General

  • Target

    58be3c3de75205fc472182b3252d82c4

  • Size

    1.6MB

  • MD5

    58be3c3de75205fc472182b3252d82c4

  • SHA1

    24863ffcb5959536ffe36ddad3f3054418767c25

  • SHA256

    eb40f8017e4e96c12878d2fa338f63c8ede67a98d0cb06e359beef7adeef9315

  • SHA512

    4fc4190f820419f30c997902428027ca88103a298aa612b93862ad38db12b84b1215674d13f2d3e31a89e83d14d593623b87d0bc572308163409c0f1a8bb8904

  • SSDEEP

    49152:IGAHmdMt4/9F4RS8xK2Hw05Yg/prkbb1zweG:lkQ04/fLO5HwUIlS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 58be3c3de75205fc472182b3252d82c4
    .rar
  • CloudBox_setup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/processwork.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • CloudBox.exe
    .exe windows:5 windows x86 arch:x86

    4dc0cb1a279086261336b75b3f6ede75


    Code Sign

    Headers

    Imports

    Sections

  • CloudBoxShellExt.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    53dad2554a835d1dfb8e9b9f301f99d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CloudBoxShellExt_64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    ed0d68e439687a2618d438e16cf64e4d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DTXmlParser.dll
    .dll windows:5 windows x86 arch:x86

    32e8873ba5f52d70a89947a498b747be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Helper.dll
    .dll windows:5 windows x86 arch:x86

    fa9a5974dbd3732e4ab93304f87fbd16


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MthreadLib71.dll
    .dll windows:5 windows x86 arch:x86

    00a4f8f7b74b632117529202ca90081f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupTo.exe
    .exe windows:5 windows x86 arch:x86

    4f5bfe7287caa4340d41b4533450faf0


    Headers

    Imports

    Sections

  • UnSetupTo.exe
    .exe windows:5 windows x86 arch:x86

    57e2267b7412b2a25a6005962f043f78


    Code Sign

    Headers

    Imports

    Sections

  • Updater.exe
    .exe windows:5 windows x86 arch:x86

    38ddc9f66f8636837f2a14299208f634


    Code Sign

    Headers

    Imports

    Sections

  • res/fetch_017.png
    .png
  • uninst.exe.nsis
  • 新云软件.url
    .url