Resubmissions

22/02/2024, 02:16

240222-cp8shaah72 7

22/02/2024, 02:13

240222-cnpm8sah54 7

General

  • Target

    hdsentinel_pro_portable.zip

  • Size

    40.9MB

  • MD5

    1d82820ea8f60dfe76a4a5d0c763a632

  • SHA1

    42e9db80dfdff2549547d29afa3746809d09a3ac

  • SHA256

    230f0082865e50035b6852690a86d1c58cdf8f04849bcd108b5f47bfd1fd4f0b

  • SHA512

    a89479b64ad9e1b733359611e637d8a848b181de62a59bacc19f3ad9e9dc08a551b7fd87fedaaff0d73268e44265ea0d3dadc1516afd45ffdd2b976bde5487af

  • SSDEEP

    786432:QnlzjpDd0Sa0G9A3rqwgfrxRTkIxepCJ1aeY6rFfCNKqfQ0bwPpbzbxQ8:QnfTu9A3rIDfkmepYwKrVAhY0UPpvW8

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 11 IoCs

    Detects file using ACProtect software.

  • UPX packed file 25 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • hdsentinel_pro_portable.zip
    .zip

    Password: hd

  • 109CommandLib.dll
    .dll windows:5 windows x86 arch:x86

    Password: hd

    f3289d313f3096f14e6df44e93cc4d4f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EN.LNG
  • HDSEvtMsg.dll
    .dll windows:4 windows x86 arch:x86

    Password: hd


    Code Sign

    Headers

    Sections

  • HDSentinel.exe
    .exe windows:4 windows x86 arch:x86

    Password: hd


    Code Sign

    Headers

    Sections

  • HDSentinel.rdi
  • HDSentinelTray.exe
    .exe windows:4 windows x86 arch:x86

    Password: hd


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • HDnotify.wav
  • HDsirena.mp3
  • Storagetest.dll
    .exe windows:4 windows x86 arch:x86

    Password: hd


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • afaapi.dll
    .dll windows:4 windows x86 arch:x86

    Password: hd

    eb842ac86186f73eea06f1e518a1bd36


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ar.lng
  • arpro.lng
  • bc_vbdll.dll
    .dll windows:4 windows x86 arch:x86

    Password: hd


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • be.lng
  • bepro.lng
  • bg.lng
  • bgpro.lng
  • cn.lng
  • cnpro.lng
  • cz.lng
  • czpro.lng
  • da.lng
  • dapro.lng
  • de.chm
    .chm
  • de.lng
  • depro.lng
  • deta.dll
    .exe windows:4 windows x86 arch:x86

    Password: hd


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • deta1.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • deta2.dlz
    .zip
  • detat.dll
    .exe windows:5 windows x86 arch:x86

    1b111a795614955d9acc0a9aff0c8761


    Code Sign

    Headers

    Imports

    Sections

  • detect.dat
  • detect.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • dethp.dll
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • dethp2.dll
    .exe windows:6 windows x64 arch:x64

    fba39fb001f0677766a082b201e3f431


    Code Sign

    Headers

    Imports

    Sections

  • dethpt.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detjm.dll
    .exe windows:4 windows x86 arch:x86

    bf3d644c7db35d95757892b7e5bd58bb


    Code Sign

    Headers

    Imports

    Sections

  • detjm2.dll
    .exe windows:4 windows x86 arch:x86

    bf3d644c7db35d95757892b7e5bd58bb


    Code Sign

    Headers

    Imports

    Sections

  • detjmx.dll
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detmv.dll
    .exe windows:5 windows x86 arch:x86

    563a625f6f73377684bce325017e6f3e


    Code Sign

    Headers

    Imports

    Sections

  • detp.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detpex.dlz
    .zip
  • detrc.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detrca.dll
    .exe windows:6 windows x86 arch:x86

    45e9ae5fbcf125fe3028bd1d6bc8504c


    Code Sign

    Headers

    Imports

    Sections

  • detrd.dll
    .sys windows:6 windows x86 arch:x86

    f4c846df9b59cf3d80de2994bd22c0b7


    Code Sign

    Headers

    Imports

    Sections

  • detrd64.dll
    .sys windows:6 windows x64 arch:x64

    e233f2cdc91faafe1467d9e52f166213


    Code Sign

    Headers

    Imports

    Sections

  • detre.dll
    .exe windows:6 windows x86 arch:x86

    72700caeca16be4e47132f3bc4495e6b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • detre6.dll
    .exe windows:6 windows x64 arch:x64

    5bc9b7b6916fca3447de9e31d2d80b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • detre7.dll
    .exe windows:6 windows x64 arch:x64

    2db0d8ccf0a70e07449f1fa97c4455d8


    Code Sign

    Headers

    Imports

    Sections

  • detw.dll
    .exe windows:5 windows x86 arch:x86

    53b90df56addaf29409479e2b09de27c


    Code Sign

    Headers

    Imports

    Sections

  • detw64.dll
    .exe windows:5 windows x64 arch:x64

    293cf286043bd8291c84d87bc63d7ebc


    Code Sign

    Headers

    Imports

    Sections

  • du.lng
  • dupro.lng
  • en.chm
    .chm
  • enpro.lng
  • fi.chm
    .chm
  • fi.lng
  • fipro.lng
  • fnp_act_installer.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • fr.lng
  • frpro.lng
  • gr.chm
    .chm
  • gr.lng
  • grpro.lng
  • harddisksentinelupdate.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • hdd.jpg
    .jpg
  • hds_eula_en.txt
  • hds_eula_hu.txt
  • hdsaction.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • hdsctrl.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • hdsentinel.sys
    .sys windows:5 windows x86 arch:x86

    389659594b01690a0b709b955935f807


    Code Sign

    Headers

    Imports

    Sections

  • hdsentinel.vsh
    .html .js polyglot
  • hdsentinel.vsx
    .xml
  • hdsimg.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • hdsversion.txt
  • hptdev.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • hu.chm
    .chm
  • hu.lng
  • hupro.lng
  • id.lng
  • idpro.lng
  • infomgr.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • it.chm
    .chm
  • it.lng
  • itpro.lng
  • jp.lng
  • jppro.lng
  • ko.lng
  • kopro.lng
  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libxml2.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • mk.lng
  • mkpro.lng
  • mv_api.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • pl.chm
    .chm
  • pl.lng
  • plpro.lng
  • prdecode.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • prerrlog.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • pri2plgnnapa.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ptbr.lng
  • ptbrpro.lng
  • removehds7.vbs
    .vbs
  • ro.lng
  • ropro.lng
  • ru.chm
    .chm
  • ru.lng
  • rupro.lng
  • sk.lng
  • skpro.lng
  • sp.lng
  • sppro.lng
  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    2b319a838751e6765694bcafaad52919


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • status.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • statusb.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • statusg.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • statusn.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • statusw.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • storarc.dll
    .dll windows:4 windows x86 arch:x86

    3011d179ff36dd6b41e97d979b321d9b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • storectrl.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • storelib.dll
    .dll windows:4 windows x86 arch:x86

    a5b1753793824040e6865e42e9a89a63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • storelib2.dlz
    .zip
  • storelib3.dlz
    .zip
  • storelibir-2.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • storelibir.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • sw.lng
  • swpro.lng
  • tr.lng
  • trpro.lng
  • tw.lng
  • twpro.lng
  • uk.lng
  • ukpro.lng
  • vista_status.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • vista_statusb.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • vista_statusg.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • vista_statusn.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • vista_statusw.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_status.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_statusb.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_statusg.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_statusn.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_statusw.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections