Overview

overview

7

Static

static

3

ArmAccess.dll

windows7-x64

1

ArmAccess.dll

windows10-2004-x64

1

BasicRunner.exe

windows7-x64

1

BasicRunner.exe

windows10-2004-x64

1

DialUp.dll

windows7-x64

1

DialUp.dll

windows10-2004-x64

1

OLREG.htm

windows7-x64

1

OLREG.htm

windows10-2004-x64

1

RunAsService.exe

windows7-x64

1

RunAsService.exe

windows10-2004-x64

1

RunMCRFile.exe

windows7-x64

1

RunMCRFile.exe

windows10-2004-x64

1

RunMacro.exe

windows7-x64

1

RunMacro.exe

windows10-2004-x64

1

UIComponents.dll

windows7-x64

1

UIComponents.dll

windows10-2004-x64

1

Uninst.exe

windows7-x64

7

Uninst.exe

windows10-2004-x64

7

WhoAmI.exe

windows7-x64

1

WhoAmI.exe

windows10-2004-x64

1

Win98code.dll

windows7-x64

1

Win98code.dll

windows10-2004-x64

1

WinNTCode.dll

windows7-x64

1

WinNTCode.dll

windows10-2004-x64

1

_Loader.exe

windows7-x64

7

_Loader.exe

windows10-2004-x64

7

_apmousedll.dll

windows7-x64

1

_apmousedll.dll

windows10-2004-x64

1

_b_mtdll.dll

windows7-x64

1

_b_mtdll.dll

windows10-2004-x64

1

_mtdll.dll

windows7-x64

1

_mtdll.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ca58db24620f42759895c5bef3cccce5

  • Size

    1.8MB

  • MD5

    ca58db24620f42759895c5bef3cccce5

  • SHA1

    a109506366c36cfdd5f4a17f34e3238d37626ff3

  • SHA256

    8c830181fe2a170da9e19fef271818763443d788313430b5c254be4df6d95c7d

  • SHA512

    f0b6859489deb517e3dacaff9ad40f7216b80d0055eac95a53821592bf2ca8c3943b6e64b4788990f226c1cb1053109ec9665837db8ff04f89cd17291141fc19

  • SSDEEP

    49152:D6v9TPeHyICkYZCqSfvEqmKdEVtqiNMY4fi6ZXwkrd:DQFPICVZHWvEqmKdGoRY4z5wkd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • ca58db24620f42759895c5bef3cccce5
    .rar
  • ArmAccess.dll
    .dll windows:4 windows x86 arch:x86

    d1e10a04ad85a14abc67c0f2a2f79aed


    Headers

    Imports

    Exports

    Sections

  • BasicRunner.exe
    .exe windows:4 windows x86 arch:x86

    8b17a5df12fb04adbff445696c1b8d78


    Headers

    Imports

    Sections

  • DemoFile.4mt
  • DemoFile.4tw
  • DialUp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    202d258b7702c2b38767b7fc988b9a2a


    Headers

    Imports

    Exports

    Sections

  • Icons/0_black.ico
  • Icons/0_blue.ico
  • Icons/0_red.ico
  • Icons/123.ico
  • Icons/1_black.ico
  • Icons/1_blue.ico
  • Icons/1_red.ico
  • Icons/2_black.ico
  • Icons/2_blue.ico
  • Icons/2_red.ico
  • Icons/3_black.ico
  • Icons/3_blue.ico
  • Icons/3_red.ico
  • Icons/4_black.ico
  • Icons/4_blue.ico
  • Icons/4_red.ico
  • Icons/5_black.ico
  • Icons/5_blue.ico
  • Icons/5_red.ico
  • Icons/6_black.ico
  • Icons/6_blue.ico
  • Icons/6_red.ico
  • Icons/7_black.ico
  • Icons/7_blue.ico
  • Icons/7_red.ico
  • Icons/8_black.ico
  • Icons/8_blue.ico
  • Icons/8_red.ico
  • Icons/9_black.ico
  • Icons/9_blue.ico
  • Icons/9_red.ico
  • Icons/BOOKS02.ICO
  • Icons/ICON_COP.ICO
  • Icons/IDR_ICON.ICO
  • Icons/a_black.ico
  • Icons/a_blue.ico
  • Icons/a_red.ico
  • Icons/aleft-blue.ico
  • Icons/aleft.ico
  • Icons/arrow-brown.ico
  • Icons/arrow-circle.ico
  • Icons/b_black.ico
  • Icons/b_blue.ico
  • Icons/b_red.ico
  • Icons/ball.ico
  • Icons/bomb.ico
  • Icons/bul16-2-blue.ico
  • Icons/bul16-2.ico
  • Icons/bulb.ico
  • Icons/buttons_blue.ico
  • Icons/buttons_wh.ico
  • Icons/buttons_white.ico
  • Icons/c_black.ico
  • Icons/c_blue.ico
  • Icons/c_red.ico
  • Icons/cat.ico
  • Icons/cd_blue.ico
  • Icons/cd_box.ico
  • Icons/cd_cut.ico
  • Icons/cd_gray.ico
  • Icons/cd_personal.ico
  • Icons/cd_rainbow.ico
  • Icons/cd_square.ico
  • Icons/cd_yel.ico
  • Icons/center.ico
  • Icons/center_mag.ico
  • Icons/clip.ico
  • Icons/clip2.ico
  • Icons/clip_blue.ico
  • Icons/cube.ico
  • Icons/cur-green.ico
  • Icons/cur-yel.ico
  • Icons/d_black.ico
  • Icons/d_blue.ico
  • Icons/d_red.ico
  • Icons/diamond.ico
  • Icons/dice.ico
  • Icons/donkey.ico
  • Icons/dsct_1blue.ico
  • Icons/dsct_1green.ico
  • Icons/dsct_1red.ico
  • Icons/dsct_1yel.ico
  • Icons/dsct_dbl_blue-pink.ico
  • Icons/dsct_dbl_blue-red.ico
  • Icons/dsct_dbl_dyel-green.ico
  • Icons/dsct_dbl_lgreen-red.ico
  • Icons/dsct_dbl_red-green.ico
  • Icons/dsct_dbl_yel-blue.ico
  • Icons/dsct_dblsm-gre-red.ico
  • Icons/dsct_dblsm_blue-yel.ico
  • Icons/dsct_dblsm_dyel-gre.ico
  • Icons/dsct_pink.ico
  • Icons/dsct_small_blue.ico
  • Icons/dsct_small_dyel.ico
  • Icons/dsct_small_lgreen.ico
  • Icons/dsct_small_mag.ico
  • Icons/dsct_small_red.ico
  • Icons/dsct_small_yel.ico
  • Icons/dsct_web1.ico
  • Icons/dsct_web2.ico
  • Icons/dsct_web3.ico
  • Icons/dsct_web4.ico
  • Icons/e_black.ico
  • Icons/e_blue.ico
  • Icons/e_red.ico
  • Icons/envel_1blue.ico
  • Icons/envel_1green.ico
  • Icons/envel_1red.ico
  • Icons/envel_1yel.ico
  • Icons/envel_pen.ico
  • Icons/envel_pers_green.ico
  • Icons/envel_pers_wh.ico
  • Icons/envel_pers_yel.ico
  • Icons/envel_web_red.ico
  • Icons/envel_web_wht.ico
  • Icons/envel_web_yel.ico
  • Icons/envel_wht.ico
  • Icons/envel_yel.ico
  • Icons/envelop_flash.ico
  • Icons/envelope-yellow.ico
  • Icons/f_black.ico
  • Icons/f_blue.ico
  • Icons/f_red.ico
  • Icons/fdlr_find.ico
  • Icons/file-f.ico
  • Icons/file_1blue.ico
  • Icons/file_1green.ico
  • Icons/file_1red.ico
  • Icons/file_1yel.ico
  • Icons/file_2blue.ico
  • Icons/file_2green.ico
  • Icons/file_2red.ico
  • Icons/file_2yel.ico
  • Icons/file_pen.ico
  • Icons/file_personal.ico
  • Icons/file_personal_blue.ico
  • Icons/file_personal_red.ico
  • Icons/film.ico
  • Icons/fldr_1blue.ico
  • Icons/fldr_1dyel.ico
  • Icons/fldr_1gray.ico
  • Icons/fldr_1green.ico
  • Icons/fldr_1mag.ico
  • Icons/fldr_1red.ico
  • Icons/fldr_1yellow.ico
  • Icons/fldr_a.ico
  • Icons/fldr_blue.ico
  • Icons/fldr_cd.ico
  • Icons/fldr_cd_blue.ico
  • Icons/fldr_cd_graymag.ico
  • Icons/fldr_cd_green.ico
  • Icons/fldr_cd_lred.ico
  • Icons/fldr_darkblue.ico
  • Icons/fldr_darkyel.ico
  • Icons/fldr_disc.ico
  • Icons/fldr_done.ico
  • Icons/fldr_dsct_blue.ico
  • Icons/fldr_dsct_blue2.ico
  • Icons/fldr_dsct_blue3.ico
  • Icons/fldr_dsct_dblue.ico
  • Icons/fldr_dsct_dyel.ico
  • Icons/fldr_dsct_dyel2.ico
  • Icons/fldr_dsct_graygreen.ico
  • Icons/fldr_dsct_graymag.ico
  • Icons/fldr_dsct_green.ico
  • Icons/fldr_dsct_green2.ico
  • Icons/fldr_dsct_green3.ico
  • Icons/fldr_dsct_light.ico
  • Icons/fldr_dsct_mag.ico
  • Icons/fldr_dsct_mag2.ico
  • Icons/fldr_dsct_orange.ico
  • Icons/fldr_dsct_orange2.ico
  • Icons/fldr_dsct_red.ico
  • Icons/fldr_dsct_yel.ico
  • Icons/fldr_dsct_yel2.ico
  • Icons/fldr_emb_blue.ico
  • Icons/fldr_emb_red.ico
  • Icons/fldr_emb_yel.ico
  • Icons/fldr_envel_blue.ico
  • Icons/fldr_envel_dblue.ico
  • Icons/fldr_envel_dblue2.ico
  • Icons/fldr_envel_gray.ico
  • Icons/fldr_envel_lblue.ico
  • Icons/fldr_envel_lred.ico
  • Icons/fldr_envel_red.ico
  • Icons/fldr_file1_blue.ico
  • Icons/fldr_file1_mag.ico
  • Icons/fldr_file1_yel.ico
  • Icons/fldr_file_graygreen.ico
  • Icons/fldr_file_green.ico
  • Icons/fldr_file_orange.ico
  • Icons/fldr_file_red.ico
  • Icons/fldr_file_red2.ico
  • Icons/fldr_file_yel.ico
  • Icons/fldr_film.ico
  • Icons/fldr_film_orange.ico
  • Icons/fldr_film_yel.ico
  • Icons/fldr_game_green.ico
  • Icons/fldr_game_red.ico
  • Icons/fldr_graygreen.ico
  • Icons/fldr_graymag.ico
  • Icons/fldr_green.ico
  • Icons/fldr_love.ico
  • Icons/fldr_magglass.ico
  • Icons/fldr_movie1.ico
  • Icons/fldr_movie2.ico
  • Icons/fldr_movie3.ico
  • Icons/fldr_orange.ico
  • Icons/fldr_pen.ico
  • Icons/fldr_personal_blue.ico
  • Icons/fldr_personal_dblue.ico
  • Icons/fldr_personal_green.ico
  • Icons/fldr_personal_light.ico
  • Icons/fldr_personal_mag.ico
  • Icons/fldr_personal_yel.ico
  • Icons/fldr_que.ico
  • Icons/fldr_red.ico
  • Icons/fldr_web.ico
  • Icons/fldr_web2.ico
  • Icons/fldr_web3.ico
  • Icons/fldr_web4.ico
  • Icons/fldr_webgreen.ico
  • Icons/fldr_webyel.ico
  • Icons/fldr_webyel2.ico
  • Icons/fldr_yel.ico
  • Icons/folder.ico
  • Icons/folder2.ico
  • Icons/folder_tools.ico
  • Icons/footbaal.ico
  • Icons/g_black.ico
  • Icons/g_blue.ico
  • Icons/g_red.ico
  • Icons/globe.ico
  • Icons/globe2.ico
  • Icons/globe3.ico
  • Icons/globe_small.ico
  • Icons/go.ico
  • Icons/h_black.ico
  • Icons/h_blue.ico
  • Icons/h_red.ico
  • Icons/i_black.ico
  • Icons/i_blue.ico
  • Icons/i_red.ico
  • Icons/ic_keyb.ico
  • Icons/ic_macrobar.ico
  • Icons/ic_mouse.ico
  • Icons/ic_sched.ico
  • Icons/icon_sta.ico
  • Icons/idr_main.ico
  • Icons/idr_reco.ico
  • Icons/info.ico
  • Icons/info2.ico
  • Icons/italic.ico
  • Icons/j_black.ico
  • Icons/j_blue.ico
  • Icons/j_red.ico
  • Icons/join.ico
  • Icons/k_black.ico
  • Icons/k_blue.ico
  • Icons/k_red.ico
  • Icons/kbd_black.ico
  • Icons/kbd_blue.ico
  • Icons/kbd_flash.ico
  • Icons/kbd_gray.ico
  • Icons/kbd_green.ico
  • Icons/kbd_red.ico
  • Icons/key-a-brown.ico
  • Icons/key-a-red.ico
  • Icons/key-a.ico
  • Icons/koffee.ico
  • Icons/l-red.ico
  • Icons/l_black.ico
  • Icons/l_blue.ico
  • Icons/m_black.ico
  • Icons/m_blue.ico
  • Icons/m_red.ico
  • Icons/machine.ico
  • Icons/machine2-2.ico
  • Icons/machine2.ico
  • Icons/machine_blue.ico
  • Icons/machine_green.ico
  • Icons/machine_red.ico
  • Icons/machine_white.ico
  • Icons/magnifglass.ico
  • Icons/mouse16.ico
  • Icons/mouse2.ico
  • Icons/mouse32.ico
  • Icons/movie.ico
  • Icons/n_black.ico
  • Icons/n_blue.ico
  • Icons/n_red.ico
  • Icons/net.ico
  • Icons/news.ico
  • Icons/notallowed.ico
  • Icons/o_black.ico
  • Icons/o_blue.ico
  • Icons/o_red.ico
  • Icons/p_black.ico
  • Icons/p_blue.ico
  • Icons/p_red.ico
  • Icons/parallel.ico
  • Icons/pyramid.ico
  • Icons/q_black.ico
  • Icons/q_blue.ico
  • Icons/q_red.ico
  • Icons/r_black.ico
  • Icons/r_blue.ico
  • Icons/r_red.ico
  • Icons/rescue.ico
  • Icons/s_black.ico
  • Icons/s_blue.ico
  • Icons/s_red.ico
  • Icons/screens.ico
  • Icons/separator1.ico
  • Icons/separator2.ico
  • Icons/separator3.ico
  • Icons/separator4.ico
  • Icons/sound.ico
  • Icons/split.ico
  • Icons/srch_web.ico
  • Icons/srch_web2.ico
  • Icons/t_black.ico
  • Icons/t_blue.ico
  • Icons/t_red.ico
  • Icons/tea.ico
  • Icons/text_alignleft.ico
  • Icons/text_alignright.ico
  • Icons/text_case.ico
  • Icons/text_center.ico
  • Icons/text_indentleft.ico
  • Icons/text_indentright.ico
  • Icons/text_justfy.ico
  • Icons/text_list.ico
  • Icons/text_old1.ico
  • Icons/text_oldgreen.ico
  • Icons/timedate_date.ico
  • Icons/timedate_time.ico
  • Icons/timedateflash_.ico
  • Icons/tocapital16-2.ico
  • Icons/tocapital16-3.ico
  • Icons/tocapitol16.ico
  • Icons/tocapl_yel.ico
  • Icons/toleft_blue.ico
  • Icons/toleft_mag.ico
  • Icons/toleft_mag_16.ico
  • Icons/toleft_wh_16.ico
  • Icons/toleft_wht.ico
  • Icons/toright.ico
  • Icons/toright_mag.ico
  • Icons/tosmall.ico
  • Icons/tosmall16-2.ico
  • Icons/tosmall16-3.ico
  • Icons/tosmall16.ico
  • Icons/tosmall_yel.ico
  • Icons/tosmall_yel16.ico
  • Icons/triangle-red.ico
  • Icons/triangle_green.ico
  • Icons/txt_old1.ico
  • Icons/u_black.ico
  • Icons/u_blue.ico
  • Icons/u_red.ico
  • Icons/underline.ico
  • Icons/underline_16.ico
  • Icons/underline_green.ico
  • Icons/underline_green_16.ico
  • Icons/v_black.ico
  • Icons/v_blue.ico
  • Icons/v_red.ico
  • Icons/w_black.ico
  • Icons/w_blue.ico
  • Icons/w_red.ico
  • Icons/wait.ico
  • Icons/web_mail1.ico
  • Icons/win-sticky.ico
  • Icons/wnd.ico
  • Icons/write.ico
  • Icons/write_oldblue.ico
  • Icons/write_oldgreen.ico
  • Icons/write_oldyel.ico
  • Icons/x_black.ico
  • Icons/x_blue.ico
  • Icons/x_red.ico
  • Icons/y_black.ico
  • Icons/y_blue.ico
  • Icons/y_red.ico
  • Icons/z_black.ico
  • Icons/z_blue.ico
  • Icons/z_red.ico
  • Icons/下载说明.htm
    .html .js polyglot
  • OLREG.HTM
    .html
  • README.TXT
  • RunAsService.exe
    .exe windows:4 windows x86 arch:x86

    236da76da9655f623cdb85fb8bcd33ac


    Headers

    Imports

    Sections

  • RunMCRFile.exe
    .exe windows:4 windows x86 arch:x86

    84256d121c22692e8c3c461ce237e5bb


    Headers

    Imports

    Sections

  • RunMacro.exe
    .exe windows:4 windows x86 arch:x86

    c31ad904310311c242c311309c42b52a


    Headers

    Imports

    Sections

  • SONIC.WAV
  • Samples/Activate or run Notepad.mcr
  • Samples/Add prefix and postfix text to each line in text file.mcr
  • Samples/Close all Notepad windows.mcr
  • Samples/Convert clipboard text to uppercase.mcr
  • Samples/Detects if notepad.exe is running and kills it on users request.mcr
  • Samples/Filter formatted text out of clipboard - leave only unformatted text in clipboard.mcr
  • Samples/Generate file name containing current date.mcr
  • Samples/Generate letter from information defined in form.mcr
  • Samples/Insert current date to file name (uses procedures).mcr
  • Samples/Insert time & date in Notepad.mcr
  • Samples/Is connected to internet.mcr
  • Samples/List files from selected directory.mcr
  • Samples/Math expressions calculator.mcr
  • Samples/Parse full file path to components.mcr
  • Samples/Process lines in text file.mcr
  • Samples/Retrieve e-mail addresses from a text file.mcr
  • Samples/Run context menu command.mcr
  • Samples/Select file and open it in Notepad.mcr
  • Samples/Show menu of opened window and activate selected.mcr
  • Samples/Show registry subkeys.mcr
  • Samples/Shows how to use menus.mcr
  • Samples/Simple FTP file download.mcr
  • Samples/Simple form example.mcr
  • Samples/Start Notepad and type text in it - safe way.mcr
  • Samples/Tests if clipboard contains text.mcr
  • Samples/下载说明.htm
    .html .js polyglot
  • UIComponents.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b4fbc82b6f70167027adf47a97955ec


    Headers

    Imports

    Exports

    Sections

  • Uninst.exe
    .exe windows:4 windows x86 arch:x86

    efcfc6e7622396e9f04783b3de8ab7da


    Headers

    Imports

    Sections

  • WhoAmI.exe
    .exe windows:4 windows x86 arch:x86

    91efb78109cc58ad3ccf2c61599850bb


    Headers

    Imports

    Sections

  • Win98code.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7942838106132cda0db44d9e93bcc63d


    Headers

    Imports

    Exports

    Sections

  • WinNTCode.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4f54d45413223aa3d471b47da6391eb7


    Headers

    Imports

    Exports

    Sections

  • _Loader.exe
    .exe windows:4 windows x86 arch:x86

    435f8c1bc657f93fe10cafeeb0757f6b


    Headers

    Imports

    Sections

  • _apmousedll.dll
    .dll windows:4 windows x86 arch:x86

    38e37a124be4cc891a2ba48db749df03


    Headers

    Imports

    Exports

    Sections

  • _b_mtdll.dll
    .dll windows:4 windows x86 arch:x86

    5678036c53abef8e904c6373a2e0ddad


    Headers

    Imports

    Exports

    Sections

  • _mtdll.dll
    .dll windows:4 windows x86 arch:x86

    5678036c53abef8e904c6373a2e0ddad


    Headers

    Imports

    Exports

    Sections

  • _prog.exe
    .exe windows:4 windows x86 arch:x86

    aaa734bdf233e7b6248c47353f08a15f


    Headers

    Imports

    Sections

  • _prog.exe.manifest
    .xml
  • _prog_service.bat
  • _prog_wd.exe
    .exe windows:4 windows x86 arch:x86

    c43e2dc7726c9f825d40753116a72c2a


    Headers

    Imports

    Sections

  • admin.ini
  • cc_ERB.exe
    .exe windows:4 windows x86 arch:x86

    0ce9247564a3d5eac1fdd3c7f2285e19


    Headers

    Imports

    Sections

  • cui.dll
    .dll windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Sections

  • help.chm
    .chm
  • ic_macrobar.ico
  • license.txt
  • mtwbho.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ae5d135654ad8dc6aea6afdc85cbe929


    Headers

    Imports

    Exports

    Sections

  • options.ini
  • pkother.htm
    .html
  • pmlt_default_listonly.htm
  • pmlt_default_withmacro.htm
  • register.txt
  • resdll.dll
    .dll windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Headers

    Imports

    Sections

  • separator1.ico
  • separator2.ico
  • separator3.ico
  • separator4.ico
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    e0e0da199723f21b51e48d3655e71fba


    Headers

    Imports

    Sections

  • setup.exe.manifest
    .xml
  • tbp32.exe
    .exe windows:4 windows x86 arch:x86

    e06bc8177dec2c2e877d5ec941b976c4


    Headers

    Imports

    Sections

  • users.ini
  • win2000code.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2c911e684159a3c07a4a0ea1306394c4


    Headers

    Imports

    Exports

    Sections

  • 下载说明.htm
    .html .js polyglot