General

  • Target

    StormUserUGPP.exe

  • Size

    23.5MB

  • MD5

    bba76a28e395d0655d4a92bcda519e9d

  • SHA1

    0d84b49e802b4f9c159dcab5043745e051167452

  • SHA256

    4a27a25b32b5b4e7bcaaa823c4333945eae42e795879cb376f5344219508b378

  • SHA512

    96e4fd8c390757c963dc935015f59b05787b3ed37349dacb68145cfefb4f56399be324b04253c5e2fe76a16383cf9612a3ca7369838a3923b105bf7fd8b45118

  • SSDEEP

    393216:YE6n7XpJkjBZ8vcszBLyq5JKk3rcojLMChthoEw1GTi4Ko7OVi2FO+DEX5y/5T4:YE+Y0vc2BL13vMCfho0i4Ko7OVBFO+DU

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • StormUserUGPP.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MemoriaOpciones
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TenerCuenta
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/pantalla_ruta_java.ini
  • Manual STORM User 4.3.4.pdf
    .pdf
    • http://URL_SUPERVISORA/stormUser/userFiles/NOMBRE_INSTALADOR.exe

    • https://www.oracle.com/co/java/technologies/javase/jdk11-archive-downloads.html

    • http://stormUser_Mac.sh

    • https://www.oracle.com/co/java/technologies/javase/jdk11-archive-downloads.html2.

    • http://macroproyectos.com

    • http://www.macroproyectos.com

  • StormUser-4.3.0-RELEASE.jar
    .jar
  • StormUser-4.3.0-SNAPSHOT.jar
    .jar
  • StormUser-4.3.4-SNAPSHOT.jar
    .jar
  • carpeta.ico
  • cbStorm.ico
  • lib/StormUser-4.3.0-RELEASE.jar
    .jar
  • lib/StormUser-4.3.0-SNAPSHOT.jar
    .jar
  • lib/StormUser-4.3.4-SNAPSHOT.jar
    .jar
  • lib/adminFacades-3.7.2-1604.201512.jar
    .jar
  • lib/appframework-1.0.3.jar
    .jar
  • lib/baseUser-4.3.0-RELEASE.jar
    .jar
  • lib/baseUser-4.3.0-SNAPSHOT.jar
    .jar
  • lib/baseUser-4.3.4-SNAPSHOT.jar
    .jar
  • lib/commons-codec-1.9.jar
    .jar
  • lib/commons-dbutils-1.6.jar
    .jar
  • lib/commons-httpclient-3.0.1.jar
    .jar
  • lib/commons-io-2.4.jar
    .jar
  • lib/commons-lang-2.6.jar
    .jar
  • lib/commons-lang3-3.4.jar
    .jar
  • lib/commons-logging-1.0.3.jar
    .jar
  • lib/httpClient-1.0.0-1701.231154.jar
    .jar
  • lib/jaxen-core-1.0-FCS.jar
    .jar
  • lib/jaxen-jdom-1.0-FCS.jar
    .jar
  • lib/jdom-1.1.3.jar
    .jar
  • lib/jep-2.4.0.jar
    .jar
  • lib/json-20140107.jar
    .jar
  • lib/junit-3.8.1.jar
    .jar
  • lib/log4j-1.2.17.jar
    .jar
  • lib/matrizDispersa-3.7.1-1509.251112.jar
    .jar
  • lib/mpErrors-4.0.4-1506.170949.jar
    .jar
  • lib/poi-3.11.jar
    .jar
  • lib/poi-ooxml-3.11.jar
    .jar
  • lib/poi-ooxml-schemas-3.11.jar
    .jar
  • lib/register-1.0.0.jar
    .jar
  • lib/rhino-4.0.4-1506.191720.jar
    .jar
  • lib/saxpath-1.0-FCS.jar
    .jar
  • lib/slf4j-api-1.7.12.jar
    .jar
  • lib/slf4j-log4j12-1.7.12.jar
    .jar
  • lib/stax-api-1.0.1.jar
    .jar
  • lib/stormFormula-1.0.0-1505.271522.jar
    .jar
  • lib/stormParser-1.0.0.jar
    .jar
  • lib/stormServer-4.3.0-RELEASE.jar
    .jar
  • lib/stormServer-4.3.0-SNAPSHOT.jar
    .jar
  • lib/stormServer-4.3.4-SNAPSHOT.jar
    .jar
  • lib/swing-layout-1.0.3.jar
    .jar
  • lib/swing-worker-1.1.jar
    .jar
  • lib/utilXml-1.0.0.jar
    .jar
  • lib/xmlbeans-2.6.0.jar
    .jar
  • logo.gif
    .gif
  • logoUser.png
    .png
  • pdf.ico
  • stcb.ico
  • storm64x64.png
    .png
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • userContra2.ico
  • website.ico