General

  • Target

    0839139b6c0d3ce6df2d85873bf2a39dcd66f38d911645d51ebbfc84a0c0c29a

  • Size

    44.4MB

  • MD5

    26c06d5802fb3e6c676937c21125a19f

  • SHA1

    776a34ff2c4a025e0c444bfce026a539feff9ff4

  • SHA256

    0839139b6c0d3ce6df2d85873bf2a39dcd66f38d911645d51ebbfc84a0c0c29a

  • SHA512

    3d7f63bfa1e01a922cde6ae6b4d8fe1281c96749bfba88916c2807126db52a7107e250ba3ccb815143d83c45899e7ce75a4088dee648a86a40006226b57c00be

  • SSDEEP

    786432:Qn5zjqDd0Sa0oAcb9A3rqwgfrxRTkIxe263CuMNIaeEGR2UUcNK46Q0bJPpSRz/5:QnQTwAy9A3rIDfkme2az6DXGY6v50dPk

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 12 IoCs

    Detects file using ACProtect software.

  • UPX packed file 27 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • N/A. 1 IoCs

    N/A.

Files

  • 0839139b6c0d3ce6df2d85873bf2a39dcd66f38d911645d51ebbfc84a0c0c29a
    .zip
  • 109CommandLib.dll
    .dll windows:5 windows x86 arch:x86

    f3289d313f3096f14e6df44e93cc4d4f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EN.LNG
  • HDSEvtMsg.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • HDSentinel.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • HDSentinel.rdi
  • HDSentinelTray.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • HDnotify.wav
  • HDsirena.mp3
  • Storagetest.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • afaapi.dll
    .dll windows:4 windows x86 arch:x86

    eb842ac86186f73eea06f1e518a1bd36


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ar.lng
  • arpro.lng
  • bc_vbdll.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • be.lng
  • bepro.lng
  • bg.lng
  • bgpro.lng
  • cn.lng
  • cnpro.lng
  • cz.lng
  • czpro.lng
  • da.lng
  • dapro.lng
  • de.chm
    .chm
  • de.lng
  • depro.lng
  • deta.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • deta1.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • deta2.dlz
    .zip
  • afaapi.dll
    .dll windows:6 windows x64 arch:x64

    ea876bdbb8c23cc5bc6314f5efae1fd9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • deta.dll
    .exe windows:6 windows x64 arch:x64

    7672da45f91c413114987deb3bf92d57


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    d0a59246eab41d54812cd63c2326e1f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • storarc.dll
    .dll windows:6 windows x64 arch:x64

    8162df5486fd7e11418242627d8eb642


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • version.txt
  • detat.dll
    .exe windows:5 windows x86 arch:x86

    1b111a795614955d9acc0a9aff0c8761


    Code Sign

    Headers

    Imports

    Sections

  • detect.dat
  • detect.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • detfio.dlz
    .zip
  • fio.dll
    .exe windows:6 windows x64 arch:x64

    a5e802822cef20f416b644877cd46b24


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    d0a59246eab41d54812cd63c2326e1f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pthreadVC2_64.dll
    .dll windows:6 windows x64 arch:x64

    3cde3e7dc41cd12d206a5c05de359d6f


    Headers

    Imports

    Exports

    Sections

  • version.txt
  • vsl_4.dll
    .dll windows:6 windows x64 arch:x64

    138c248d76d0c22e0bfa69c6a2c13921


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dethp.dll
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • dethp2.dll
    .exe windows:6 windows x64 arch:x64

    fba39fb001f0677766a082b201e3f431


    Code Sign

    Headers

    Imports

    Sections

  • dethpt.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detjm.dll
    .exe windows:4 windows x86 arch:x86

    bf3d644c7db35d95757892b7e5bd58bb


    Code Sign

    Headers

    Imports

    Sections

  • detjm2.dll
    .exe windows:4 windows x86 arch:x86

    bf3d644c7db35d95757892b7e5bd58bb


    Code Sign

    Headers

    Imports

    Sections

  • detjmx.dll
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detmv.dll
    .exe windows:5 windows x86 arch:x86

    563a625f6f73377684bce325017e6f3e


    Code Sign

    Headers

    Imports

    Sections

  • detp.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detpex.dlz
    .zip
  • detrc.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detrca.dll
    .exe windows:6 windows x86 arch:x86

    45e9ae5fbcf125fe3028bd1d6bc8504c


    Code Sign

    Headers

    Imports

    Sections

  • detrd.dll
    .sys windows:6 windows x86 arch:x86

    f4c846df9b59cf3d80de2994bd22c0b7


    Code Sign

    Headers

    Imports

    Sections

  • detrd64.dll
    .sys windows:6 windows x64 arch:x64

    e233f2cdc91faafe1467d9e52f166213


    Code Sign

    Headers

    Imports

    Sections

  • detre.dll
    .exe windows:6 windows x86 arch:x86

    72700caeca16be4e47132f3bc4495e6b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • detre6.dll
    .exe windows:6 windows x64 arch:x64

    5bc9b7b6916fca3447de9e31d2d80b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • detre7.dll
    .exe windows:6 windows x64 arch:x64

    2db0d8ccf0a70e07449f1fa97c4455d8


    Code Sign

    Headers

    Imports

    Sections

  • detsp.dll
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • detsp2.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • detw.dll
    .exe windows:5 windows x86 arch:x86

    53b90df56addaf29409479e2b09de27c


    Code Sign

    Headers

    Imports

    Sections

  • detw64.dll
    .exe windows:5 windows x64 arch:x64

    293cf286043bd8291c84d87bc63d7ebc


    Code Sign

    Headers

    Imports

    Sections

  • du.lng
  • dupro.lng
  • en.chm
    .chm
  • enpro.lng
  • fi.chm
    .chm
  • fi.lng
  • fipro.lng
  • fnp_act_installer.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • fr.chm
    .chm
  • fr.lng
  • frpro.lng
  • gr.chm
    .chm
  • gr.lng
  • grpro.lng
  • harddisksentinelupdate.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • hdd.jpg
    .jpg
  • hds_eula_en.txt
  • hds_eula_hu.txt
  • hdsaction.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • hdsctrl.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • hdsentinel.sys
    .sys windows:5 windows x86 arch:x86

    389659594b01690a0b709b955935f807


    Code Sign

    Headers

    Imports

    Sections

  • hdsentinel.vsh
    .html .js polyglot
  • hdsentinel.vsx
    .xml
  • hdsimg.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • hdsversion.txt
  • hptdev.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • hu.chm
    .chm
  • hu.lng
  • hupro.lng
  • id.lng
  • idpro.lng
  • infomgr.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • it.chm
    .chm
  • it.lng
  • itpro.lng
  • jp.lng
  • jppro.lng
  • ko.lng
  • kopro.lng
  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libxml2.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • mk.lng
  • mkpro.lng
  • mv_api.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • pl.chm
    .chm
  • pl.lng
  • plpro.lng
  • prdecode.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • prerrlog.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • pri2plgnnapa.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ptbr.lng
  • ptbrpro.lng
  • removehds7.vbs
    .vbs
  • ro.lng
  • ropro.lng
  • ru.chm
    .chm
  • ru.lng
  • rupro.lng
  • si.lng
  • sipro.lng
  • sk.lng
  • skpro.lng
  • sp.lng
  • sppro.lng
  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    2b319a838751e6765694bcafaad52919


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • status.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • statusb.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • statusg.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • statusn.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • statusw.icd
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • storarc.dll
    .dll windows:4 windows x86 arch:x86

    3011d179ff36dd6b41e97d979b321d9b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • storectrl.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • storelib.dll
    .dll windows:4 windows x86 arch:x86

    a5b1753793824040e6865e42e9a89a63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • storelib2.dlz
    .zip
  • storelib3.dlz
    .zip
  • storelibir-2.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • storelibir.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • sw.lng
  • swpro.lng
  • tr.lng
  • trpro.lng
  • tw.lng
  • twpro.lng
  • uk.lng
  • ukpro.lng
  • vista_status.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • vista_statusb.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • vista_statusg.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • vista_statusn.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • vista_statusw.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_status.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_statusb.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_statusg.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_statusn.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • win11_statusw.icd
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections