Overview

overview

7

Static

static

7

APMAlert.dll

windows7-x64

7

APMAlert.dll

windows10-2004-x64

7

Chaoslauncher.exe

windows7-x64

7

Chaoslauncher.exe

windows10-2004-x64

7

Chaosplugin.dll

windows7-x64

3

Chaosplugin.dll

windows10-2004-x64

3

Chaosupdater.exe

windows7-x64

1

Chaosupdater.exe

windows10-2004-x64

1

LatencyChanger.dll

windows7-x64

3

LatencyChanger.dll

windows10-2004-x64

3

RepAnalyser.dll

windows7-x64

3

RepAnalyser.dll

windows10-2004-x64

3

Stormplugin.dll

windows7-x64

3

Stormplugin.dll

windows10-2004-x64

3

iccscbn.dll

windows7-x64

7

iccscbn.dll

windows10-2004-x64

7

icctv.dll

windows7-x64

1

icctv.dll

windows10-2004-x64

1

icctvp.dll

windows7-x64

1

icctvp.dll

windows10-2004-x64

1

repfix.dll

windows7-x64

7

repfix.dll

windows10-2004-x64

7

wmode.dll

windows7-x64

1

wmode.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    820cc290613ec89cd99bf3d75b6ac7f0.bin

  • Size

    2.1MB

  • MD5

    820cc290613ec89cd99bf3d75b6ac7f0

  • SHA1

    8ac6b5500fb44b3f4424f39019f8a453caed2bcf

  • SHA256

    0d5d0a7acd5f94c95d0e0d71e5581bdd92fa465baadce7c782319035e5059f77

  • SHA512

    362f925e754a69da6ce09454afed60c1bac2d7bb79358c1ddca5b505535d58ac89648581293b1b9daf96721d372b7d7638006345880316a5f320a3dab1ac4b64

  • SSDEEP

    49152:KX8Jg47u4V19fXKd5l/1EytD/g1SfvJCDsKO+VypJivRw6zSdcQ:nJiIt45hzR/g1Sfx2pZVMsvRw6zSt

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 820cc290613ec89cd99bf3d75b6ac7f0.bin
    .zip

    Password: infected

  • APMAlert.bwl
    .dll windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • APMAlertReadme.txt
  • Chaoslauncher.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    a71952f2455d79dcb677147bd3305562


    Headers

    Imports

    Sections

  • ChaoslauncherReadme.txt
  • Chaosplugin.bwl
    .dll windows:4 windows x86 arch:x86

    Password: infected

    9001e2d423b33b52bdd4cebfe3f93ed8


    Headers

    Imports

    Exports

    Sections

  • ChaospluginReadme.txt
  • Chaosupdater.exe
    .exe windows:1 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • LatencyChanger.bwl
    .dll windows:4 windows x86 arch:x86

    Password: infected

    55d8315bca95d539ae4ebf0418405cda


    Headers

    Imports

    Exports

    Sections

  • LatencyChangerReadme.txt
  • RepAnalyser.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    539e1ee9e726787572b442cc73266465


    Headers

    Imports

    Exports

    Sections

  • Stormplugin.bwl
    .dll windows:4 windows x86 arch:x86

    Password: infected

    f39c1b228f8d04677b826d99b5a18522


    Headers

    Imports

    Exports

    Sections

  • StormpluginReadme.txt
  • WModeReadme.txt
  • alert.wav
  • iccscbn.icc
    .dll windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • icctv.bwl
    .dll windows:4 windows x86 arch:x86

    cea44c37c65f830d64a37e18c7b4641a


    Headers

    Imports

    Exports

    Sections

  • icctvp.bwl
    .dll windows:4 windows x86 arch:x86

    5ce9797f3b0fea9ded3fce7a4cb258f2


    Headers

    Imports

    Exports

    Sections

  • repfix.bwl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • wmode.bwl
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections