Overview

overview

7

Static

static

3

bb0d563dc5...8b.exe

windows7-x64

7

bb0d563dc5...8b.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...4_.exe

windows7-x64

7

$SYSDIR/$S...4_.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/$S...8_.dll

windows7-x64

6

$SYSDIR/$S...8_.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb0d563dc56f6c5cbbf8fb485d34268b

  • Size

    187KB

  • MD5

    bb0d563dc56f6c5cbbf8fb485d34268b

  • SHA1

    eb67632b6369eafebfab40da7729108d27064120

  • SHA256

    ec512c3ff3f84b4778da268c195b7b4a5f0a50294ed686273c9a23fcb1fc3f9e

  • SHA512

    c84e08d86e2e2213817fc20465ae04f9801516663c0d18ab5de1c9a482880895983861cdd8fe0696850e57472cbc26c494ca2130295b2c40149a3d8e1cc7b3b5

  • SSDEEP

    3072:zP7eLDDmJfGPARkWXwZliOz35PRSTtKS4xQOdT8e6cPhYxLCAVStOJhaqXrRp2SW:zjUhPAW2pERRKcp8e6cPWLWtOWkrnNmN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • bb0d563dc56f6c5cbbf8fb485d34268b
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/$SYSDIR/$_14_.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:4 windows x86 arch:x86

    f5edecae12589e705677a6e272ad0394


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/validate.ini
  • $SYSDIR/$SYSDIR/$_8_.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    11a3f9f27b226511ac460f18e90e2968


    Headers

    Imports

    Exports

    Sections