General

  • Target
    729a7bf23d64052ca1bde881bc9813af
  • Size 2.2MB
  • Sample240124-vxb3lsecfl
  • SHA256 5341b3921b75549adbe59365517c30bd045e63162728d9ba48f79832fea1bea0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Detected Ploutus loader 1 IoCs
  • Ploutus family
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

File Explorer

  • 729a7bf23d64052ca1bde881bc9813af
    .exe 2.2MB
  • $PLUGINSDIR/OCSetupHlp.dll
    .dll 438KB
  • $PLUGINSDIR/SimpleSC.dll
    .dll 59KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UAC.dll
    .dll 13KB
  • $PLUGINSDIR/modern-header.bmp
    3KB
  • $PLUGINSDIR/modern-wizard.bmp
    46KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $TEMP/ConnectifyShutdown.exe
    .exe 106KB
  • BuildProps.dll
    .dll 14KB
  • ConnUPnP.dll
    .dll 30KB
  • Connectify.exe
    .exe 1.3MB
  • Connectify.exe.config
    2KB
  • ConnectifyNAT.dll
    .dll 288KB
  • ConnectifyNetServices.exe
    .exe 342KB
  • Connectifyd.exe
    .exe 872KB
  • Connectifyd.exe.config
    2KB
  • DriverLib.dll
    .dll 22KB
  • HardwareHelperLib.dll
    .dll 20KB
  • HtmlAgilityPack.dll
    .dll 106KB
  • Interop.NETCONLib.dll
    .dll 17KB
  • Interop.NETWORKLIST.dll
    .dll 26KB
  • Interop.NetFwTypeLib.dll
    .dll 26KB
  • Interop.SHDocVw.dll
    .dll 143KB
  • Ionic.Zip.dll
    .dll 498KB
  • OpenCandy/OCSetupHlp.dll
    .dll 438KB
  • OpenCandy/OpenCandy_Why_Is_This_Here.txt
    2KB
  • UPnP.dll
    .dll 279KB
  • Uninstall.exe.nsis
    108KB
  • WCN-UFD/AUTORUN.INF
    90B
  • WCN-UFD/SMRTNTKY/MessageB.txt
    285B
  • WCN-UFD/SMRTNTKY/fcw.ico
    21KB
  • WCN-UFD/setupSNK.exe
    .exe 17KB
  • WPSLib.dll
    .dll 185KB
  • connectifynat.l4c
    450B
  • drivers/amd64/connctfy.cat
    8KB
  • drivers/amd64/connctfy.inf
    3KB
  • drivers/amd64/connctfy.sys
    .sys 34KB
  • drivers/amd64/connctfy_m.inf
    1KB
  • drivers/amd64/snetcfg.exe
    .exe 15KB
  • drivers/x86/connctfy.cat
    8KB
  • drivers/x86/connctfy.inf
    3KB
  • drivers/x86/connctfy.sys
    .sys 28KB
  • drivers/x86/connctfy_m.inf
    1KB
  • drivers/x86/snetcfg.exe
    .exe 13KB
  • gma.Windows.Firewall.dll
    .dll 23KB
  • install-driver-amd64.bat
    114B
  • install-driver-x86.bat
    106B
  • io.dll
    .dll 25KB
  • log4cxx.dll
    .dll 1.6MB
  • log4net.dll
    .dll 271KB
  • logs/logs.txt
    23B
  • ndisapi.dll
    .dll 67KB
  • source/ManagedWifi/Interop.cs
    72KB
  • source/ManagedWifi/ManagedWifi.csproj
    3KB
  • source/ManagedWifi/Properties/AssemblyInfo.cs
    1KB
  • source/ManagedWifi/WlanApi.cs
    .vbs 45KB
  • source/ManagedWifi/app.config
    120B
  • source/ManagedWifi/license.txt
    23KB
  • source/dualserver/DualServer.cpp
    241KB
  • source/dualserver/DualServer.h
    19KB
  • source/dualserver/gpl-2.0.txt
    17KB
  • source/dualserver/makefile
    274B
  • start_service.exe
    .exe 227KB
  • $PLUGINSDIR/SimpleSC.dll
    .dll 59KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/modern-header.bmp
    3KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • uninstall-driver-amd64.bat
    59B
  • uninstall-driver-x86.bat
    57B
  • wifi.dll
    .dll 48KB

729a7bf23d64052ca1bde881bc9813af

  • IMPHASH dfb06052e74b26a42b0e490bd1c07959
  • SHA256 5341b3921b75549adbe59365517c30bd045e63162728d9ba48f79832fea1bea0
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
2e:2e:41:e3:65:fe:8e:7b:90:0f:7b:2c:4c:7d:9a:55:0e:af:d3:5c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Connectify,O=Connectify,L=Philadelphia,ST=PA,C=US
Chains

Sep 26, 2010

Minor OS version
0
Major OS version
4
Entry point
13984
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths