General

  • Target

    SecuriteInfo.com.TScope.Malware-Cryptor.SB.18952.10848.exe

  • Size

    27.2MB

  • MD5

    40855e5ab0c98bad388372c615d6560d

  • SHA1

    3fab70352bca036b6abd92e0fd30e975b7d224e7

  • SHA256

    778f5ab8831b763faf04307ad30e184b99635daad4b533cafc6d8a5c69164c78

  • SHA512

    6702680862f05f9a16d766f39e8fcb63549519ee41e06bf6333113fe96bdee5f7916d93b81e3e634191cbcb9cd1fe24a50414098ab0159f9124106eb8310e09f

  • SSDEEP

    786432:3SeRp52XkHQpKN/2IUxyhuNuoTP0V4HxSBYQT5Ff0e:3XRp5cc2KN+IFCLTBR1QTbD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 5 IoCs

Files

  • SecuriteInfo.com.TScope.Malware-Cryptor.SB.18952.10848.exe
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsProcessEx.dll
    .dll windows:5 windows x86 arch:x86

    5677ed689af1bca60a684df2f2a76328


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Mobile_USIM/Uninstall.exe.nsis
  • GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    05d4c65d0c1cdfb83215bd2f69493483


    Headers

    Imports

    Exports

    Sections

  • KSCertRelay_32bit.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • SetupProgram.exe
    .exe windows:5 windows x86 arch:x86

    9be1c8aef4efbe0f7889d2eb0043d070


    Code Sign

    Headers

    Imports

    Sections

  • SmartCert_v1.0.2.1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/KillExt.dll
    .dll windows:4 windows x86 arch:x86

    6c6a4c7f096325aa512c76dd23b36177


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • DSCToolkitV30-v3.4.2.13.dll
    .dll windows:4 windows x86 arch:x86

    e83a55a041ab095b642c3a6d80ce8484


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DSHttpClient.dll
    .dll windows:4 windows x86 arch:x86

    fa3791ee25668852747e9c413171978f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MagicNet.dll
    .dll windows:4 windows x86 arch:x86

    af8ac34c489affe692480244c9df4013


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MagicUMT.dll
    .dll windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MobileTokenDrv.dll
    .dll windows:5 windows x86 arch:x86

    89a6c67ac149b760378c2dcd22da87f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MobileTokenUI.dll
    .dll windows:5 windows x86 arch:x86

    e4ae5436ede59382761d117959ac72d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SmartCert.exe
    .exe windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Sections

  • SmartCertBagUI.dll
    .dll windows:5 windows x86 arch:x86

    f7f9a2558a915a7b1877dd92372d1245


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SmartCertBagWeb.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    98204483eee1f95fda3bb127cb01e285


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SmartCertMV.exe
    .exe windows:5 windows x86 arch:x86

    d3522f1edf70e612eaa7d9f1243644d4


    Code Sign

    Headers

    Imports

    Sections

  • SmartCert_Uninstall.exe.nsis
  • USIM_0002.der
  • UsimNet.dll
    .dll windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • issuer.conf
  • issuerpath.conf
  • mfc100.dll
    .dll windows:5 windows x86 arch:x86

    d981f9b9d6fba82bf0fc343dd10d43cc


    Code Sign

    Headers

    Imports

    Sections

  • mfc100u.dll
    .dll windows:5 windows x86 arch:x86

    6ecbd31f78660e8af99e665d8a5ae336


    Code Sign

    Headers

    Imports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nsldap32v50.dll
    .dll windows:4 windows x86 arch:x86

    87101a3410828ef79d4665f3b9b2a066


    Headers

    Imports

    Exports

    Sections

  • oid.conf
  • USIMCert.dll
    .dll windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • USIMCertGuide.exe
    .exe windows:5 windows x86 arch:x86

    b40aeec26cc2023154a7288f607162b9


    Code Sign

    Headers

    Imports

    Sections

  • USIMCertLib.dll
    .dll windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • USIMCertLibM.dll
    .dll windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • USIMCertP11.dll
    .dll windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • USIMCertUpdate.exe
    .exe windows:5 windows x86 arch:x86

    4b9e2acd488d1c8ef908ca2c6a1360af


    Code Sign

    Headers

    Imports

    Sections

  • USIM_0001.der
  • usimcert_inst.ico