General

  • Target

    x64-.x32.-installer.zip

  • Size

    36.2MB

  • MD5

    ffffd58dcac7a687c8bd4ead3fc623a5

  • SHA1

    d8648e59d55f8ea95a38dff6261ae721778247f0

  • SHA256

    7ed61f91f8f42d6212c5333eca1efe6db7e383602ad5a7ef31edc62d07dddb9f

  • SHA512

    6d851061850a728f7a114198c984b3034f5a9e7a323fa33860d423513ef9085b6869ba61faca64445726deeed8525673cbe3d5b9727a285de74c0ce6eff2ad63

  • SSDEEP

    786432:YeAlVQ3uqurqInA0QYKQr6f1iSiQiIf+X4ANKDKg:VwUuqur+gr69iS1hf+e

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • x64-.x32.-installer.zip
    .zip

    Password: 2024

  • password.jpg
    .jpg

    Password: 2024

  • x64.-x32.-setup.zip
    .zip

    Password: 2024

  • UpdateAgent/UpdateAgent.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    6889babfc88aeedab5cdd8d238e06967


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UpdateAgent/mskeyprotcli.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    3f10585a6ff54cf3ff2e08c522645520


    Headers

    Imports

    Exports

    Sections

  • UpdateAgent/softpub.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: 2024

    66e2d1b2cdab292d56111a45637c4a3c


    Headers

    Imports

    Exports

    Sections

  • UpdateAgent/umrdp.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    bff07caf688b91e60cdaae6df2eb7470


    Headers

    Imports

    Exports

    Sections

  • aadtb/aadtb.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    70f4288e9e404bb3c7e552766ee39c43


    Headers

    Imports

    Exports

    Sections

  • aadtb/kerberos.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    70eafd38c1a04874613054e13e80c0b0


    Headers

    Imports

    Exports

    Sections

  • aadtb/mfcm120u.dll
    .dll windows:6 windows x64 arch:x64

    e40941c527acf51b3d91baf5a58943c2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup.msi
    .msi
  • taskcomp/ppcsnap.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    4c8643e25d8890880fa02c675c74a56f


    Headers

    Imports

    Exports

    Sections

  • taskcomp/scecli.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    4cf2cb1bb507221d91e434473bfb8b6d


    Headers

    Imports

    Exports

    Sections

  • taskcomp/taskcomp.dll
    .dll windows:10 windows x64 arch:x64

    89df54b176214273566f0e2cdd37ad01


    Headers

    Imports

    Exports

    Sections

  • uireng/htui.dll
    .dll windows:10 windows x64 arch:x64

    21d1e5400522e04edf30278ff3ede414


    Headers

    Imports

    Exports

    Sections

  • uireng/mfps.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    b82cca7515779e1b40c12e0ae7d47f31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uireng/msvproc.dll
    .dll windows:10 windows x64 arch:x64

    389e5a0860b40569131881a60d566a2a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uireng/uireng.dll
    .dll windows:10 windows x64 arch:x64

    c2ca58b2270719afbdbaea723f8d2d76


    Headers

    Imports

    Exports

    Sections