Overview

overview

7

Static

static

3

f56b8843d8...30.exe

windows7-x64

7

f56b8843d8...30.exe

windows10-2004-x64

7

$PLUGINSDI...ID.dll

windows7-x64

3

$PLUGINSDI...ID.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

水豚鼠�...��.exe

windows7-x64

1

水豚鼠�...��.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    f56b8843d8de6270b393ff050e2e21607cbdae2cb49c9229531e5e78e1574230

  • Size

    8.8MB

  • MD5

    eae25d966c91b6c4a2ef005b0b2a1a0e

  • SHA1

    68d7960c0502028238400d2ae81628bca2392dfc

  • SHA256

    f56b8843d8de6270b393ff050e2e21607cbdae2cb49c9229531e5e78e1574230

  • SHA512

    5ef320c7382aef6dea4dd7ed78bc7e1f3527564bbbeadc2ff2c4a358b68fbef3651879965bcc176100c6064c6e09307bbce9d5f0bd3d4f998e394bfe08c52cd2

  • SSDEEP

    196608:ukh+z23xVHTpyc9xPfRgGvwhbPh4Bnhe220X2agnRztM8CKHR4R:ukhUkHTsqnRgkwBaA220X2tnR/CGC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • f56b8843d8de6270b393ff050e2e21607cbdae2cb49c9229531e5e78e1574230
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    8c45ff8a205d07c8c17066afebcdfc91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    38343d611b1489f0e414939f06a99451


    Headers

    Imports

    Exports

    Sections

  • resources/cursor.cur
  • resources/nocursor.cur
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    38343d611b1489f0e414939f06a99451


    Headers

    Imports

    Exports

    Sections

  • 水豚鼠标助手.exe
    .exe windows:6 windows x64 arch:x64

    e919e8323319f4add151cc0beadf28e8


    Headers

    Imports

    Sections