General

  • Target

    nex_swoofer.rar

  • Size

    426KB

  • MD5

    a985357cb6fca5b33b5f6356a791b2f2

  • SHA1

    6b743acf1ca918987a23457fba641ae6b0ef92a8

  • SHA256

    5ce6c69a8d1985527e253efa4b3a02892b84aa80177dfde0636aa1561271854e

  • SHA512

    796e6da3758646852e0b194fe94e792db6f6baa5991689972fa061a35ce5b7931ea38573ab5521b6141387657a3d21071e1b8182c8bd9337bf174fc5c7c41cb4

  • SSDEEP

    12288:PtZtSkXooTGFaRPINGFvwVH30zTH+aaG65:FZJXWaeNI453Yz65

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • nex_swoofer.rar
    .rar
  • nex swoofer/36bf0d1cd6d84e9f.exe
    .exe windows:6 windows x64 arch:x64

    3a87042b0322c69742810e391255ba56


    Headers

    Imports

    Sections

  • nex swoofer/AMIDEWINx64.exe
    .exe windows:6 windows x64 arch:x64

    a411d6c4955ed012fe763a4108288ce7


    Headers

    Imports

    Sections

  • nex swoofer/AMIFLDRV64.SYS
    .sys windows:6 windows x64 arch:x64

    b05ee5c816a30bc52378c759486af0b9


    Code Sign

    Headers

    Imports

    Sections

  • nex swoofer/N.exe
    .exe windows:6 windows x64 arch:x64

    eac1cdca48e8e1187933ed72f46d6eaf


    Headers

    Imports

    Sections

  • nex swoofer/Nigger.sys
    .sys windows:6 windows x64 arch:x64

    d6f977640d4810a784d152e4d3c63a6b


    Code Sign

    Headers

    Imports

    Sections

  • nex swoofer/README.md
  • nex swoofer/cleaner.bat
    .bat .vbs
  • nex swoofer/driver.sys
    .sys windows:10 windows x64 arch:x64

    a1db394d9de3b500efc2c62cfaaec7e6


    Headers

    Imports

    Sections

  • nex swoofer/kdmapper.exe
    .exe windows:6 windows x64 arch:x64

    afc1f930b16856804326528e39e42dd5


    Headers

    Imports

    Sections

  • nex swoofer/start.bat