Overview

overview

7

Static

static

3

eraser_v5.8c1.3_1.exe

windows7-x64

7

eraser_v5.8c1.3_1.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

ASUpdate.dll

windows7-x64

3

ASUpdate.dll

windows10-2004-x64

3

Eraser.dll

windows7-x64

3

Eraser.dll

windows10-2004-x64

3

Eraser.exe

windows7-x64

5

Eraser.exe

windows10-2004-x64

5

Eraserl.exe

windows7-x64

1

Eraserl.exe

windows10-2004-x64

1

Erasext.dll

windows7-x64

1

Erasext.dll

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

Verify.exe

windows7-x64

3

Verify.exe

windows10-2004-x64

3

eraser.exe

windows7-x64

5

eraser.exe

windows10-2004-x64

5

eraserd.exe

windows7-x64

eraserd.exe

windows10-2004-x64

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b75edf331b097290efb6c54135c91f1

  • Size

    1020KB

  • MD5

    8b75edf331b097290efb6c54135c91f1

  • SHA1

    4d1b66c343be448e73bdc26f60028e4fb3fb0b3d

  • SHA256

    ca4bd71fbe6abeb6f59a0a089ee93a13c94451f40bd22138d75ce9aa27a8d92c

  • SHA512

    ba1a3dd3dca544298dc6650715ebbbbbc0beca92aa3be6e86cf3819810f8f2aa6afa806dae0cc23756837e6b09478f0890aa49e62df6227ac63c6a1e9d156c4f

  • SSDEEP

    24576:F6zNoTSbZeCfGY+NR+5oRWJuK09yJ1oVQcJr7KkiqXc1+vi:pwzg1RC09RVQct7Kkigc1+vi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 8b75edf331b097290efb6c54135c91f1
    .rar
  • eraser_v5.8c1.3_1.exe
    .exe windows:4 windows x86 arch:x86

    8ae4c4415f8b76a5573f954408eb7f1a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ASUpdate.dll
    .dll windows:4 windows x86 arch:x86

    56cbecc9df5b9c13b50d1dc6afaac7b9


    Headers

    Imports

    Exports

    Sections

  • ERASER.HLP
  • Eraser.cnt
  • Eraser.dll
    .dll windows:4 windows x86 arch:x86

    bcf98506f04158dae0563f1cc6464c37


    Headers

    Imports

    Exports

    Sections

  • Eraser.exe
    .exe windows:4 windows x86 arch:x86

    a7c91099029d534eaac0cb39aeb5129d


    Headers

    Imports

    Sections

  • Eraserl.exe
    .exe windows:4 windows x86 arch:x86

    1327769c7620260ccd55346dc51e3b94


    Headers

    Imports

    Sections

  • Erasext.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    25f80ff78d75bedf7db441757bd03360


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    8ae4c4415f8b76a5573f954408eb7f1a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • Verify.exe
    .exe windows:4 windows x86 arch:x86

    65b4a3838fba42cb5ebe83d92e0417c8


    Headers

    Imports

    Sections

  • eraser.exe
    .exe windows:4 windows x86 arch:x86

    a7c91099029d534eaac0cb39aeb5129d


    Headers

    Imports

    Sections

  • eraser.xml
    .xml
  • eraserd.exe
  • history.txt
  • readme.txt
  • 安装说明.url
    .url