Overview

overview

8

Static

static

7

780c349cb7...bd.exe

windows7-x64

7

780c349cb7...bd.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$SYSDIR/Dr...RV.sys

windows7-x64

1

$SYSDIR/Dr...RV.sys

windows10-2004-x64

1

ArmAccess.dll

windows7-x64

1

ArmAccess.dll

windows10-2004-x64

1

License.html

windows7-x64

1

License.html

windows10-2004-x64

1

MCFUNC.dll

windows7-x64

1

MCFUNC.dll

windows10-2004-x64

1

MCHelp.chm

windows7-x64

1

MCHelp.chm

windows10-2004-x64

1

MaxCrypt2.exe

windows7-x64

8

MaxCrypt2.exe

windows10-2004-x64

7

MaxDelete.dll

windows7-x64

1

MaxDelete.dll

windows10-2004-x64

1

SysSrvc.exe

windows7-x64

1

SysSrvc.exe

windows10-2004-x64

1

Updates/update.exe

windows7-x64

1

Updates/update.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    780c349cb73328e1a1669101c49d70bd

  • Size

    3.8MB

  • MD5

    780c349cb73328e1a1669101c49d70bd

  • SHA1

    6aaaf52420421862a6633694659060598be7784f

  • SHA256

    013f49b1709a70e58968ff552cfdce0fa9903dfd276e5b092a23a05a782f5db3

  • SHA512

    28523a3156c4ab263c733341980db91e1abc2b4330ec99283bc561c2fa221f9414bbb3386983029efb05feef58a50941ea3447b93e0d2f0d2dd766a54bfc2ad6

  • SSDEEP

    98304:fUjVUJp+a3wvs7Rp8MmNi8Lajm/p117kKx5WgGvCwWNVfsPcYf:fccp+eRqRhDF7kkIPvCwWNpsEYf

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 780c349cb73328e1a1669101c49d70bd
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    28d94e5199b88ad374b3cb2118e31a66


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/Drivers/MC2_NT_DRV.sys
    .sys windows:5 windows x86 arch:x86

    8b45f78fd319c513a43c110dca1aae35


    Headers

    Imports

    Sections

  • ArmAccess.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d1e10a04ad85a14abc67c0f2a2f79aed


    Headers

    Imports

    Exports

    Sections

  • Languages/Chinese_s.txt
  • Languages/Chinese_t.txt
  • Languages/Dutch.txt
  • Languages/German.txt
  • Languages/Greek.txt
  • Languages/Japenese.txt
  • Languages/Korean.txt
  • Languages/Polish.txt
  • Languages/Portuguese.txt
  • Languages/Russian.txt
  • Languages/english.txt
  • Languages/french.txt
  • Languages/italian.txt
  • Languages/spanish.txt
  • License.html
    .html
  • MCFUNC.dll
    .dll windows:4 windows x86 arch:x86

    804a9ca66959c33a286c4b22f588052d


    Headers

    Imports

    Sections

  • MCHelp.chm
    .chm
  • MaxCrypt2.exe
    .exe windows:4 windows x86 arch:x86

    c6eb411f28df655f09219f51534351da


    Headers

    Imports

    Sections

  • MaxDelete.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e9dd3322f8b45ae9f95d0761dad18830


    Headers

    Imports

    Exports

    Sections

  • SysSrvc.exe
    .exe windows:4 windows x86 arch:x86

    e5a6064933f2ffaecd1c96ef685ecbb1


    Headers

    Imports

    Sections

  • Updates/update.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Updates/update.URS
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    2db813254ea8b4d2a92d703ecb659f39


    Headers

    Imports

    Exports

    Sections