General

  • Target

    x64-.x32.-installer.zip

  • Size

    36.4MB

  • MD5

    0adf2bb080471a237b827fc04b371a1a

  • SHA1

    531f43bae1159ddd7ff819b60c52b25785a66c0b

  • SHA256

    32c0071c2d29ab355d8ddf934df81328f33896d32604290c71bcca4f63d4ee8f

  • SHA512

    f52c3aa180bb8ae09e9900836f03f71da7bed1769b7c2ea893b30510a3807fabf17841641c7c7633e3c4b510eb295dcf8ea9146fbe5a843f2ee3ab1d29c5a096

  • SSDEEP

    786432:nkguf+ZEt9UZ+tDAhaeZsL1nWrnl87seC8GWXee:kgufpt9UZPhae7r27se9GWXee

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • x64-.x32.-installer.zip
    .zip

    Password: 2024

  • password.jpg
    .jpg

    Password: 2024

  • x64.-x32.-setup.zip
    .zip

    Password: 2024

  • UpdateAgent/UpdateAgent.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    6889babfc88aeedab5cdd8d238e06967


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UpdateAgent/umrdp.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    bff07caf688b91e60cdaae6df2eb7470


    Headers

    Imports

    Exports

    Sections

  • aadtb/aadtb.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    70f4288e9e404bb3c7e552766ee39c43


    Headers

    Imports

    Exports

    Sections

  • aadtb/kerberos.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    70eafd38c1a04874613054e13e80c0b0


    Headers

    Imports

    Exports

    Sections

  • aadtb/mfcm120u.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    e40941c527acf51b3d91baf5a58943c2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.msi
    .msi
  • uireng/htui.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    21d1e5400522e04edf30278ff3ede414


    Headers

    Imports

    Exports

    Sections

  • uireng/mfps.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    b82cca7515779e1b40c12e0ae7d47f31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uireng/msvproc.dll
    .dll windows:10 windows x64 arch:x64

    389e5a0860b40569131881a60d566a2a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uireng/uireng.dll
    .dll windows:10 windows x64 arch:x64

    c2ca58b2270719afbdbaea723f8d2d76


    Headers

    Imports

    Exports

    Sections

  • vwlanui/FXSUTILITY.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    ec1a2365fa398033b2b727fc15766ebb


    Headers

    Imports

    Exports

    Sections

  • vwlanui/cscui.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    b18197d343870a8734e284f0be2f6713


    Headers

    Imports

    Exports

    Sections

  • vwlanui/wlanui.dll
    .dll windows:10 windows x64 arch:x64

    8da5534d168dd3aaf6fa0c1f3519d0ad


    Headers

    Imports

    Exports

    Sections