Overview

overview

10

Static

static

10

Builder.exe

windows7-x64

1

Builder.exe

windows10-2004-x64

1

OCX/Codejo....0.dll

windows7-x64

1

OCX/Codejo....0.dll

windows10-2004-x64

1

OCX/Codejo....0.dll

windows7-x64

1

OCX/Codejo....0.dll

windows10-2004-x64

1

OCX/Registrator.exe

windows7-x64

1

OCX/Registrator.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    867e75ee5d9e2ff92db12fd7350093d3

  • Size

    2.0MB

  • MD5

    867e75ee5d9e2ff92db12fd7350093d3

  • SHA1

    ea43b3b7082fdb54065c26990eab7329539fe50b

  • SHA256

    40c0f8cb33306a53aabe933ff0d9e3391ce13b62882ba83f65cdafa835a2aeca

  • SHA512

    0bc07db353928648ccbd8a67f8a006fb3eec883f9123678bbac242e528251a044530b11f007175eeaa5b1f4d93e57e372745d22e2cc4af51d7c055af7775d2e0

  • SSDEEP

    49152:V8MM5zDDFQEJrGcSKGQjvfIjhgwnOQKQsae+lgF+FRqxNGF:V8MM5zDDOurJSJQjvf4iMsaXWF+FAzGF

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 867e75ee5d9e2ff92db12fd7350093d3
    .rar
  • Builder.exe
    .exe windows:4 windows x86 arch:x86

    9086c7d132c408997369ed4e2c65fe6f


    Headers

    Imports

    Sections

  • Log.php/log.php
  • OCX/Codejock.CommandBars.v12.1.0.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    c2fa87eb9d83e32862ab538f4e1969f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OCX/Codejock.Controls.v12.1.0.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    0aa2645479303d0ac2e1c572740c2beb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OCX/Registrator.exe
    .exe windows:4 windows x86 arch:x86

    7e753ff681654f6baf71d608521060db


    Code Sign

    Headers

    Imports

    Sections