General

  • Target

    Aescripts Mettle Flux v1.15.rar

  • Size

    169.6MB

  • MD5

    1984e1631363e5666d5be9efa5b38b15

  • SHA1

    31868a0d069392b73e9f035e3f6a7ca5e85350a5

  • SHA256

    f2e59cab519734ac4c6beeebdcd0ce76ea0502ec1b76c58a6ed16bc7265b258f

  • SHA512

    24262646c6df15de631f438fc8cda4774e3de9ffbe8d62eaeca7e08b95fea6938ffb20c9dfb94bd97a3b61bb187562be93630d77311dfd4f49c4b2371fcd8fac

  • SSDEEP

    3145728:9qCw0jN4HdQswJA8sYryo34Z+YHEerFZMOno0MhA+ZrHh6d9SvnLDz1w37PAv+33:5AdQs6ryo3BGvrFZMOxiA+JoiXz1w3Pn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • Aescripts Mettle Flux v1.15.rar
    .rar .zip polyglot

    Password: 123

  • Aescripts Mettle Flux v1.15/GFXfather.com.url
    .url
  • Aescripts Mettle Flux v1.15/Grafixfather.com.url
    .url
  • Aescripts Mettle Flux v1.15/Join Our Secret Source.url
    .url
  • Aescripts Mettle Flux v1.15/Mettle Flux v1.15 for Mac [Monter Group].zip
    .zip

    Password: 123

  • Mettle Flux v1.15 for Mac [Monter Group].dmg
    .dmg .bz2 macos polyglot

    Password: 123

  • Mettle Flux v1.15 for Mac [Monter Group]/.DS_Store
  • Mettle Flux v1.15 for Mac [Monter Group]/.VolumeIcon.icns
  • Mettle Flux v1.15 for Mac [Monter Group]/.background/backgroundImage.tiff
  • Mettle Flux v1.15 for Mac [Monter Group]/Cracks Archive.webloc
  • Mettle Flux v1.15 for Mac [Monter Group]/How to run piracy plugins on Mac.webloc
  • Mettle Flux v1.15 for Mac [Monter Group]/Mettle Flux v1.15 [MONTER GROUP©].pkg
    .pkg macos

    Password: 123

  • Mettle Flux v1.15 for Mac [Monter Group]/Mettle Flux v1.15 [MONTER GROUP©].pkg:com.apple.macl
  • Mettle Flux v1.15 for Mac [Monter Group]/readme.txt
  • Mettle Flux v1.15 for Mac [Monter Group]/readme.txt:com.apple.TextEncoding
  • Mettle Flux v1.15 for Mac [Monter Group]/readme.txt:com.apple.lastuseddate#PS
  • Mettle Flux v1.15 for Mac [Monter Group]/readme.txt:com.apple.macl
  • Mettle Flux v1.15 for Mac [Monter Group]/readme.txt:com.apple.metadata_kMDLabel_pzeawft5ovccodf5qb4pnajnqy
  • Aescripts Mettle Flux v1.15/Mettle Flux v1.15 for Win [Monter Group].zip
    .zip

    Password: 123

  • Mettle Flux v1.15 [Monter Group]/.DS_Store
  • Mettle Flux v1.15 [Monter Group]/aescripts-flux-v1.15.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    ced282d9b261d1462772017fe2f6972b


    Code Sign

    Headers

    Imports

    Sections

  • $1/Mettle/mettle-flux.aex
    .dll windows:6 windows x64 arch:x64

    Password: 123

    00895987bc6ac008edf496506730a36e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $1/Mettle/mettle-globe.prm
    .dll windows:6 windows x64 arch:x64

    Password: 123

    56cafdb55bfa85b97225e70ee7a345a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Mettle/mtm-log.cfg
  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    c6cc0e1af86ee61899c1ea1514b9e3c7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/mettle-flux-panel.zxp
    .zip
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/mettle-globe.zxp
    .zip
  • $PROGRAMFILES64/Mettle/CEF/cef.pak
    .js
  • $PROGRAMFILES64/Mettle/CEF/cef_100_percent.pak
  • $PROGRAMFILES64/Mettle/CEF/cef_200_percent.pak
  • $PROGRAMFILES64/Mettle/CEF/cef_extensions.pak
    .js
  • $PROGRAMFILES64/Mettle/CEF/d3dcompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    66666a419522ef3008ac663e6bb8cc1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/devtools_resources.pak
    .js
  • $PROGRAMFILES64/Mettle/CEF/icudtl.dat
  • $PROGRAMFILES64/Mettle/CEF/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    4c188770fae60332f03d8a0161e9ce58


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    301ce1a143d65ccf630f2ce96fd5f83f


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/libcef.dll
    .dll windows:5 windows x64 arch:x64

    5526977b8b92e9d5f142ff53bdfc03e6


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/CEF/locales/am.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ar.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/bg.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/bn.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ca.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/cs.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/da.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/de.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/el.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/en-GB.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/en-US.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/es-419.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/es.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/et.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/fa.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/fi.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/fil.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/fr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/gu.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/he.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/hi.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/hr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/hu.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/id.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/it.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ja.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/kn.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ko.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/lt.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/lv.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ml.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/mr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ms.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/nb.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/nl.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/pl.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/pt-BR.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/pt-PT.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ro.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ru.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sk.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sl.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sv.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/sw.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/ta.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/te.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/th.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/tr.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/uk.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/vi.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/zh-CN.pak
  • $PROGRAMFILES64/Mettle/CEF/locales/zh-TW.pak
  • $PROGRAMFILES64/Mettle/CEF/natives_blob.bin
    .js
  • $PROGRAMFILES64/Mettle/CEF/snapshot_blob.bin
  • $PROGRAMFILES64/Mettle/ExManCmd/AID.dll
    .dll windows:6 windows x86 arch:x86

    788dffef19ed928bb54bd451f7fb269d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/AdobeExtensionsService.exe
    .exe windows:6 windows x86 arch:x86

    f4890ed364e28c37eba124c641a798f2


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/ExManCmd.exe
    .exe windows:6 windows x86 arch:x86

    220339eb2fc40a854cda6a1bafbbef7f


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/ExManCoreLib.dll
    .dll windows:6 windows x86 arch:x86

    cba2c5113baa52852f782bfc0bb26890


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/ExManCoreLib.lib
  • $PROGRAMFILES64/Mettle/ExManCmd/ExManZxpSign.dll
    .dll windows:6 windows x86 arch:x86

    118e41c778a6ae3b2e5c50106740208e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/ExtLib.dll
    .dll windows:6 windows x86 arch:x86

    a9cf826182a345caad375cb55b7afb70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/README
  • $PROGRAMFILES64/Mettle/ExManCmd/VulcanControl.dll
    .dll windows:6 windows x86 arch:x86

    a0b03d109db8bdf216dcc6006f187111


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/ExManCmd/XManConfig.xml
    .xml
  • $PROGRAMFILES64/Mettle/mtm-log.cfg
  • $PROGRAMFILES64/Mettle/mtm.exe
    .exe windows:6 windows x64 arch:x64

    4c9fa7c1c88c1e8126f01b8812c76516


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/mtmapp.dll
    .dll windows:6 windows x64 arch:x64

    6e38cceec53e16d52cde5c7d8810be96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES64/Mettle/precompile.exe
    .exe windows:6 windows x64 arch:x64

    2f815e2d17a2634a3038a7ddb08062c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    8e90e23f58a96b4b6a90fc459d6e3958


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    9687721f5dda03d1fbed0185473c6901


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    bcc3afe694d58072ee6981b4d8a24ce2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/vccorlib140.dll
    .dll windows:6 windows x64 arch:x64

    a048b4221952cc9a5b38e8db05a60786


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $WINDIR/System32/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    34ed12abd07e17a465645d6935506a88


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.ico
  • uninstall_flux.exe.nsis
  • Mettle Flux v1.15 [Monter Group]/mettle-flux.aex
    .dll windows:6 windows x64 arch:x64

    00895987bc6ac008edf496506730a36e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Mettle Flux v1.15 [Monter Group]/mettle-globe.prm
    .dll windows:6 windows x64 arch:x64

    56cafdb55bfa85b97225e70ee7a345a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Mettle Flux v1.15 [Monter Group]/readme.txt
  • __MACOSX/Mettle Flux v1.15 [Monter Group]/._.DS_Store
  • __MACOSX/Mettle Flux v1.15 [Monter Group]/._aescripts-flux-v1.15.exe
  • __MACOSX/Mettle Flux v1.15 [Monter Group]/._mettle-flux.aex
  • __MACOSX/Mettle Flux v1.15 [Monter Group]/._mettle-globe.prm
  • __MACOSX/Mettle Flux v1.15 [Monter Group]/._readme.txt
  • Aescripts Mettle Flux v1.15/Read Me!!!!.txt