General

  • Target

    Jan.19.2024.zip

  • Size

    1.9MB

  • MD5

    d2ede88c0032165a6ca86705b5b6350e

  • SHA1

    06a1415570c78adb4966b3b63242764a8a5f0b11

  • SHA256

    6d4a140d0a7233f96b8d8ad145093edc7a5bf387690db9dca2a9c4ada3851182

  • SHA512

    0b0c44dfb47d2fa9d292d2145875cc57a688a2c7b7bbe9fabfa49bfe5e8b77a8f52d87d32472a8b09ce32581a75bdf1e6b116610ced9b130cef5168cae0ec2d4

  • SSDEEP

    49152:mfw1boon9EdfkKolvJEiARQp+Zs2FCFRc7VbFOaAa:mfebvkfT8ENs+RCXc7VbFpt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Jan.19.2024.zip
    .zip

    Password: infected

  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.lic
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.dll
    .dll windows:5 windows x86 arch:x86

    0de3116f37952b12be5406ecef730227


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pstorec.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    92e98ccd6aa108e386042837a53c42f8


    Headers

    Imports

    Exports

    Sections