Overview

overview

8

Static

static

3

Malware/Cm...er.exe

windows7-x64

1

Malware/Cm...er.exe

windows10-2004-x64

1

Malware/Player.dll

windows7-x64

1

Malware/Player.dll

windows10-2004-x64

1

Malware/PlayerExe.exe

windows7-x64

1

Malware/PlayerExe.exe

windows10-2004-x64

1

Malware/Server.exe

windows7-x64

1

Malware/Server.exe

windows10-2004-x64

1

Malware/VncSharp.dll

windows7-x64

1

Malware/VncSharp.dll

windows10-2004-x64

1

Malware/_p...nc.dll

windows7-x64

3

Malware/_p...nc.dll

windows10-2004-x64

3

Malware/_p...64.dll

windows7-x64

1

Malware/_p...64.dll

windows10-2004-x64

1

Malware/_p...ap.dll

windows7-x64

8

Malware/_p...ap.dll

windows10-2004-x64

8

Malware/_p...nc.dll

windows7-x64

1

Malware/_p...nc.dll

windows10-2004-x64

1

Malware/_p...64.dll

windows7-x64

1

Malware/_p...64.dll

windows10-2004-x64

1

Malware/bot.dll

windows7-x64

1

Malware/bot.dll

windows10-2004-x64

3

Malware/bot.exe

windows7-x64

3

Malware/bot.exe

windows10-2004-x64

3

Malware/bot_x64.dll

windows7-x64

1

Malware/bot_x64.dll

windows10-2004-x64

1

Malware/bot_x64.exe

windows7-x64

1

Malware/bot_x64.exe

windows10-2004-x64

1

Malware/botcmd.exe

windows7-x64

1

Malware/botcmd.exe

windows10-2004-x64

1

Malware/builder.exe

windows7-x64

1

Malware/builder.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7eefc9c671fcb7e553607d795f1a3341.bin

  • Size

    2.4MB

  • MD5

    7eefc9c671fcb7e553607d795f1a3341

  • SHA1

    5e86bb42a50cfd7cde5f5dfe269d9e0b946a7d46

  • SHA256

    108754d971d16dd689857b87ec80ce74e29599130ecb6f1db07d66b2b08602dc

  • SHA512

    2f9c6c27e4c956d8a47cc34ea92016c56b8763b60346123f4c3deccd426d42a95be2d2fc4fda5f9f38ed0f2042215da0ed686f9fc0ba9a771336c0de0fb79f69

  • SSDEEP

    49152:vGxdBh9iy09Z+xKTRO3yHXdJ76D50Cau0IGaRLP3j5nOGCGmfYehSTJEgwy:viti9Zxc2o0CxRDsGCGVEWnwy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 7eefc9c671fcb7e553607d795f1a3341.bin
    .rar
  • Malware/CmdManager.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Malware/CmdManager.xml
    .xml
  • Malware/Player.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Malware/PlayerExe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Malware/Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Malware/VncSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Malware/_plugins/hvnc.plug
    .dll windows:5 windows x86 arch:x86

    26c4f65857697dd4c36aa779456309af


    Headers

    Imports

    Exports

    Sections

  • Malware/_plugins/hvnc64.plug
    .dll windows:5 windows x64 arch:x64

    53c3747c698f79b2430bf1104db11cb8


    Headers

    Imports

    Exports

    Sections

  • Malware/_plugins/rdpwrap.dll
    .dll windows:5 windows x86 arch:x86

    c94b75338d87dc2ca071fab086a3766a


    Headers

    Imports

    Exports

    Sections

  • Malware/_plugins/vnc.plug
    .dll windows:5 windows x86 arch:x86

    5c2ce08f08a5087e6c543acd43b55a8a


    Headers

    Imports

    Exports

    Sections

  • Malware/_plugins/vnc64.plug
    .dll windows:5 windows x64 arch:x64

    b9dbac19a93eb64836de38e45990b88c


    Headers

    Imports

    Exports

    Sections

  • Malware/bot.dll
    .dll windows:5 windows x86 arch:x86

    5be76b875f0b372970034f8b7ff1499d


    Headers

    Imports

    Exports

    Sections

  • Malware/bot.exe
    .exe windows:5 windows x86 arch:x86

    b3659771bb5ac9f6ed1ee9aa25a3f19d


    Headers

    Imports

    Sections

  • Malware/bot_cmd.txt
  • Malware/bot_x64.dll
    .dll windows:5 windows x64 arch:x64

    5be76b875f0b372970034f8b7ff1499d


    Headers

    Imports

    Exports

    Sections

  • Malware/bot_x64.exe
    .exe windows:5 windows x64 arch:x64

    b3659771bb5ac9f6ed1ee9aa25a3f19d


    Headers

    Imports

    Sections

  • Malware/botcmd.exe
    .exe windows:5 windows x86 arch:x86

    2f7c362cde465254a58ac91a58626c85


    Headers

    Imports

    Sections

  • Malware/builder.exe
    .exe windows:5 windows x86 arch:x86

    1c6f9d43f4ea4c4ef44026a73bc26f9f


    Headers

    Imports

    Sections

  • Malware/builder_gui.config
  • Malware/builder_gui.exe
    .exe windows:5 windows x86 arch:x86

    494da06fa5dd6c1972ae28fbe09ec613


    Headers

    Imports

    Sections

  • Malware/config_server.xml
    .xml
  • Malware/example.config