Overview

overview

7

Static

static

3

be4e8c7ba5...51.exe

windows7-x64

7

be4e8c7ba5...51.exe

windows10-2004-x64

7

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/FTPul.dll

windows7-x64

3

$PLUGINSDIR/FTPul.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/ftp.exe

windows7-x64

1

$PLUGINSDIR/ftp.exe

windows10-2004-x64

1

$PLUGINSDI...mx.bat

windows7-x64

1

$PLUGINSDI...mx.bat

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

addons/amx...mm.dll

windows7-x64

3

addons/amx...mm.dll

windows10-2004-x64

3

addons/amx...386.so

ubuntu-18.04-amd64

1

addons/amx...s.html

windows7-x64

1

addons/amx...s.html

windows10-2004-x64

1

addons/amx...u.html

windows7-x64

1

addons/amx...u.html

windows10-2004-x64

1

addons/amx...u.html

windows7-x64

1

addons/amx...u.html

windows10-2004-x64

1

addons/amx...u.html

windows7-x64

1

addons/amx...u.html

windows10-2004-x64

1

addons/amx...s.html

windows7-x64

1

addons/amx...s.html

windows10-2004-x64

1

addons/amx...e.html

windows7-x64

1

addons/amx...e.html

windows10-2004-x64

1

addons/amx...g.html

windows7-x64

1

addons/amx...g.html

windows10-2004-x64

1

addons/amx...u.html

windows7-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    be4e8c7ba574509a2cc8de1b0c195d51

  • Size

    4.3MB

  • MD5

    be4e8c7ba574509a2cc8de1b0c195d51

  • SHA1

    82dfe558782928e48fc909a9f910a3eacf34bdbd

  • SHA256

    e92cce404aa21e1da82d71aaf76095ceb90180a52c29b03b05982373c2045d2f

  • SHA512

    f18074ebbd6d42497b82e8e83bb49a9ab4df0757c81a1a662fb95808895fbeb0d2d08bfced3e9f2d36e389f36719ef10d0a58bf27a04a43cb7f61fccbefff579

  • SSDEEP

    98304:uCpVAjL190xPxGTfJybVpcP5Z69B3eLKLkWGY5SJgKKUs3XQRkB2uHKVW5AViqN4:uCpVAjL196P6f8BpcPv6QKLkZKFRf34G

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • be4e8c7ba574509a2cc8de1b0c195d51
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FTPul.dll
    .dll windows:4 windows x86 arch:x86

    a183c14be22a915065476e49da5a41a4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/amx.bmp
  • $PLUGINSDIR/amx_filelist.txt
  • $PLUGINSDIR/amx_ftp.txt
  • $PLUGINSDIR/config_filelist.txt
  • $PLUGINSDIR/ftp.exe
    .exe windows:5 windows x86 arch:x86

    72461fdf0a8e4b6e7a91d2e92630e1e6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ftp.ini
  • $PLUGINSDIR/ftp_amx.bat
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/meta_filelist.txt
  • $PLUGINSDIR/meta_ftp.txt
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/modullist.txt
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    f835ad7f9363dc017c6826af3baa9002


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pluginlist.txt
  • $PLUGINSDIR/sound_filelist.txt
  • $PLUGINSDIR/sound_ftp.txt
  • $PLUGINSDIR/type.ini
  • addons/amx/config/amx.cfg
  • addons/amx/config/clcmds.ini
  • addons/amx/config/cmds.ini
  • addons/amx/config/configs.ini
  • addons/amx/config/conmotd.txt
  • addons/amx/config/custom_menus.cfg
  • addons/amx/config/cvars.ini
  • addons/amx/config/language.ini
  • addons/amx/config/maps.ini
  • addons/amx/config/maps/de_dust.cfg
  • addons/amx/config/maps/prefix_de_.cfg
  • addons/amx/config/modules.ini
  • addons/amx/config/mysql.cfg
  • addons/amx/config/paths.ini
  • addons/amx/config/plugins.ini
  • addons/amx/config/speech.ini
  • addons/amx/config/stats.ini
  • addons/amx/config/users.ini
  • addons/amx/dlls/amx_mm.dll
    .dll windows:4 windows x86 arch:x86

    5f14d6919ae1e94fcda9f15adf0b2ad5


    Headers

    Imports

    Exports

    Sections

  • addons/amx/dlls/amx_mm_i386.so
    .elf linux x86
  • addons/amx/docs/amxaddlangs.html
    .html
  • addons/amx/docs/amxcfgmenu.html
    .html
  • addons/amx/docs/amxclcmdmenu.html
    .html
  • addons/amx/docs/amxcmdmenu.html
    .html
  • addons/amx/docs/amxcommands.html
    .html
  • addons/amx/docs/amxcompile.html
    .html
  • addons/amx/docs/amxconfig.html
    .html
  • addons/amx/docs/amxcvarsmenu.html
    .html
  • addons/amx/docs/amxinstall.html
    .html
  • addons/amx/docs/amxlangconf.html
    .html
  • addons/amx/docs/amxmapconfigs.html
    .html
  • addons/amx/docs/amxmapsmenu.html
    .html
  • addons/amx/docs/amxmenus.html
    .html
  • addons/amx/docs/amxmodules.html
    .html
  • addons/amx/docs/amxmysql.html
    .html
  • addons/amx/docs/amxpaths.html
    .html
  • addons/amx/docs/amxplugins.html
    .html
  • addons/amx/docs/amxsetup.html
    .html
  • addons/amx/docs/amxspeechmenu.html
    .html
  • addons/amx/docs/amxstats.html
    .html
  • addons/amx/docs/amxusers.html
    .html
  • addons/amx/docs/amxweaponrest.html
    .html
  • addons/amx/docs/consolespeakvox.txt
  • addons/amx/docs/credit.html
    .html
  • addons/amx/docs/index.html
    .html
  • addons/amx/docs/metamod.html
    .html
  • addons/amx/docs/misc.html
    .html
  • addons/amx/docs/showhide.js
  • addons/amx/docs/style.css
  • addons/amx/docs/vexdum.html
    .html
  • addons/amx/examples/amx_compiler.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/compiler.ini
  • $PLUGINSDIR/include/VexdUM.inc
  • $PLUGINSDIR/include/VexdUM_const.inc
  • $PLUGINSDIR/include/VexdUM_stock.inc
  • $PLUGINSDIR/include/Vexd_Utilities.inc
  • $PLUGINSDIR/include/Xtrafun_to_Vexd.inc
  • $PLUGINSDIR/include/amxconst.inc
  • $PLUGINSDIR/include/amxmisc.inc
  • $PLUGINSDIR/include/amxmod.inc
  • $PLUGINSDIR/include/amxmodx_to_amx.inc
  • $PLUGINSDIR/include/core.inc
  • $PLUGINSDIR/include/csstats.inc
  • $PLUGINSDIR/include/cstrike.inc
  • $PLUGINSDIR/include/dodconst.inc
  • $PLUGINSDIR/include/dodstats.inc
  • $PLUGINSDIR/include/dodxmod.inc
  • $PLUGINSDIR/include/file.inc
  • $PLUGINSDIR/include/float.inc
  • $PLUGINSDIR/include/fun.inc
  • $PLUGINSDIR/include/geoip.inc
  • $PLUGINSDIR/include/maths.inc
  • $PLUGINSDIR/include/message_const.inc
  • $PLUGINSDIR/include/mysql.inc
  • $PLUGINSDIR/include/sockets.inc
  • $PLUGINSDIR/include/string.inc
  • $PLUGINSDIR/include/translator.inc
  • $PLUGINSDIR/include/vault.inc
  • $PLUGINSDIR/include/vector.inc
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    f835ad7f9363dc017c6826af3baa9002


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sc.exe
    .exe windows:4 windows x86 arch:x86

    60733544761ed1a89b88e369e982d309


    Headers

    Imports

    Sections

  • addons/amx/examples/compile
    .sh linux
  • addons/amx/examples/compile.bat
  • addons/amx/examples/compile_drag&drop.bat
  • addons/amx/examples/include/VexdUM.inc
  • addons/amx/examples/include/VexdUM_const.inc
  • addons/amx/examples/include/VexdUM_stock.inc
  • addons/amx/examples/include/Vexd_Utilities.inc
  • addons/amx/examples/include/Xtrafun_to_Vexd.inc
  • addons/amx/examples/include/amxconst.inc
  • addons/amx/examples/include/amxmisc.inc
  • addons/amx/examples/include/amxmod.inc
  • addons/amx/examples/include/amxmodx_to_amx.inc
  • addons/amx/examples/include/core.inc
  • addons/amx/examples/include/csstats.inc
  • addons/amx/examples/include/cstrike.inc
  • addons/amx/examples/include/dodconst.inc
  • addons/amx/examples/include/dodstats.inc
  • addons/amx/examples/include/dodxmod.inc
  • addons/amx/examples/include/file.inc
  • addons/amx/examples/include/float.inc
  • addons/amx/examples/include/fun.inc
  • addons/amx/examples/include/geoip.inc
  • addons/amx/examples/include/maths.inc
  • addons/amx/examples/include/message_const.inc
  • addons/amx/examples/include/mysql.inc
  • addons/amx/examples/include/sockets.inc
  • addons/amx/examples/include/string.inc
  • addons/amx/examples/include/translator.inc
  • addons/amx/examples/include/vault.inc
  • addons/amx/examples/include/vector.inc
  • addons/amx/examples/sc
    .elf linux x86
  • addons/amx/examples/sc.exe
    .exe windows:4 windows x86 arch:x86

    60733544761ed1a89b88e369e982d309


    Headers

    Imports

    Sections

  • addons/amx/examples/source/compile_drag&drop.bat
  • addons/amx/examples/source/default/admin.sma
  • addons/amx/examples/source/default/adminchat.sma
  • addons/amx/examples/source/default/admincmd.sma
  • addons/amx/examples/source/default/adminhelp.sma
  • addons/amx/examples/source/default/adminslots.sma
  • addons/amx/examples/source/default/adminvote.sma
  • addons/amx/examples/source/default/antiflood.sma
  • addons/amx/examples/source/default/cmdmenu.sma
  • addons/amx/examples/source/default/compile_drag&drop.bat
  • addons/amx/examples/source/default/csstats.sma
  • addons/amx/examples/source/default/ff_manager.sma
  • addons/amx/examples/source/default/imessage.sma
  • addons/amx/examples/source/default/language.sma
  • addons/amx/examples/source/default/mapchooser.sma
  • addons/amx/examples/source/default/mapconfig.sma
  • addons/amx/examples/source/default/mapsmenu.sma
  • addons/amx/examples/source/default/menufront.sma
  • addons/amx/examples/source/default/miscstats.sma
  • addons/amx/examples/source/default/nextmap.sma
  • addons/amx/examples/source/default/pausecfg.sma
  • addons/amx/examples/source/default/plmenu.sma
  • addons/amx/examples/source/default/plugmod_manager.sma
  • addons/amx/examples/source/default/restmenu.sma
  • addons/amx/examples/source/default/scrollmsg.sma
  • addons/amx/examples/source/default/stats_logging.sma
  • addons/amx/examples/source/default/statscfg.sma
  • addons/amx/examples/source/default/statsx.sma
  • addons/amx/examples/source/default/telemenu.sma
  • addons/amx/examples/source/default/timeleft.sma
  • addons/amx/examples/source/default/welcomemsg.sma
  • addons/amx/faq.txt
  • addons/amx/lang/adminbase.txt
  • addons/amx/lang/adminchat.txt
  • addons/amx/lang/admincmd.txt
  • addons/amx/lang/adminhelp.txt
  • addons/amx/lang/adminslots.txt
  • addons/amx/lang/adminvote.txt
  • addons/amx/lang/amxcore.txt
  • addons/amx/lang/antiflood.txt
  • addons/amx/lang/cmdmenu.txt
  • addons/amx/lang/common.txt
  • addons/amx/lang/csstats.txt
  • addons/amx/lang/ff_manager.txt
  • addons/amx/lang/imessage.txt
  • addons/amx/lang/langmngr.txt
    .vbs
  • addons/amx/lang/mapchooser.txt
  • addons/amx/lang/mapconfig.txt
  • addons/amx/lang/mapsmenu.txt
  • addons/amx/lang/menufront.txt
  • addons/amx/lang/miscstats.txt
  • addons/amx/lang/nextmap.txt
  • addons/amx/lang/pausecfg.txt
  • addons/amx/lang/plmenu.txt
  • addons/amx/lang/plugmod_manager.txt
  • addons/amx/lang/restmenu.txt
  • addons/amx/lang/scrollmsg.txt
  • addons/amx/lang/statscfg.txt
  • addons/amx/lang/statslog.txt
  • addons/amx/lang/statsx.txt
    .vbs
  • addons/amx/lang/telemenu.txt
  • addons/amx/lang/timeleft.txt
  • addons/amx/lang/welcomemsg.txt
  • addons/amx/modules/GeoIP.dat
  • addons/amx/modules/VexdUM.dll
    .dll windows:4 windows x86 arch:x86

    04536dc68ca1fbadc1324cedaf4d696f


    Headers

    Imports

    Exports

    Sections

  • addons/amx/modules/VexdUM_i386.so
    .elf linux x86
  • addons/amx/modules/csstats.dll
    .dll windows:4 windows x86 arch:x86

    2804f1aa582ca21b2b0b6a85c8417379


    Headers

    Imports

    Exports

    Sections

  • addons/amx/modules/csstats_i386.so
    .elf linux x86
  • addons/amx/modules/fun.dll
    .dll windows:4 windows x86 arch:x86

    7cdd71d192caa080a8a37d6c2b80569b


    Headers

    Imports

    Exports

    Sections

  • addons/amx/modules/fun_i386.so
    .elf linux x86
  • addons/amx/modules/geoip.dll
    .dll windows:4 windows x86 arch:x86

    0802fed5d4c6878d3efb040bf804dfa4


    Headers

    Imports

    Exports

    Sections

  • addons/amx/modules/geoip_i386.so
    .elf linux x86
  • addons/amx/modules/mysql.dll
    .dll windows:4 windows x86 arch:x86

    34739051cc3f46d07149db86977e4854


    Headers

    Imports

    Exports

    Sections

  • addons/amx/modules/mysql_i386.so
    .elf linux x86
  • addons/amx/modules/sockets.dll
    .dll windows:4 windows x86 arch:x86

    3ea967fd3c342220924661eae6b0372c


    Headers

    Imports

    Exports

    Sections

  • addons/amx/modules/sockets_i386.so
    .elf linux x86
  • addons/amx/plugins/admin.amx
  • addons/amx/plugins/adminchat.amx
  • addons/amx/plugins/admincmd.amx
  • addons/amx/plugins/adminhelp.amx
  • addons/amx/plugins/adminslots.amx
  • addons/amx/plugins/adminvote.amx
  • addons/amx/plugins/antiflood.amx
  • addons/amx/plugins/cmdmenu.amx
  • addons/amx/plugins/csstats.amx
  • addons/amx/plugins/ff_manager.amx
  • addons/amx/plugins/imessage.amx
  • addons/amx/plugins/language.amx
  • addons/amx/plugins/mapchooser.amx
  • addons/amx/plugins/mapconfig.amx
  • addons/amx/plugins/mapsmenu.amx
  • addons/amx/plugins/menufront.amx
  • addons/amx/plugins/miscstats.amx
  • addons/amx/plugins/nextmap.amx
  • addons/amx/plugins/pausecfg.amx
  • addons/amx/plugins/plmenu.amx
  • addons/amx/plugins/plugmod_manager.amx
  • addons/amx/plugins/restmenu.amx
  • addons/amx/plugins/scrollmsg.amx
  • addons/amx/plugins/stats_logging.amx
  • addons/amx/plugins/statscfg.amx
  • addons/amx/plugins/statsx.amx
  • addons/amx/plugins/telemenu.amx
  • addons/amx/plugins/timeleft.amx
  • addons/amx/plugins/welcomemsg.amx
  • addons/amx/readme.txt
  • addons/metamod/dlls/metamod.dll
    .dll windows:4 windows x86 arch:x86

    19360f36b1b608fa3c0c10b9ced03c59


    Headers

    Imports

    Exports

    Sections

  • addons/metamod/dlls/metamod_i386.so
    .elf linux x86
  • addons/metamod/plugins.ini
  • cal_cs.cfg
  • calot_cs.cfg
  • cb_cs.cfg
  • ogl_cs.cfg
  • ogladv_cs.cfg
  • oglff_cs.cfg
  • oglot_cs.cfg
  • sound/djeyl/c4powa.wav
  • sound/djeyl/grenade.wav
  • sound/djeyl/laugh.wav
  • sound/djeyl/witch.wav
  • sound/misc/doublekill.wav
  • sound/misc/firstblood.wav
  • sound/misc/godlike.wav
  • sound/misc/headshot.wav
  • sound/misc/humiliation.wav
  • sound/misc/impressive.wav
  • sound/misc/killingspree.wav
  • sound/misc/maytheforce.wav
  • sound/misc/monsterkill.wav
  • sound/misc/multikill.wav
  • sound/misc/oneandonly.wav
  • sound/misc/prepare.wav
  • sound/misc/rampage.wav
  • sound/misc/ultrakill.wav
  • sound/misc/unstoppable.wav