Resubmissions

14/05/2024, 01:48

240514-b781jsec7z 7

14/05/2024, 01:39

240514-b3ek5sea5w 7

14/05/2024, 01:33

240514-byg6gaed52 7

General

  • Target

    Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com].zip

  • Size

    219.3MB

  • MD5

    2a80705d6f7668579702e14c1497b640

  • SHA1

    f540037912014385bfc54b561d7f137bd4233c00

  • SHA256

    89e69c7cdc2a75b29c0ac96bdf56f24736e6ce7a837fb370d41fc2a2e4f0205d

  • SHA512

    4d0296944b2cafd27fe95e5b9adfa2cc5086605862f68ef00551c037e502ab5a55095e15ba1cbc0d792985ebe878eb65e2feda8c08ce622c82a6cf5315e12f0f

  • SSDEEP

    6291456:dMDj9iIgNYiIJIpapEoHEo6qOdnHf6MmTJhNCB:YiIg6izAEoHp6qO9b4JhAB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com].zip
    .zip

    Password: 123

  • Visit www.pesktop.com.url
    .url
  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com]/FiX/x64/SerumFX_x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    94b96794b5c4c7135f6d9ef344094beb


    Headers

    Imports

    Exports

    Sections

  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com]/FiX/x64/Serum_x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    94b96794b5c4c7135f6d9ef344094beb


    Headers

    Imports

    Exports

    Sections

  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com]/FiX/x86/Serum.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    9083b4bd340208e27b14c803c48e6774


    Headers

    Imports

    Exports

    Sections

  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com]/FiX/x86/SerumFX.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    9083b4bd340208e27b14c803c48e6774


    Headers

    Imports

    Exports

    Sections

  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com]/Install_Xfer_SerumFX_Update_130b9.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    c0d4e5fadc92d88e6603d2d1c1d8421c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • $_14_/SerumFX_x64.dll
    .dll windows:6 windows x64 arch:x64

    94b96794b5c4c7135f6d9ef344094beb


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/-SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    a73fa25b54eb0bb8815ee414c7d7db20


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/-SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    ce8147c0785d6e4e67b92989d6622f73


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    a73fa25b54eb0bb8815ee414c7d7db20


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    ce8147c0785d6e4e67b92989d6622f73


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/-SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    a73fa25b54eb0bb8815ee414c7d7db20


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/-SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    ce8147c0785d6e4e67b92989d6622f73


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    a73fa25b54eb0bb8815ee414c7d7db20


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    ce8147c0785d6e4e67b92989d6622f73


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
  • SerumFX.dll
    .dll windows:6 windows x86 arch:x86

    9083b4bd340208e27b14c803c48e6774


    Headers

    Imports

    Exports

    Sections

  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com]/Install_Xfer_Serum_130b9.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com]/Install_Xfer_Serum_Update_130b9.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • Xfer Records Serum Full & Update & FX v1.30b9 WIN [PeskTop.com]/serum.txt