Overview

overview

7

Static

static

3

1cf7efd3b4...8f.exe

windows7-x64

7

1cf7efd3b4...8f.exe

windows10-2004-x64

7

$PLUGINSDI...ID.dll

windows7-x64

3

$PLUGINSDI...ID.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

水豚鼠�...��.exe

windows7-x64

1

水豚鼠�...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1cf7efd3b42528e8b2f93f806ab4d598573589e1dac60f0d2753b1651cfc758f

  • Size

    8.7MB

  • MD5

    7ae357d447f93f46e1b6297589f01cf6

  • SHA1

    eb3e44d6e1904af56927e6c3f8bf1788e6982834

  • SHA256

    1cf7efd3b42528e8b2f93f806ab4d598573589e1dac60f0d2753b1651cfc758f

  • SHA512

    9f844e3ccfd239f27d1e3b7298f424abe947c92b9acde85e04d21e7d179b56588b117f7b3a515a2c163edfe88270c6392f6f38a0061399dcc7c402b22d01a8ce

  • SSDEEP

    196608:uMZbDxagScEYzLDraob4uBT3g4n96a6DRPXn+Zw:uMPadALTbzRQ4nAa6ln+Zw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 1cf7efd3b42528e8b2f93f806ab4d598573589e1dac60f0d2753b1651cfc758f
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    8c45ff8a205d07c8c17066afebcdfc91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    38343d611b1489f0e414939f06a99451


    Headers

    Imports

    Exports

    Sections

  • resources/cursor.cur
  • resources/nocursor.cur
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    38343d611b1489f0e414939f06a99451


    Headers

    Imports

    Exports

    Sections

  • 水豚鼠标助手.exe
    .exe windows:6 windows x64 arch:x64

    d2436ce3a39701e26e6486bf52d82cc7


    Headers

    Imports

    Sections