Resubmissions

11/01/2024, 05:17

240111-fyyknsgag2 8

11/01/2024, 05:13

240111-fwve8sfbfq 8

General

  • Target

    529fc92a8b4c57ce378e2f47ab8f3fa2

  • Size

    8.0MB

  • MD5

    529fc92a8b4c57ce378e2f47ab8f3fa2

  • SHA1

    be55d31d3218f8da0a3bef9c18364e0c4f9c39ed

  • SHA256

    aa0fae6cc1e9f7c43173722e0483bbb28147f3dada5bc81539737f30ab05c0ce

  • SHA512

    d3fd5b370326c8559997593bb00ae7f32c12588d7b1be70161d59916e7d28909085520b9ea52ee6baa345ccb35c56f40d287412f219fdbcf4046d469db91fb1c

  • SSDEEP

    196608:STTComzWcvogZwSNf1A4LlEjNJAwSZeZ4NV:y2fzHogZwST5EjNSwQV

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

Files

  • 529fc92a8b4c57ce378e2f47ab8f3fa2
    .rar
  • Lightening Cleaner 3.0/LighteningCleaner.exe
    .exe windows:4 windows x86 arch:x86

    137828a4a44c35f16ca905592e6fe9a6


    Code Sign

    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/license_cn.doc
    .doc windows office2003
  • Lightening Cleaner 3.0/license_en.pdf
    .pdf
    • http://www.treas.gov/ofac/

    • http://www.trendmicro.com

    • http://trendmicro.com

  • Lightening Cleaner 3.0/misc/activeupdate/GetServer.ini
  • Lightening Cleaner 3.0/misc/activeupdate/aucfg.ini
  • Lightening Cleaner 3.0/misc/activeupdate/cert5.db
  • Lightening Cleaner 3.0/misc/activeupdate/ciuas32.dll
    .dll windows:4 windows x86 arch:x86

    66c27965e1dc1bbf2d8bbdc94aaedff9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/activeupdate/ciussi32.dll
    .dll windows:4 windows x86 arch:x86

    8d33c4b43a94366f4386be378aee0afb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/activeupdate/patch.exe
    .exe windows:4 windows x86 arch:x86

    6735e8230ab3eae61a8a9d09e312aad6


    Code Sign

    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/activeupdate/patchbld.dll
    .dll windows:4 windows x86 arch:x86

    6de8fb9a21b404042c8324da50ece179


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/activeupdate/patchw32.DLL
    .dll windows:1 windows x86 arch:x86

    8f296cd7497fd33e575100bd64339788


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/activeupdate/tmupdate.dll
    .dll windows:4 windows x86 arch:x86

    659383449790d42455b8f7d15265d12c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/activeupdate/x500.db
  • Lightening Cleaner 3.0/misc/au.dll
    .dll windows:4 windows x86 arch:x86

    31212801b30e701e347ad5feb8b8228e


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/autoupdate.exe
    .exe windows:4 windows x86 arch:x86

    9f288b215dc1d1fb111e1c7164bac6b8


    Code Sign

    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/btn20.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/btn20_hover.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/btn35.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/btn35_hover.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/btnTool.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/btnTool_hover.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/btnbk.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/cb_check.png
    .png
  • Lightening Cleaner 3.0/misc/cb_nocheck.png
    .png
  • Lightening Cleaner 3.0/misc/cfg.ini
  • Lightening Cleaner 3.0/misc/config.xml
  • Lightening Cleaner 3.0/misc/fscleaner.dll
    .dll windows:4 windows x86 arch:x86

    b9ddb4319078d62b12534e9cf13afc09


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    68a82f89c3fde2fdb45bbeddb19a9697


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/hc_core.dll
    .dll windows:4 windows x86 arch:x86

    fb910e52762f8ef1e9499aad1ff23c49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/home.png
    .png
  • Lightening Cleaner 3.0/misc/icon_clean.png
    .png
  • Lightening Cleaner 3.0/misc/icon_scan.png
    .png
  • Lightening Cleaner 3.0/misc/icrchdler.dll
    .dll windows:4 windows x86 arch:x86

    539b6a706edf8e00b5a55e98fc8c0949


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/immune.png
    .png
  • Lightening Cleaner 3.0/misc/index.dll
    .dll windows:4 windows x86 arch:x86

    ee841b2d08f3205169b2c5b806b57efa


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/irobot.dll
    .dll windows:5 windows x86 arch:x86

    eddbdfcb14e3fa806c01a61f8c6338a5


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/lan/en.ini
  • Lightening Cleaner 3.0/misc/lan/sc.ini
  • Lightening Cleaner 3.0/misc/lan/tc.ini
  • Lightening Cleaner 3.0/misc/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    60efbe4ee5068898faa430656ec15ad3


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    f0045e8a39c0df5b9797e5dfd59f97ff


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/libexpat.dll
    .dll windows:4 windows x86 arch:x86

    727518929ac61e1912d18bb38178c42d


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/lightening.exe
    .exe windows:4 windows x86 arch:x86

    1abf21d1921f9583989ba56609f805d9


    Code Sign

    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/loading.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/log.dll
    .dll windows:4 windows x86 arch:x86

    0247298adfd3370e4c748f46b0ff9119


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/mainbk.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/menu_active.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/menu_hover.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/menu_normal.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/menuicon.png
    .png
  • Lightening Cleaner 3.0/misc/mfc80u.dll
    .dll windows:4 windows x86 arch:x86

    ec3a3e73c915b29faaecfea40905d0c8


    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/microsoft.vc80.crt.manifest
    .xml
  • Lightening Cleaner 3.0/misc/microsoft.vc80.mfc.manifest
    .xml
  • Lightening Cleaner 3.0/misc/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    9fb682fe34f5d965faf4cf424fa6c000


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    8eb98c77a1ada89df5027bd5bf01c2f6


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/nav.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/pattern/blacklist.dat
  • Lightening Cleaner 3.0/misc/pattern/filepattern.ptn
  • Lightening Cleaner 3.0/misc/pattern/ptnimmune.dat
  • Lightening Cleaner 3.0/misc/pattern/ssapiptn.da6
  • Lightening Cleaner 3.0/misc/perficrcperfmonmgr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    97b84c325f3ee32e23fb9d4492a0af02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/plugin.ini
  • Lightening Cleaner 3.0/misc/progress.jpg
    .jpg
  • Lightening Cleaner 3.0/misc/protect.dll
    .dll windows:4 windows x86 arch:x86

    a80c1205ebe3fefd87e61a5700e048d6


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/protect.png
    .png
  • Lightening Cleaner 3.0/misc/radio.png
    .png
  • Lightening Cleaner 3.0/misc/radio_check.png
    .png
  • Lightening Cleaner 3.0/misc/scan.png
    .png
  • Lightening Cleaner 3.0/misc/sep_left.gif
    .gif
  • Lightening Cleaner 3.0/misc/sep_middle.gif
    .gif
  • Lightening Cleaner 3.0/misc/sep_right.gif
    .gif
  • Lightening Cleaner 3.0/misc/setting.dll
    .dll windows:4 windows x86 arch:x86

    1a7bf0968616f222258237a713619798


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/setting.ini
  • Lightening Cleaner 3.0/misc/setting.png
    .png
  • Lightening Cleaner 3.0/misc/spyware.dll
    .dll windows:4 windows x86 arch:x86

    c43596be8b9bd978762d4b68bfb5bf11


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/spyware.png
    .png
  • Lightening Cleaner 3.0/misc/ssapi.log
  • Lightening Cleaner 3.0/misc/ssapi32.dll
    .dll windows:4 windows x86 arch:x86

    8ca54bf9b4fc8cf17071a17dd3a2dad6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    21f6fa139e45c8a784ff36ad5074ec73


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/tmaiofc.sys
    .sys windows:5 windows x86 arch:x86

    37931adbe2e734a8fa8c6d4070a2a7fc


    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/tmcomm.sys
    .sys windows:6 windows x86 arch:x86

    4e665333a0b0ec32a40538796f7fb7b4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/tmengdrv.dll
    .dll windows:4 windows x86 arch:x86

    154c1b0aadea3fea3dd9483391aad81f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/tool.dll
    .dll windows:4 windows x86 arch:x86

    3014edc0ab5dead120b2a7fa519c4011


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/tool.png
    .png
  • Lightening Cleaner 3.0/misc/tool/antiarp.exe
    .exe windows:5 windows x86 arch:x86

    761a50cbffa66ef18f7fa5fc25d12769


    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/tool/crctool.exe
    .exe windows:4 windows x86 arch:x86

    17f7672a94e9ea1d2f812b549823f5cb


    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/tool/genhexstringfromstring.exe
    .exe windows:4 windows x86 arch:x86

    902b1db537fc6071289ab50925e23296


    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/tool/tdme
    .exe windows:4 windows x86 arch:x86

    6c75b6a494b7751db507f87c2e42b852


    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/tool/testagentreportreader.exe
    .exe windows:4 windows x86 arch:x86

    5433803ae56bfb29487fb6c3eb59be16


    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/tool/usbmon.exe
    .exe windows:4 windows x86 arch:x86

    d9168a0c6214324aa606f42527453983


    Headers

    Imports

    Sections

  • Lightening Cleaner 3.0/misc/tool_default.png
    .png
  • Lightening Cleaner 3.0/misc/update.dll
    .dll windows:4 windows x86 arch:x86

    c066da7a4061c623825e9bba48780014


    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/update.png
    .png
  • Lightening Cleaner 3.0/misc/vsapi32.dll
    .dll windows:4 windows x86 arch:x86

    663c07d3533877b7a4cc6c116800acb9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/misc/vstlib32.dll
    .dll windows:4 windows x86 arch:x86

    efd3dc97d639046ba190f6017f1b9539


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lightening Cleaner 3.0/readme.txt
  • Lightening Cleaner 3.0/what's new.txt
  • Lightening Cleaner 3.0/新云软件.url
    .url