General

  • Target

    NSM.zip

  • Size

    576KB

  • MD5

    88acf619520f12c60768d7cceb6ac9d8

  • SHA1

    6ae90c575bc118d0cd8ed177a007cfa67eae8752

  • SHA256

    0b23f2edbd14aff5e8dcea25b0e0c3756568ccdb301f9fdf44c28715fb779b49

  • SHA512

    aadf769c59c69af5c76221deb0f6a9e1ab567d7cb439cc9b2384ffd5593b1d26899c664c835c94da88370283ed978eeff961068a6a79f7099f35bff7767b0414

  • SSDEEP

    12288:b0sSbZpJ4Dq0lnEUJ63eDEdTcCuEfUl5Ribc4U70qAuSH/:byb3cq0uW63cCuGU38bkYqAuSH/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NSM.zip
    .zip
  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.lic
  • dnsext.dll
    .dll windows:10 windows x64 arch:x64

    76bb3477e0a254e7de32cee09d1ab746


    Headers

    Imports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf