Overview

overview

7

Static

static

3

coreftplite.exe

windows7-x64

7

coreftplite.exe

windows10-2004-x64

7

SftpDLL.dll

windows7-x64

1

SftpDLL.dll

windows10-2004-x64

1

ccerts.dll

windows7-x64

1

ccerts.dll

windows10-2004-x64

1

corecmd.exe

windows7-x64

1

corecmd.exe

windows10-2004-x64

1

coreftp.chm

windows7-x64

1

coreftp.chm

windows10-2004-x64

1

coreftpu.exe

windows7-x64

7

coreftpu.exe

windows10-2004-x64

7

libeay32.dll

windows7-x64

1

libeay32.dll

windows10-2004-x64

1

pftpns.dll

windows7-x64

1

pftpns.dll

windows10-2004-x64

1

ssh.dll

windows7-x64

1

ssh.dll

windows10-2004-x64

3

ssleay32.dll

windows7-x64

1

ssleay32.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    coreftplite.exe

  • Size

    5.0MB

  • MD5

    3cd821a134652b77955e5e1717e9e453

  • SHA1

    4ec84764629f402c8c231a09d13017806cae5ce6

  • SHA256

    a88167cd0a1d8d12ffd4f85047f54dbcfafb69e7bf4a48559fa15d2a87f1753d

  • SHA512

    70d94e2f80768938faa5ea3b9244e2d5deb69cf8d61a0c845c73accd710a632ce4bdf1a74cb31f6c1dfdc18f7c9ddd40527bc22cfd32b2f421fc24c87c8609c7

  • SSDEEP

    98304:u6z331+IhCg86ooYIUCWCUfP7BCgQ47p26VM8avRzXxSKL5ualxLfIAEE:BzCg8etUCWCir7pfAvxXxSTalxLfzV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • coreftplite.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • SftpDLL.dll
    .dll windows:4 windows x86 arch:x86

    ed9019e16d35637fbfdeed009492494b


    Headers

    Imports

    Exports

    Sections

  • ascii.txt
  • ccerts.dll
    .dll windows:4 windows x86 arch:x86

    d26c47dcfed9e624f426ad4fccaa11c6


    Headers

    Imports

    Exports

    Sections

  • corecmd.exe
    .exe windows:4 windows x86 arch:x86

    08bde0b073a570494f45b73a7e3dbcf3


    Headers

    Imports

    Sections

  • coreftp.chm
    .chm
  • coreftpu.exe
    .exe windows:4 windows x86 arch:x86

    01813cf8c47eaea48e20693c40f6a246


    Headers

    Imports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    14f587db076f4d8ef2cdad6eb8698ecf


    Headers

    Imports

    Exports

    Sections

  • pftpns.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    923c3d36cd23e578910b1939eb94b5cc


    Headers

    Imports

    Exports

    Sections

  • ssh.dll
    .dll windows:4 windows x86 arch:x86

    9587f4e70b5faa0e8169299660c2956d


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    b5114f3b4c08ac8add17b5c1cdaa21d0


    Headers

    Imports

    Exports

    Sections