General

  • Target

    98be4197c07d4bd6711b3773a64ac5a26ba089a0e79bd58421c6f67d33d1c1fc

  • Size

    9.0MB

  • MD5

    08efc55ffd5cec3c6642bc023b6382f8

  • SHA1

    0a0f776c5bd655e4efc03e145f8cbdd433d6d1b6

  • SHA256

    98be4197c07d4bd6711b3773a64ac5a26ba089a0e79bd58421c6f67d33d1c1fc

  • SHA512

    65dc07e353ff06a880f7a4c57f8a50c170763b8e286c8d59a1001636071706c5b0123574ab6a5006289cdf11b0c47f2b8f2abf580d0b95bd29043ecf12105f2d

  • SSDEEP

    196608:25gWWzXgfhrmewwqYdb5lJPAiId7HkEH7Y9KTMw4fJe80E7Mrf6IQK:25y+EewwLdb5rP2zk5eqGCIQK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 98be4197c07d4bd6711b3773a64ac5a26ba089a0e79bd58421c6f67d33d1c1fc
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • AVSoftware.txt
  • ZTS-C-client.exe
    .exe windows:5 windows x86 arch:x86

    04b3a08726ad25bea04d8b2f90bbddc9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ZTS-C-client.pdb
  • ZTS-C-service.exe
    .exe windows:5 windows x86 arch:x86

    3762a9d784e803228c54dc9f3f35e60c


    Code Sign

    Headers

    Imports

    Sections

  • cacert.crt
  • driver/OemWin2k.inf
  • driver/tap0901.cat
  • driver/tap0901.sys
    .sys windows:6 windows x64 arch:x64

    a13cebc938af36dab20cc614c6fb7e94


    Headers

    Imports

    Sections

  • mfc120u.dll
    .dll windows:6 windows x86 arch:x86

    bf9bb776792ebfae57684ede20e9eee4


    Code Sign

    Headers

    Imports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • repairusbkey.bat
  • sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    3383b124ed8c9ce3f21583eb8ccd4efc


    Headers

    Imports

    Exports

    Sections

  • sslvpn_IPv6.dll
    .dll windows:6 windows x86 arch:x86

    8c1b7aef6935d252df85a12d398919a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • taploader.ini