General

  • Target

    Telegram Desktop.zip

  • Size

    9.3MB

  • MD5

    311f8e33de278e9a2a3a09086cb444e1

  • SHA1

    7d1006c3d39d868de2540be2e888ce4c4c35a6d3

  • SHA256

    d86296cba8a3752b0d794ce152830a544ec7cd7b64dbcdf2aca73481cec59de9

  • SHA512

    7f248ebe1e22982fcc73092cdf8ebbe5b5d9f549c81f17a59451bb5eabcd70a7094560d6dde00a2f7fdfeab18cfaed4bb97401ec45b54e4a84851857402c69db

  • SSDEEP

    196608:KSgUGDobZblzSOaqxg9h+WTwI7oIFOsVp6dfVVXcpb4P9+fwG0s:KSHGUlblzSbqCXZUVJ6psfbcR4Xs

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Telegram Desktop.zip
    .zip
  • AIO checker 2023.rar
    .rar
  • AIO checker 2023.exe
    .exe windows:6 windows x86 arch:x86

    f0e0146e7ff4f18a3a5eed18099e5979


    Code Sign

    Headers

    Imports

    Sections

  • DscCore.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    5c4f5e9d3de04ba637c8b0cb336d0cc1


    Headers

    Imports

    Exports

    Sections

  • DscCoreConfProv.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    1d21f3140d0d1815b30431e6647792c6


    Headers

    Imports

    Exports

    Sections

  • README.txt
  • drvstore.dll
    .dll windows:6 windows x64 arch:x64

    6d870c47b3b76e4c1d34231c2eb3d0f7


    Headers

    Imports

    Exports

    Sections

  • CC Checker AcTeam.rar
    .rar
  • CC Checker AcTeam.exe
    .exe windows:6 windows x86 arch:x86

    f0e0146e7ff4f18a3a5eed18099e5979


    Code Sign

    Headers

    Imports

    Sections

  • README.txt
  • dmview.ocx
    .dll regsvr32 windows:6 windows x64 arch:x64

    cade1bb83eee406153899628af9ee28a


    Headers

    Imports

    Exports

    Sections

  • dnscmmc.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    3922b90b5a2eecbfa5765ccf4dbe450f


    Headers

    Imports

    Exports

    Sections

  • elshyph.dll
    .dll windows:6 windows x64 arch:x64

    b6b3ace989c6db7ab2cafc69ea32ef86


    Headers

    Imports

    Exports

    Sections

  • Checker Zalando.rar
    .rar
  • Checker Zalando/Checker Zalando.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Checker Zalando/dycpasapi.dll
    .dll windows:6 windows x64 arch:x64

    147334bd1cbbd98036ac54896aaddeab


    Headers

    Imports

    Sections