General
-
Target
LCMA.rar
-
Size
4.7MB
-
MD5
22dc80d6975a23bd6062a90a7b49ca38
-
SHA1
97449a84b6ca7cf851d0696d487139ba01d6d026
-
SHA256
8035b0c65e4fadc763d189c7262365f33afdaa9ab93627ab28edb4199b03a80f
-
SHA512
0b62dc098e85ba866485fc1020f8f03e7a15ccf0ac893d33421df3f03d16a2f610b85316807d1998e7ca0d1a99a2a4988eed9b47faec37cea772c5727574847a
-
SSDEEP
98304:BZhk1pQv89wE6/QQ/TD9EQiyiIZaiyNIPYAeQ9866tqbsPu:Nlp/oby/ebqbs2
Score
3/10
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
LCMA.rar
Password: peng
-
LCMA/Inf/ArOmodPpmk.xml
-
LCMA/Inf/BHnfCNKJJr.xml
-
LCMA/Inf/DbYgtRCNoe.xml
-
LCMA/Inf/FLnwJaEDnM.xml
-
LCMA/Inf/FcydhtoAxs.xml
-
LCMA/Inf/FrzBQTmCSj.xml
-
LCMA/Inf/HIuTTeBcCw.xml
-
LCMA/Inf/IBwmVYGXmR/BbhEarEBHN.xml
-
LCMA/Inf/IBwmVYGXmR/CWTlBZwakb.xml
-
LCMA/Inf/IBwmVYGXmR/CZkFeZxJAo.xml
-
LCMA/Inf/IBwmVYGXmR/ENhjUpGcDq.xml
-
LCMA/Inf/IBwmVYGXmR/ErqNReLmpJ.xml
-
LCMA/Inf/IBwmVYGXmR/FeozGtGNRG.xml
-
LCMA/Inf/IBwmVYGXmR/IAtVjqCzGU.xml
-
LCMA/Inf/IBwmVYGXmR/IwtCXSeAoo.xml
-
LCMA/Inf/IBwmVYGXmR/JqPokhsyjl.xml
-
LCMA/Inf/IBwmVYGXmR/LaoEVjhQFm.xml
-
LCMA/Inf/IBwmVYGXmR/LoKvZQSnlo.xml
-
LCMA/Inf/IBwmVYGXmR/NuYCtLKHmc.xml
-
LCMA/Inf/IBwmVYGXmR/RFCkCqmOyr.xml
-
LCMA/Inf/IBwmVYGXmR/SQKsWKeQhy.xml
-
LCMA/Inf/IBwmVYGXmR/UVBgTqKnDt.xml
-
LCMA/Inf/IBwmVYGXmR/VgZSggDbub.xml
-
LCMA/Inf/IBwmVYGXmR/VqMkVsPevH.xml
-
LCMA/Inf/IBwmVYGXmR/XCXytCEXGb.xml
-
LCMA/Inf/IBwmVYGXmR/XRkuwngabJ.xml
-
LCMA/Inf/IBwmVYGXmR/YOvHZQhNdN.xml
-
LCMA/Inf/IBwmVYGXmR/azDDrgwmhF.xml
-
LCMA/Inf/IBwmVYGXmR/dzxMyNjpKF.xml
-
LCMA/Inf/IBwmVYGXmR/fKQukFJKtM.xml
-
LCMA/Inf/IBwmVYGXmR/fWUzRHXUTz.xml
-
LCMA/Inf/IBwmVYGXmR/ivcMhSCwYs.xml
-
LCMA/Inf/IBwmVYGXmR/jeeMyFnHBD.xml
-
LCMA/Inf/IBwmVYGXmR/oAfTLlbWer.xml
-
LCMA/Inf/IBwmVYGXmR/oCLhEsZoos.xml
-
LCMA/Inf/IBwmVYGXmR/oXwAxbxbUf.xml
-
LCMA/Inf/IBwmVYGXmR/ozWdYdRkIE.xml
-
LCMA/Inf/IBwmVYGXmR/sIoWuwPUub.xml
-
LCMA/Inf/IBwmVYGXmR/tmUyYOMDpY.xml
-
LCMA/Inf/IBwmVYGXmR/uHEBKfCkkt.xml
-
LCMA/Inf/IBwmVYGXmR/uHvOcvAvUJ.xml
-
LCMA/Inf/IBwmVYGXmR/vmWxhVrSJT.xml
-
LCMA/Inf/IBwmVYGXmR/wGMDVIsMTk.xml
-
LCMA/Inf/IBwmVYGXmR/wbfaKBWOrO.xml
-
LCMA/Inf/IBwmVYGXmR/zYcLVYjJFU.xml
-
LCMA/Inf/KDDRBNFFSw.xml
-
LCMA/Inf/MTpWFDOfif.xml
-
LCMA/Inf/NFZvMpoPqC.xml
-
LCMA/Inf/NTFvZoreQG.xml
-
LCMA/Inf/VGUpNYLWkW.xml
-
LCMA/Inf/WLndXDbPuW.xml
-
LCMA/Inf/bssBLEzzBW/BDacScqqFz.xml
-
LCMA/Inf/bssBLEzzBW/CCWCAJWWCf.xml
-
LCMA/Inf/bssBLEzzBW/CPvJyjWfYi.xml
-
LCMA/Inf/bssBLEzzBW/DTfdASfrtb.xml
-
LCMA/Inf/bssBLEzzBW/DaqylOrMst.xml
-
LCMA/Inf/bssBLEzzBW/GeLiaZhJyM.xml
-
LCMA/Inf/bssBLEzzBW/JWMAHhdyIH.xml
-
LCMA/Inf/bssBLEzzBW/KwBdYlYYQb.xml
-
LCMA/Inf/bssBLEzzBW/LhGSNVwtcC.xml
-
LCMA/Inf/bssBLEzzBW/LssvcUzOEb.xml
-
LCMA/Inf/bssBLEzzBW/OTlpbETStB.xml
-
LCMA/Inf/bssBLEzzBW/QQMgRmFbBi.xml
-
LCMA/Inf/bssBLEzzBW/QQXkowWaDA.xml
-
LCMA/Inf/bssBLEzzBW/QrbXCIMJGG.xml
-
LCMA/Inf/bssBLEzzBW/RKJUSjnKBR.xml
-
LCMA/Inf/bssBLEzzBW/TKpSECKfgE.xml
-
LCMA/Inf/bssBLEzzBW/UAqAZMfjLE.xml
-
LCMA/Inf/bssBLEzzBW/VlHextqSBJ.xml
-
LCMA/Inf/bssBLEzzBW/aTkfjJMxnD.xml
-
LCMA/Inf/bssBLEzzBW/bOCTEmHbZZ.xml
-
LCMA/Inf/bssBLEzzBW/dEXSLNOJOj.xml
-
LCMA/Inf/bssBLEzzBW/emhygDoZoM.xml
-
LCMA/Inf/bssBLEzzBW/fhvwZJgedn.xml
-
LCMA/Inf/bssBLEzzBW/gkcCSfIgrF.xml
-
LCMA/Inf/bssBLEzzBW/hZyvzUWOAc.xml
-
LCMA/Inf/bssBLEzzBW/iBVoGappbq.xml
-
LCMA/Inf/bssBLEzzBW/kZBqAEEwKi.xml
-
LCMA/Inf/bssBLEzzBW/lOvTkLbQYX.xml
-
LCMA/Inf/bssBLEzzBW/lUEhXjSVsa.xml
-
LCMA/Inf/bssBLEzzBW/mxjRwSpyrH.xml
-
LCMA/Inf/bssBLEzzBW/oOgmyRRLiK.xml
-
LCMA/Inf/bssBLEzzBW/qjXDXHmXoi.xml
-
LCMA/Inf/bssBLEzzBW/rIIZGaEMzq.xml
-
LCMA/Inf/bssBLEzzBW/rNlYqCnsbH.xml
-
LCMA/Inf/bssBLEzzBW/rmVgCwPoSK.xml
-
LCMA/Inf/bssBLEzzBW/sNukRlwOKe.xml
-
LCMA/Inf/bssBLEzzBW/swwWebsnle.xml
-
LCMA/Inf/bssBLEzzBW/uQknksQuHk.xml
-
LCMA/Inf/bssBLEzzBW/vUWqgATzjV.xml
-
LCMA/Inf/bssBLEzzBW/veayBKrWJK.xml
-
LCMA/Inf/bssBLEzzBW/wnCfTbgSuH.xml
-
LCMA/Inf/bssBLEzzBW/wphpEBJeZS.xml
-
LCMA/Inf/bssBLEzzBW/zOjOCWlJBu.xml
-
LCMA/Inf/bssBLEzzBW/zaJPIoUwHB.xml
-
LCMA/Inf/cIhviDYIiC.xml
-
LCMA/Inf/dMOjnckDzL.xml
-
LCMA/Inf/kqAcHHNKYf.xml
-
LCMA/Inf/meQsVFkglK.xml
-
LCMA/Inf/pXCZPZLsUQ/CHbAtBQLkH.xml
-
LCMA/Inf/pXCZPZLsUQ/IevxWQyoAP.xml
-
LCMA/Inf/pXCZPZLsUQ/MCcTIdZLgw.xml
-
LCMA/Inf/pXCZPZLsUQ/NLUQePfsqs.xml
-
LCMA/Inf/pXCZPZLsUQ/OkACQiAtec.xml
-
LCMA/Inf/pXCZPZLsUQ/PFjkExCyHU.xml
-
LCMA/Inf/pXCZPZLsUQ/ZZSOzIQNuU.xml
-
LCMA/Inf/pXCZPZLsUQ/cFpfzuMqTk.xml
-
LCMA/Inf/pXCZPZLsUQ/usUeadhvAm.xml
-
LCMA/Inf/pXCZPZLsUQ/xGvjuZoNFu.xml
-
LCMA/Inf/rAbiWpfcTj/AJjzmIxhUZ.xml
-
LCMA/Inf/rAbiWpfcTj/BZfKyrlTKA.xml
-
LCMA/Inf/rAbiWpfcTj/CqrNalJPOB.xml
-
LCMA/Inf/rAbiWpfcTj/EsffZihJZZ.xml
-
LCMA/Inf/rAbiWpfcTj/FNYINZltSF.xml
-
LCMA/Inf/rAbiWpfcTj/GQrtJDXnJS.xml
-
LCMA/Inf/rAbiWpfcTj/GmXxKFnuFo.xml
-
LCMA/Inf/rAbiWpfcTj/HnApQOMAzI.xml
-
LCMA/Inf/rAbiWpfcTj/IcgBYEEWjN.xml
-
LCMA/Inf/rAbiWpfcTj/IhYXpRjEXW.xml
-
LCMA/Inf/rAbiWpfcTj/JEdDKeywAp.xml
-
LCMA/Inf/rAbiWpfcTj/KJSZjXdydj.xml
-
LCMA/Inf/rAbiWpfcTj/KdVKCKdeIL.xml
-
LCMA/Inf/rAbiWpfcTj/NnSsWsJPHv.xml
-
LCMA/Inf/rAbiWpfcTj/OCuIMXiNDu.xml
-
LCMA/Inf/rAbiWpfcTj/OJVUTxmWim.xml
-
LCMA/Inf/rAbiWpfcTj/PGAeCaIDts.xml
-
LCMA/Inf/rAbiWpfcTj/RFNqRsAoML.xml
-
LCMA/Inf/rAbiWpfcTj/SdJNsAbiLE.xml
-
LCMA/Inf/rAbiWpfcTj/SfpBrYJrwv.xml
-
LCMA/Inf/rAbiWpfcTj/SyqMpCWkLG.xml
-
LCMA/Inf/rAbiWpfcTj/UsASlThKug.xml
-
LCMA/Inf/rAbiWpfcTj/VIVPYqCtWC.xml
-
LCMA/Inf/rAbiWpfcTj/XTuIKFknRG.xml
-
LCMA/Inf/rAbiWpfcTj/ZhRrmbQjyz.xml
-
LCMA/Inf/rAbiWpfcTj/cOoumNHvlb.xml
-
LCMA/Inf/rAbiWpfcTj/cVhHxZFsYR.xml
-
LCMA/Inf/rAbiWpfcTj/ctDgqpXWnA.xml
-
LCMA/Inf/rAbiWpfcTj/fHIuRAcWrI.xml
-
LCMA/Inf/rAbiWpfcTj/ffJlfkBtqW.xml
-
LCMA/Inf/rAbiWpfcTj/fyTwFVWuvY.xml
-
LCMA/Inf/rAbiWpfcTj/gJdnVAHIkB.xml
-
LCMA/Inf/rAbiWpfcTj/gzUTDBmYdN.xml
-
LCMA/Inf/rAbiWpfcTj/jdytoxTepW.xml
-
LCMA/Inf/rAbiWpfcTj/kLeCFnSqMp.xml
-
LCMA/Inf/rAbiWpfcTj/mUtWQVUjBM.xml
-
LCMA/Inf/rAbiWpfcTj/mlkcyVcHsN.xml
-
LCMA/Inf/rAbiWpfcTj/moZyPLWaYk.xml
-
LCMA/Inf/rAbiWpfcTj/mquHaapswr.xml
-
LCMA/Inf/rAbiWpfcTj/ojNpkFFfBk.xml
-
LCMA/Inf/rAbiWpfcTj/owVbDYfrMm.xml
-
LCMA/Inf/rAbiWpfcTj/qChOAMdkPB.xml
-
LCMA/Inf/rAbiWpfcTj/rjXexwYxaR.xml
-
LCMA/Inf/rAbiWpfcTj/slryeVaMss.xml
-
LCMA/Inf/rAbiWpfcTj/uVWSlIkzhF.xml
-
LCMA/Inf/rAbiWpfcTj/wOaILCcPam.xml
-
LCMA/Inf/rAbiWpfcTj/xLfANKTPMY.xml
-
LCMA/Inf/rAbiWpfcTj/zRNjCdcYbu.xml
-
LCMA/Inf/rAbiWpfcTj/zvJZZdZhkm.xml
-
LCMA/Inf/uYESqDokgU/BMeZgogNNw.xml
-
LCMA/Inf/uYESqDokgU/CxZLYiHshL.xml
-
LCMA/Inf/uYESqDokgU/EBBjHNpjWx.xml
-
LCMA/Inf/uYESqDokgU/LPflHZsnEL.xml
-
LCMA/Inf/uYESqDokgU/LqQXBnVGsK.xml
-
LCMA/Inf/uYESqDokgU/NaoqiUZuKE.xml
-
LCMA/Inf/uYESqDokgU/OeMgMFdTad.xml
-
LCMA/Inf/uYESqDokgU/TprypMCRph.xml
-
LCMA/Inf/uYESqDokgU/UtzTQRMopq.xml
-
LCMA/Inf/uYESqDokgU/VDoxwapMGM.xml
-
LCMA/Inf/uYESqDokgU/fRqNoPgyNj.xml
-
LCMA/Inf/uYESqDokgU/fsgGqpIVkZ.xml
-
LCMA/Inf/uYESqDokgU/hGRmLgTMTh.xml
-
LCMA/Inf/uYESqDokgU/iJzfppRslF.xml
-
LCMA/Inf/uYESqDokgU/iRmvXAhUvy.xml
-
LCMA/Inf/uYESqDokgU/iTlRxAvRpV.xml
-
LCMA/Inf/uYESqDokgU/igzxgFHPfA.xml
-
LCMA/Inf/uYESqDokgU/lUQOzzDYET.xml
-
LCMA/Inf/uYESqDokgU/liiivuJvmE.xml
-
LCMA/Inf/uYESqDokgU/pJRVEdsRQe.xml
-
LCMA/Inf/uYESqDokgU/pqQqoLrGVc.xml
-
LCMA/Inf/uYESqDokgU/ptqhgeGOJS.xml
-
LCMA/Inf/uYESqDokgU/ruOjOpKiKe.xml
-
LCMA/Inf/uYESqDokgU/sJFqqQmQAF.xml
-
LCMA/Inf/uYESqDokgU/sQmvLREaiR.xml
-
LCMA/Inf/uYESqDokgU/ukXxGPdtWk.xml
-
LCMA/Inf/uYESqDokgU/wviGKEwFaQ.xml
-
LCMA/Inf/uYESqDokgU/xRgZXikcsQ.xml
-
LCMA/Inf/uYESqDokgU/xgthuogXyF.xml
-
LCMA/Inf/wvloMvjkLQ.xml
-
LCMA/Inf/zwOMDRjLyT.xml
-
LCMA/Silent install/icudtl.dat
-
LCMA/Silent install/lnjector.exe
Password: peng
b77b99c3883f50fc5eeab54139139034
Headers
Imports
Sections
-
LCMA/icudtl.dat
-
LCMA/lnjector.exe
Password: peng
f494e9bb2753c3b395b9806eb5f3c320
Headers
Imports
Sections