Release/pstgdump.exe
    .exe windows:4 windows x86 arch:x86

    f38a14b98597618926f15856879f2f5f


    Headers

    Imports

    Sections

  • pstgdump/XGetopt.cpp
  • pstgdump/XGetopt.h
  • pstgdump/pstgdump.cpp
  • pstgdump/pstgdump.vcproj
    .xml
  • pstgdump/stdafx.cpp
  • pstgdump/stdafx.h
  • pwdump6/BlowfishStringConvert.h
  • pwdump6/COPYING
  • pwdump6/LsaExt.c
  • pwdump6/LsaExt.vcproj
    .xml
  • pwdump6/PwDump6.cpp
    .js
  • pwdump6/PwDump6.sln
  • pwdump6/PwDump6.vcproj
    .xml
  • pwdump6/README
  • pwdump6/XGetopt.c
  • pwdump6/XGetopt.h
  • pwdump6/blowfish.c
  • pwdump6/blowfish.h
  • pwdump6/config.h
  • pwdump6/lsassthreadstub.c
  • pwdump6/lsassthreadstub.h
  • pwdump6/pwdump.rc
  • pwdump6/pwservice.cpp
  • pwdump6/pwservice.vcproj
    .xml
  • pwdump6/resource.h
  • resource.h
  • servpw.exe
    .exe windows:4 windows x86 arch:x86

    3bfb186df8e2e1fc64ca15663e6f49e8


    Headers

    Imports

    Sections

  • servpw64.exe
    .exe windows:4 windows x64 arch:x64

    5faf95f288ae5e85fff2b949ccbcc6a3


    Headers

    Imports

    Sections

  • stdafx.cpp
  • stdafx.h