Overview

overview

6

Static

static

3

Help-File.url

windows7-x64

6

Help-File.url

windows10-2004-x64

3

KMReg.exe

windows7-x64

1

KMReg.exe

windows10-2004-x64

1

Koma_Mail.exe

windows7-x64

3

Koma_Mail.exe

windows10-2004-x64

3

Languages/...��.url

windows7-x64

1

Languages/...��.url

windows10-2004-x64

1

UnzDll.dll

windows7-x64

1

UnzDll.dll

windows10-2004-x64

1

ZipDll.dll

windows7-x64

1

ZipDll.dll

windows10-2004-x64

3

libeay32.dll

windows7-x64

1

libeay32.dll

windows10-2004-x64

1

libssl32.dll

windows7-x64

1

libssl32.dll

windows10-2004-x64

1

ssleay32.dll

windows7-x64

1

ssleay32.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c11d5379030f8acb80041b5fd937a268

  • Size

    1.8MB

  • MD5

    c11d5379030f8acb80041b5fd937a268

  • SHA1

    746da127daf520fe07ee340983a609fdf062db77

  • SHA256

    ae6e6fa6347bf63ce96e4731659bac9ad793891053ed28f88dabef581bc3e28b

  • SHA512

    23eee2229cb8a3824fa768c92253e4aed11c66bcc695bb073c576735385b2c0515bf45945a64f8d18f32fd906142307779b345c555c9c0c61581f037b0d8d309

  • SSDEEP

    49152:A6BX+ujWWuWP/bejAiw6PFpy/ORidM5HlO:JuuqWuWPjXldmMqF4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • c11d5379030f8acb80041b5fd937a268
    .rar
  • Help-File.url
  • How_To_Translate_KomaMail.txt
  • IM1.bmp
  • IM2.bmp
  • IM3.bmp
  • IM4.bmp
  • IM6.bmp
  • KMReg.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • KMReg.exe.manifest
    .xml
  • Koma_Mail.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Languages/Catalan.txt
  • Languages/Czech.txt
  • Languages/English.txt
  • Languages/EnglishGB.txt
  • Languages/Finnish.txt
  • Languages/French.txt
  • Languages/Galego.txt
  • Languages/German.txt
  • Languages/Greek.txt
  • Languages/Hungarian.txt
  • Languages/Italian.txt
  • Languages/Japanese.txt
  • Languages/Nederlands.txt
  • Languages/Polish.txt
  • Languages/Portuguese.txt
  • Languages/Romanian.txt
  • Languages/Russian.txt
  • Languages/Spanish.txt
  • Languages/Ukrainian.txt
  • Languages/新云软件.url
    .url
  • License.txt
  • ServerSettings.dat
  • SplashScreen.jpg
    .jpg
  • Thumbs.db
  • UnzDll.dll
    .dll windows:4 windows x86 arch:x86

    43a2a49ea452b464ff71bf6112e394c1


    Headers

    Imports

    Exports

    Sections

  • ZipDll.dll
    .dll windows:4 windows x86 arch:x86

    8df7add524088e1365dd260c717232eb


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    eae049a0a1734e00acdb960a4409ff45


    Headers

    Imports

    Exports

    Sections

  • libssl32.dll
    .dll windows:4 windows x86 arch:x86

    751b86df877d9ed11b743477bbb07a0a


    Headers

    Imports

    Exports

    Sections

  • sound.wav
  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    751b86df877d9ed11b743477bbb07a0a


    Headers

    Imports

    Exports

    Sections