General

  • Target

    d5bb49f7e674f789fc3f86464e6931f68bd07211116e164937fdc65eef11d85d

  • Size

    7.6MB

  • MD5

    90a3db51d7f886546802e6822c33ce4b

  • SHA1

    84dcd5d10754ab2d96c7ed57b295a5fd320ae72a

  • SHA256

    d5bb49f7e674f789fc3f86464e6931f68bd07211116e164937fdc65eef11d85d

  • SHA512

    0771196339f93efa52272930b85c6d0a6cb28b7acac1e0a7694739fd5ecc46edd789913d61f00906a7fd4c72e971ab342997862fe58ab6feffcb39033baaec94

  • SSDEEP

    196608:NBxteTSx1zl1lYtl4NzUiFqkJWo1S6CZT7JBTUV+L6A:NBx0eZrYgzUioBo1S6CR1BTUVOT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • d5bb49f7e674f789fc3f86464e6931f68bd07211116e164937fdc65eef11d85d
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    8c45ff8a205d07c8c17066afebcdfc91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    38343d611b1489f0e414939f06a99451


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    38343d611b1489f0e414939f06a99451


    Headers

    Imports

    Exports

    Sections

  • zero/ForceBindIP/BindIP.dll
    .dll windows:6 windows x86 arch:x86

    980c061ac30d7e75c58a7d8955ba54a3


    Code Sign

    Headers

    Imports

    Sections

  • zero/ForceBindIP/BindIP64.dll
    .dll windows:6 windows x64 arch:x64

    228ed311bf9a09b4238d71b2896ad959


    Code Sign

    Headers

    Imports

    Sections

  • zero/ForceBindIP/ForceBindIP32.exe
    .exe windows:5 windows x86 arch:x86

    851d97aa8bf4600c70517a2bb9af9942


    Code Sign

    Headers

    Imports

    Sections

  • zero/ForceBindIP/ForceBindIP64.exe
    .exe windows:6 windows x64 arch:x64

    37c3158635258c64dd2ee3416a71b4ef


    Code Sign

    Headers

    Imports

    Sections

  • zero/WinIPBroadcast.exe
    .exe windows:6 windows x86 arch:x86

    658a681ef22bc9d3de5d7d457f2288c5


    Headers

    Imports

    Sections

  • zero/nmap/libcrypto-1_1.dll
    .dll windows:6 windows x86 arch:x86

    0b1c3d7c0a4be9d4588d4c0812d4e3ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zero/nmap/libssh2.dll
    .dll windows:6 windows x86 arch:x86

    4b01654be8ee99d60782b6cd0faaf175


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zero/nmap/libssl-1_1.dll
    .dll windows:6 windows x86 arch:x86

    bb38621bce2f977b125efd89a62d7ed0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zero/nmap/nping.exe
    .exe windows:6 windows x86 arch:x86

    45a0e0c9f793a9ff8799d3577b1ecdd3


    Code Sign

    Headers

    Imports

    Sections

  • zero/priority.bat
  • zero/ze.mp3
  • zero/zerotier-one_x64.exe
    .exe windows:6 windows x64 arch:x64

    1bcce338023b2a8434a488f241b65a0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zero/zttap300.cat
  • zero/zttap300.inf
  • zero/zttap300.sys
    .sys windows:10 windows x64 arch:x64

    a64473f0eff327e2bde8c61a65fe7458


    Code Sign

    Headers

    Imports

    Sections

  • 游友加速器Beta.exe
    .exe windows:6 windows x64 arch:x64

    660d8cfdad0f398ec05ea94a0af0d7a0


    Headers

    Imports

    Sections