Overview

overview

7

Static

static

3

7f2ee75c23...32.exe

windows7-x64

7

7f2ee75c23...32.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$SYSDIR/libcurl.dll

windows7-x64

3

$SYSDIR/libcurl.dll

windows10-2004-x64

3

$SYSDIR/zlib1.dll

windows7-x64

1

$SYSDIR/zlib1.dll

windows10-2004-x64

3

Applicatio...er.exe

windows7-x64

1

Applicatio...er.exe

windows10-2004-x64

1

Files/ab_c...el.exe

windows7-x64

1

Files/ab_c...el.exe

windows10-2004-x64

1

Files/blockerhelp.chm

windows7-x64

1

Files/blockerhelp.chm

windows10-2004-x64

1

Files/res_lang_en.dll

windows7-x64

1

Files/res_lang_en.dll

windows10-2004-x64

1

applicatio...er.dll

windows7-x64

1

applicatio...er.dll

windows10-2004-x64

1

blocker_re...ix.exe

windows7-x64

6

blocker_re...ix.exe

windows10-2004-x64

6

popup_dialog.exe

windows7-x64

1

popup_dialog.exe

windows10-2004-x64

1

xcacls.exe

windows7-x64

1

xcacls.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7f2ee75c23298de7b8ed08722054eb32

  • Size

    4.7MB

  • MD5

    7f2ee75c23298de7b8ed08722054eb32

  • SHA1

    ec1fb99461d0b179d6c7bca7da60936a9dd0e1b0

  • SHA256

    2101461338093052af0a45936d9c1aa6c6fb4546849f192ab2a02a224a8c2bac

  • SHA512

    3d3f3995dcde43a0b15126cefce189bb47ee498b254c8eb38e4d03e276f44792b3c67d62e752098098ab671e16a70132d78eceb32e66c78fcc15ea4e51602f8e

  • SSDEEP

    98304:8kDtmBFznvJBNNr1SsZB7cXp7ocMhCISCMGqDgeb8xQGvLY:7IBFvFNE4BQXpChCdDgvPLY

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 7f2ee75c23298de7b8ed08722054eb32
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    278897de0aa0544338c744297a40d124


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    07761085e6d5abbc4cbf0976d6b9a264


    Headers

    Imports

    Exports

    Sections

  • ApplicationBlockerUninstaller.exe
    .exe windows:5 windows x86 arch:x86

    038b7c56b4e4c76c34744da980f11e3d


    Headers

    Imports

    Sections

  • Files/ab_ctrl_panel.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • Files/blockerhelp.chm
    .chm
  • Files/blocklist.xml
    .xml
  • Files/res_lang_en.dll
    .dll windows:5 windows x86 arch:x86

    b1ef5315be487f2c21eade374734763b


    Headers

    Imports

    Sections

  • Reports/style_report.xsl
    .xml
  • applicationblocker.dll
    .dll windows:5 windows x86 arch:x86

    e6859c127bfb3fc503c65e5997410502


    Headers

    Imports

    Exports

    Sections

  • blocker_registry_fix.exe
    .exe windows:5 windows x86 arch:x86

    fdef1ea4a95604d053ff3897df5f4c0e


    Headers

    Imports

    Sections

  • popup_dialog.exe
    .exe windows:5 windows x86 arch:x86

    8de0bd8cf047084ddd69a38a54a62e86


    Headers

    Imports

    Sections

  • xcacls.exe
    .exe windows:5 windows x86 arch:x86

    e415cc352b7172f591cdc3f7e08c0c5e


    Headers

    Imports

    Sections