General

  • Target

    7f4cb822f9bf4fb836d17a50283b4ceb

  • Size

    3.5MB

  • MD5

    7f4cb822f9bf4fb836d17a50283b4ceb

  • SHA1

    455f634b8b9dded001c0a2618c3dc2da79964c08

  • SHA256

    f342e09517abc0b53d1db9831dbd4551d68ac7a6f9db48bd0acee919e6d21275

  • SHA512

    aaf2b0662490a5a5bb9d0f8dbca05e484f3c718789385cefa0bf426589548312961564d5b1163e5b6d1a095c40bf08b605b0b059f6b63484fa49a2846bd40f51

  • SSDEEP

    98304:Am4dxQ5T9TKFTgK2KAY9ktarGSlRCgOf9KBhBx9WPs/bp:AmUu5T9K2KxAMwqrCBVKBKkzp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 7f4cb822f9bf4fb836d17a50283b4ceb
    .rar
  • dude-install-3.6.exe
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Headers

    Imports

    Sections

  • data/files/Vera.ttf
  • data/files/VeraMono.ttf
  • data/files/certificate.pem
  • data/files/images/ap.svg
    .xml
  • data/files/images/bridge.svg
    .xml
  • data/files/images/client.svg
    .xml
  • data/files/images/clock.svg
    .xml
  • data/files/images/dns.svg
    .xml
  • data/files/images/file_server.svg
    .xml
  • data/files/images/globe.svg
    .xml
  • data/files/images/globe2.svg
    .xml
  • data/files/images/grid.png
    .png
  • data/files/images/imac.svg
    .xml
  • data/files/images/laptop.svg
    .xml
  • data/files/images/mail.svg
    .xml
  • data/files/images/news.svg
    .xml
  • data/files/images/news_server.svg
    .xml
  • data/files/images/ntp.svg
    .xml
  • data/files/images/pc.svg
    .xml
  • data/files/images/pc2.svg
    .xml
  • data/files/images/pc3.svg
    .xml
  • data/files/images/pop.svg
    .xml
  • data/files/images/printer.svg
    .xml
  • data/files/images/rack.svg
    .xml
  • data/files/images/rb.svg
    .xml
  • data/files/images/router.svg
    .xml
  • data/files/images/smtp.svg
    .xml
  • data/files/images/sql.svg
    .xml
  • data/files/images/switch.svg
    .xml
  • data/files/mibs/AGENTX-MIB.txt
  • data/files/mibs/ALVARION-B14_28MIB_SNMP_Manager.txt
  • data/files/mibs/ATMEL-MIB.txt
  • data/files/mibs/AVANTCOM-EXP-80211-MIB.txt
  • data/files/mibs/BRIDGE-MIB.txt
  • data/files/mibs/CANOPY-SYS-MIB.txt
  • data/files/mibs/CERAGON-MIB.txt
  • data/files/mibs/CISCO-AAA-SESSION-MIB-V1SMI.txt
  • data/files/mibs/CISCO-SMI-V1SMI.txt
  • data/files/mibs/CISCO-TC-V1SMI.txt
  • data/files/mibs/CISCO-WIRELESS-DOCS-EXT-MIB.txt
  • data/files/mibs/CISCO-WIRELESS-DOCS-IF-MIB.txt
  • data/files/mibs/CISCO-WIRELESS-EXP-MIB.txt
  • data/files/mibs/CISCO-WIRELESS-IF-MIB.txt
  • data/files/mibs/CISCO-WIRELESS-P2MP-LINK-METRICS-MIB.txt
  • data/files/mibs/CISCO-WIRELESS-P2MP-PHY-MIB.txt
  • data/files/mibs/CISCO-WIRELESS-P2MP-RF-METRICS-MIB.txt
  • data/files/mibs/CISCO-WIRELESS-P2P-BPI-MIB.txt
  • data/files/mibs/CISCO-WIRELESS-TC-MIB.txt
  • data/files/mibs/CMM3-MIB.txt
  • data/files/mibs/COLUBRIS-802DOT1X-MIB.txt
  • data/files/mibs/COLUBRIS-AAA-CLIENT-MIB.txt
  • data/files/mibs/COLUBRIS-CDP-MIB.txt
  • data/files/mibs/COLUBRIS-IEEE802DOT11.txt
  • data/files/mibs/COLUBRIS-MAINTENANCE-MIB.txt
  • data/files/mibs/COLUBRIS-PRODUCTS-MIB.txt
  • data/files/mibs/COLUBRIS-PUBLIC-ACCESS-MIB.txt
  • data/files/mibs/COLUBRIS-SATELLITE-MANAGEMENT-MIB.txt
  • data/files/mibs/COLUBRIS-SMI.txt
  • data/files/mibs/COLUBRIS-SYSLOG-MIB.txt
  • data/files/mibs/COLUBRIS-SYSTEM-MIB.txt
  • data/files/mibs/COLUBRIS-TC.txt
  • data/files/mibs/DISMAN-EVENT-MIB.txt
    .vbs
  • data/files/mibs/DISMAN-SCHEDULE-MIB.txt
  • data/files/mibs/DISMAN-SCRIPT-MIB.txt
  • data/files/mibs/ENTITY-MIB.txt
  • data/files/mibs/EtherLike-MIB.txt
  • data/files/mibs/HCNUM-TC.txt
  • data/files/mibs/HOST-RESOURCES-MIB.txt
  • data/files/mibs/HOST-RESOURCES-TYPES.txt
  • data/files/mibs/IANA-ADDRESS-FAMILY-NUMBERS-MIB.txt
  • data/files/mibs/IANA-LANGUAGE-MIB.txt
  • data/files/mibs/IANAifType-MIB.txt
  • data/files/mibs/IEEE-802.11-MIB.txt
  • data/files/mibs/IF-INVERTED-STACK-MIB.txt
  • data/files/mibs/IF-MIB.txt
  • data/files/mibs/INET-ADDRESS-MIB.txt
  • data/files/mibs/IP-FORWARD-MIB.txt
  • data/files/mibs/IP-MIB.txt
  • data/files/mibs/IPV6-ICMP-MIB.txt
  • data/files/mibs/IPV6-MIB.txt
  • data/files/mibs/IPV6-TC.txt
  • data/files/mibs/IPV6-TCP-MIB.txt
  • data/files/mibs/IPV6-UDP-MIB.txt
  • data/files/mibs/KBRIDGE-MIB.txt
  • data/files/mibs/MTA-MIB.txt
  • data/files/mibs/NET-SNMP-AGENT-MIB.txt
  • data/files/mibs/NET-SNMP-EXAMPLES-MIB.txt
  • data/files/mibs/NET-SNMP-MIB.txt
  • data/files/mibs/NET-SNMP-MONITOR-MIB.txt
  • data/files/mibs/NET-SNMP-SYSTEM-MIB.txt
  • data/files/mibs/NET-SNMP-TC.txt
  • data/files/mibs/NETWORK-SERVICES-MIB.txt
  • data/files/mibs/NEXUS-MANUFACTURE-MIB.txt
  • data/files/mibs/NEXUS-MIB.txt
  • data/files/mibs/NOTIFICATION-LOG-MIB.txt
  • data/files/mibs/ORiNOCO-MIB.txt
  • data/files/mibs/RADIO-MIB.txt
  • data/files/mibs/RADIUS-ACC-CLIENT-MIB.txt
  • data/files/mibs/RADIUS-AUTH-CLIENT-MIB.txt
  • data/files/mibs/REDLINE_AN50_PMP_MIB_v1.txt
  • data/files/mibs/REDLINE_AN50_PTP_MIB.txt
  • data/files/mibs/RFC-1215.txt
  • data/files/mibs/RFC1155-SMI.txt
  • data/files/mibs/RFC1213-MIB.txt
  • data/files/mibs/RMON-MIB.txt
  • data/files/mibs/SMUX-MIB.txt
  • data/files/mibs/SNMP-COMMUNITY-MIB.txt
  • data/files/mibs/SNMP-FRAMEWORK-MIB.txt
  • data/files/mibs/SNMP-MPD-MIB.txt
  • data/files/mibs/SNMP-NOTIFICATION-MIB.txt
  • data/files/mibs/SNMP-PROXY-MIB.txt
  • data/files/mibs/SNMP-TARGET-MIB.txt
  • data/files/mibs/SNMP-USER-BASED-SM-MIB.txt
  • data/files/mibs/SNMP-USM-AES-MIB.txt
  • data/files/mibs/SNMP-VIEW-BASED-ACM-MIB.txt
  • data/files/mibs/SNMPv2-CONF.txt
  • data/files/mibs/SNMPv2-MIB.txt
  • data/files/mibs/SNMPv2-SMI.txt
  • data/files/mibs/SNMPv2-TC.txt
  • data/files/mibs/SNMPv2-TM.txt
  • data/files/mibs/TCP-MIB.txt
  • data/files/mibs/TRANGO-P5M-MIB.txt
  • data/files/mibs/TRANGOM2400S-MIB.txt
  • data/files/mibs/TRANGOM5800S-MIB.txt
  • data/files/mibs/TRANGOM5830S-MIB.txt
  • data/files/mibs/TRANGOM900S-MIB.txt
  • data/files/mibs/TRANGOP5830S-MU-MIB.txt
  • data/files/mibs/TRANGOP5830S-RU-MIB.txt
  • data/files/mibs/TUNNEL-MIB.txt
  • data/files/mibs/UDP-MIB.txt
  • data/files/mibs/WHISP-APS-MIB.txt
  • data/files/mibs/WHISP-BOX-MIBV2-MIB.txt
  • data/files/mibs/WHISP-GLOBAL-REG-MIB.txt
  • data/files/mibs/WHISP-SM-MIB.txt
  • data/files/mibs/WHISP-TC-MIB.txt
  • data/files/mibs/WMAN-IF2-MIB-10-16-06.txt
  • data/files/mibs/dhcp-server-mib.txt
  • data/files/mibs/mikrotik.txt
  • dude.exe
    .exe windows:4 windows x86 arch:x86

    d4de580ecfa46a16c5a9e568870f834c


    Headers

    Imports

    Sections

  • language/arabic.txt
  • language/bulgarian.txt
  • language/chinese-simplified.txt
  • language/chinese-traditional.txt
  • language/croatian.txt
  • language/czech.txt
  • language/dutch.txt
  • language/french.txt
  • language/german.txt
  • language/hungarian.txt
  • language/indonesian.txt
  • language/italian.txt
  • language/latvian.txt
  • language/macedonian.txt
  • language/polish.txt
  • language/romanian.txt
  • language/russian.txt
  • language/serbian.txt
  • language/spanish.txt
  • language/swedish.txt
  • language/turkish.txt
  • libcairo-2.dll
    .dll windows:4 windows x86 arch:x86

    09c271f7c91bd5399582f6479f745933


    Headers

    Imports

    Exports

    Sections

  • libcroco-0.6-3.dll
    .dll windows:4 windows x86 arch:x86

    57659cb9a11e746c135aaa77521faadd


    Headers

    Imports

    Exports

    Sections

  • libexpat-1.dll
    .dll windows:4 windows x86 arch:x86

    62bc60ee17ccd8d66f2e4ff8653cff47


    Headers

    Imports

    Exports

    Sections

  • libfontconfig-1.dll
    .dll windows:4 windows x86 arch:x86

    a674f23b8b7dca541da23ffd97cc4a13


    Headers

    Imports

    Exports

    Sections

  • libfreetype-6.dll
    .dll windows:4 windows x86 arch:x86

    f61c84489b5fae02ef3fae05d921a840


    Headers

    Imports

    Exports

    Sections

  • libgdk_pixbuf-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    8c8b1af9e109f52588df81dbdbfc3b2d


    Headers

    Imports

    Exports

    Sections

  • libgio-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    c70e86c05a7d32975a3195982d438589


    Headers

    Imports

    Exports

    Sections

  • libglib-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    318deb65d279ebdcfe6df0c0a7eec54d


    Headers

    Imports

    Exports

    Sections

  • libgmodule-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    5e35ddb74beebf2e0c5ec0b791efd0d1


    Headers

    Imports

    Exports

    Sections

  • libgobject-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    2d9317b4abfed25fe57f2f5207b579ce


    Headers

    Imports

    Exports

    Sections

  • libjpeg-62.dll
    .dll windows:4 windows x86 arch:x86

    78b62d1e1ccd384198f2cf5a2f71dca2


    Headers

    Imports

    Exports

    Sections

  • libnetsnmp-15.dll
    .dll windows:4 windows x86 arch:x86

    96aa90e603d97ec7293f73b8f9592eba


    Headers

    Imports

    Exports

    Sections

  • libpango-1.0-0.dll
    .dll windows:4 windows x86 arch:x86

    1ae5d26ceeed0b24f64570673256635e


    Headers

    Imports

    Exports

    Sections

  • libpangocairo-1.0-0.dll
    .dll windows:4 windows x86 arch:x86

    318fb1f1d27e82fc7bbaf29da9f521c3


    Headers

    Imports

    Exports

    Sections

  • libpangoft2-1.0-0.dll
    .dll windows:4 windows x86 arch:x86

    2996ea6e1b6a2f4824e75a9226f3aa93


    Headers

    Imports

    Exports

    Sections

  • libpangowin32-1.0-0.dll
    .dll windows:4 windows x86 arch:x86

    db155232a261cf1870b906dcb811359b


    Headers

    Imports

    Exports

    Sections

  • libpixman-1-0.dll
    .dll windows:4 windows x86 arch:x86

    894aad97f32e1d3c97ebc9ee23fe435a


    Headers

    Imports

    Exports

    Sections

  • libpng12-0.dll
    .dll windows:4 windows x86 arch:x86

    18c7079826b3d81fd25057ee73dd9ed9


    Headers

    Imports

    Exports

    Sections

  • librsvg-2-2.dll
    .dll windows:4 windows x86 arch:x86

    5df75f347793bfb3c99f2d2039788aa8


    Headers

    Imports

    Exports

    Sections

  • libxml2-2.dll
    .dll windows:4 windows x86 arch:x86

    04ec45b48fec40e1c5a33eeb0df7ea6f


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Headers

    Imports

    Sections

  • 新云软件.url
    .url