Overview

overview

7

Static

static

3

5318183dad...41.exe

windows7-x64

7

5318183dad...41.exe

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

1

HomeClean.exe

windows7-x64

1

HomeClean.exe

windows10-2004-x64

1

HomeCleanLaunch.exe

windows7-x64

3

HomeCleanLaunch.exe

windows10-2004-x64

1

HomeCleanUp.exe

windows7-x64

1

HomeCleanUp.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5318183dad4bb06391577984b8965241

  • Size

    2.5MB

  • MD5

    5318183dad4bb06391577984b8965241

  • SHA1

    ccce63039966468a1b63075546affa33170049ac

  • SHA256

    b22ddb3c26ea74db58c31365944e663d76252fd9a95ee427b31663bbabb054e4

  • SHA512

    7853c4f9f6cd90a7b4cb05a43d9ded3e2c81b453f07f791b6450b73f6205dae1cd9ded94ea1bf6188b7e6667f986063256b9bf36267f715160ec2572ffc646b2

  • SSDEEP

    49152:02LJXodntOmgMSHtZID7ep8L/88DoPdN+yFkjQgUFHgaNoU5ZFbDm+BDB:pJXmtDgM+6D7MIDoPTJ2jFaNyKB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 5318183dad4bb06391577984b8965241
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • HomeClean.exe
    .exe windows:4 windows x86 arch:x86

    c0e7475a518a532fcd1c1aa491050b24


    Headers

    Imports

    Sections

  • HomeCleanLaunch.exe
    .exe windows:4 windows x86 arch:x86

    8d6d1ba65cc3f02a565c74da77fcdefd


    Headers

    Imports

    Sections

  • HomeCleanUp.exe
    .exe windows:4 windows x86 arch:x86

    8a5cfd1a3ec6e70e9b630a4f43976542


    Headers

    Imports

    Sections

  • data/dt.cab
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections