General

  • Target

    setupssh-7.6p1-1.exe

  • Size

    7.7MB

  • MD5

    893c67413e258d4a08c51dd3f790b620

  • SHA1

    31cdffb879ab73c8ecbcbccab6f3c0f882ab6548

  • SHA256

    0f38977b9f270daedea66302f9067e07f75809371090747f0b0ca806dc626c89

  • SHA512

    b14d36cb62031636e46f0f0e24b44ef8487b792b428388d016702039e8b5fd11dcb10151073341ea0862b78ca21e43adb89173a830d3c1076dd31478bca1c320

  • SSDEEP

    196608:/2W28qQdgRUntCuy2YbuVOMmWhYCJ/PFlErNS87iErnkZp:/i8qQqRuNmWhYq/PDErNS87frnkZp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 37 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • setupssh-7.6p1-1.exe
    .exe windows:4 windows x86 arch:x86

    59a4a44a250c4cf4f2d9de2b3fe5d95f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3fe69ff2de04834c67a82c79fa52ebe2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    17fb6a8708b9c0bb2d5d8687870eb415


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/bin/cygwin1.dll
    .dll windows:4 windows x64 arch:x64

    ab2c9941b31956bc0d2c78a10c37e02b


    Headers

    Imports

    Exports

    Sections

  • bin/bash.exe
    .exe windows:4 windows x64 arch:x64

    9e42aea861ef7da74bcbc505d4eca236


    Headers

    Imports

    Sections

  • bin/chmod.exe
    .exe windows:4 windows x64 arch:x64

    fecd2f385a3cb58836549f798d62b9a3


    Headers

    Imports

    Sections

  • bin/chown.exe
    .exe windows:4 windows x64 arch:x64

    c5434ad91559d6feecd822158c08da60


    Headers

    Imports

    Sections

  • bin/cygattr-1.dll
    .dll windows:4 windows x64 arch:x64

    539a12c9c14bca56577a119314acad06


    Headers

    Imports

    Exports

    Sections

  • bin/cygcom_err-2.dll
    .dll windows:4 windows x64 arch:x64

    2484f710de5d5c3301dc6b881922d61e


    Headers

    Imports

    Exports

    Sections

  • bin/cygcrypt-0.dll
    .dll windows:4 windows x64 arch:x64

    110e7debbfb9b67d3980eea790d185a1


    Headers

    Imports

    Exports

    Sections

  • bin/cygcrypto-1.0.0.dll
    .dll windows:4 windows x64 arch:x64

    40cc33c9ab005b6952b9b227efac7efa


    Headers

    Imports

    Exports

    Sections

  • bin/cygedit-0.dll
    .dll windows:4 windows x64 arch:x64

    ec4235bf304a7c1f5a866bed5597e9e5


    Headers

    Imports

    Exports

    Sections

  • bin/cyggcc_s-seh-1.dll
    .dll windows:4 windows x64 arch:x64

    35ae5fee209363de3e58ddfb01b851d3


    Headers

    Imports

    Exports

    Sections

  • bin/cyggssapi_krb5-2.dll
    .dll windows:4 windows x64 arch:x64

    e92dd4f3137b51a1c53eaa295ffe7f80


    Headers

    Imports

    Exports

    Sections

  • bin/cygiconv-2.dll
    .dll windows:4 windows x64 arch:x64

    78d8d1adf1089a0dfe37868921097987


    Headers

    Imports

    Exports

    Sections

  • bin/cygintl-8.dll
    .dll windows:4 windows x64 arch:x64

    770d2984f4c8d8d125721a3d99498abd


    Headers

    Imports

    Exports

    Sections

  • bin/cygk5crypto-3.dll
    .dll windows:4 windows x64 arch:x64

    d3168442d4c53ada1a217d5262057f13


    Headers

    Imports

    Exports

    Sections

  • bin/cygkrb5-3.dll
    .dll windows:4 windows x64 arch:x64

    560bb1ad0fc19cf47c4a5b886d2fdb0f


    Headers

    Imports

    Exports

    Sections

  • bin/cygkrb5support-0.dll
    .dll windows:4 windows x64 arch:x64

    a7c243033a6bdd84d1454b5e0aa72ffd


    Headers

    Imports

    Exports

    Sections

  • bin/cygncursesw-10.dll
    .dll windows:4 windows x64 arch:x64

    6622d20533571e8478cc31218cc6a390


    Headers

    Imports

    Exports

    Sections

  • bin/cygreadline7.dll
    .dll windows:4 windows x64 arch:x64

    92a523db54f2967254d3bb35275fac43


    Headers

    Imports

    Exports

    Sections

  • bin/cygssp-0.dll
    .dll windows:4 windows x64 arch:x64

    fdf2aed6e274acadacb1a8f84cd3c807


    Headers

    Imports

    Exports

    Sections

  • bin/cygwin1.dll
    .dll windows:4 windows x64 arch:x64

    ab2c9941b31956bc0d2c78a10c37e02b


    Headers

    Imports

    Exports

    Sections

  • bin/cygz.dll
    .dll windows:4 windows x64 arch:x64

    9b87dea50bee52badb0204e28adc7b75


    Headers

    Imports

    Exports

    Sections

  • bin/editrights.exe
    .exe windows:4 windows x64 arch:x64

    f58271b6000e8605ce0b4bdf9ead7d2e


    Headers

    Imports

    Sections

  • bin/junction.exe
    .exe windows:5 windows x86 arch:x86

    3affd188264f59594a90b036270f340e


    Code Sign

    Headers

    Imports

    Sections

  • bin/md5sum.exe
    .exe windows:4 windows x64 arch:x64

    42a9cebe5fbb227e3450e617a2b4652f


    Headers

    Imports

    Sections

  • bin/mkgroup.exe
    .exe windows:4 windows x64 arch:x64

    1236d331fa6fc14af0852e9d83012071


    Headers

    Imports

    Sections

  • bin/mkpasswd.exe
    .exe windows:4 windows x64 arch:x64

    5dd0a0ac01ce3bc97bfc4bfd47e4a62e


    Headers

    Imports

    Sections

  • bin/mv.exe
    .exe windows:4 windows x64 arch:x64

    9c18d209f9c5fb9fe70b2f2187e63fc4


    Headers

    Imports

    Sections

  • bin/rsync.exe
    .exe windows:4 windows x64 arch:x64

    0bbe621a9440abe6cf2c5a72670b7cf3


    Headers

    Imports

    Sections

  • bin/sha1sum.exe
    .exe windows:4 windows x64 arch:x64

    42a9cebe5fbb227e3450e617a2b4652f


    Headers

    Imports

    Sections

  • bin/ssh-add.exe
    .exe windows:4 windows x64 arch:x64

    4ec584e7f0f8456021592c4443299cb5


    Headers

    Imports

    Sections

  • bin/ssh-agent.exe
    .exe windows:4 windows x64 arch:x64

    45b0d49ed1de40495ac2c98bee8b01b5


    Headers

    Imports

    Sections

  • bin/ssh-host-config
    .sh linux
  • bin/ssh-keygen.exe
    .exe windows:4 windows x64 arch:x64

    51ddb5f2a753072d64b4e0ff6fcdbeba


    Headers

    Imports

    Sections

  • bin/ssh-keyscan.exe
    .exe windows:4 windows x64 arch:x64

    350dd120be351f22946aa8647cb76c87


    Headers

    Imports

    Sections

  • bin/switch.exe
    .exe windows:4 windows x64 arch:x64

    9e42aea861ef7da74bcbc505d4eca236


    Headers

    Imports

    Sections