General

  • Target

    tnrgymodbusserver.zip

  • Size

    1.9MB

  • MD5

    ec85a39a3485081e6e04b748caa435e6

  • SHA1

    0a58c207af92c010d9bd6fb21fbe11f3225ee4dd

  • SHA256

    e50f4c6c5ff5c515a5cf1428b4796c336c42c5d9797960c7882ea10044cdaa2c

  • SHA512

    c19951e4edab74171f99cf87c3764a4a1de5e927b19c7290cdf146d7dcf42b16b1483592b6fa1b54d8f536a808cbe202b8805970d8ccf8b5cdec8d909faff64e

  • SSDEEP

    49152:F/v1kYrp7Qizg5RQ39CBiKJRJJ5f8k2BScJcS:FOSe5RQ39CBiKJRJJpb2B3JcS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • tnrgymodbusserver.zip
    .zip
  • Configurar.cmd
  • Instalar.cmd
    .cmd .vbs
  • Mono.Security.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Npgsql.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.Data.SQLite.dll
    .dll windows:5 windows x86 arch:x86

    d497bf8dbb07ae2a3501c2fa425a8f5c


    Headers

    Imports

    Exports

    Sections

  • System.Data.SQLite.dll.config
    .xml
  • System.Net.Http.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TCore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TNrgyBss.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TNrgyBss.dll.config
  • TNrgyModbusServer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • TNrgyModbusServer.exe.config
    .xml
  • en/TCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • en/TNrgyBss.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • en/TNrgyModbusServer.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • es/TCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • es/TNrgyBss.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • es/TNrgyModbusServer.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remover.cmd
    .cmd .vbs
  • restart.cmd
  • start.cmd