General

  • Target
    2ce94017785dc8db14faf8cd5769a2b854a8ef259ecc0e8eeb27bab230b0f727
  • Size 17.5MB
  • Sample240603-1n1bqsbb98
  • SHA256 2ce94017785dc8db14faf8cd5769a2b854a8ef259ecc0e8eeb27bab230b0f727
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2ce94017785dc8db14faf8cd5769a2b854a8ef259ecc0e8eeb27bab230b0f727
    .rar 17.5MB
  • #!~#0PEN_6092_P@$$WORd~!$/Setup.exe
    .exe 686.0MB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/App.xbf
    1KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/AzureKeyVaultDgssLib.dll
    .dll 373KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/BugReporter
    .exe 521KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/ComExtractor
    .exe 618KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/HDHelper_[0MB]_[1].exe
    .exe 566KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/Microsoft.Toolkit.Win32.UI.XamlHost.dll
    .dll 108KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/NvStereoUtilityOGL_[1MB]_[1].exe
    .exe 1.1MB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/RepackagerStartPage.xbf
    8KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/VSLauncher_[0MB]_[1].exe
    .exe 281KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/WinUiBootstrapper.dll
    .dll 896KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-console-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-console-l1-2-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-datetime-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-debug-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-fibers-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-file-l1-1-0.dll
    .dll 25KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-file-l1-2-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-file-l2-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-handle-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-heap-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-interlocked-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-localization-l1-2-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-memory-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-processthreads-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-processthreads-l1-1-1.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-profile-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-string-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-synch-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-synch-l1-2-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-timezone-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-core-util-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-conio-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-convert-l1-1-0.dll
    .dll 25KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-environment-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-heap-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-locale-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-math-l1-1-0.dll
    .dll 29KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll 29KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-private-l1-1-0.dll
    .dll 73KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-process-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-runtime-l1-1-0.dll
    .dll 25KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-stdio-l1-1-0.dll
    .dll 25KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-string-l1-1-0.dll
    .dll 25KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-time-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/api-ms-win-crt-utility-l1-1-0.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/dbghelp.dll
    .dll 1.5MB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/encoder.dll
    .dll 403KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/expatai.dll
    .dll 260KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/msvcp140.dll
    .dll 564KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/msvcp140_app.dll
    .dll 253KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/registryTracer64.dll
    .dll 460KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/ucrtbase.dll
    .dll 1.1MB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/vcruntime140.dll
    .dll 106KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/vcruntime140_1.dll
    .dll 48KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/vcruntime140_1_app.dll
    .dll 18KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/vcruntime140_app.dll
    .dll 22KB
  • #!~#0PEN_6092_P@$$WORd~!$/x64/zlibai.dll
    .dll 233KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/API-MS-Win-core-xstate-l2-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/App.xbf
    1KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/AzureKeyVaultDgssLib.dll
    .dll 313KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/MessagesList.xbf
    5KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/Microsoft.Toolkit.Win32.UI.XamlHost.dll
    .dll 101KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/Repackager.VisualElementsManifest.xml
    .xml 252B
  • #!~#0PEN_6092_P@$$WORd~!$/x86/SciLexer.dll
    .dll 587KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/StartPage.xbf
    15KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/Updater-comproxystub.dll
    .dll 107KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/WinUiBootstrapper.dll
    .dll 866KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-console-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-console-l1-2-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-datetime-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-debug-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-fibers-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-file-l1-1-0.dll
    .dll 15KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-file-l1-2-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-file-l2-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-handle-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-heap-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-interlocked-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-libraryloader-l1-1-0.dll
    .dll 13KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-localization-l1-2-0.dll
    .dll 15KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-memory-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-namedpipe-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-processenvironment-l1-1-0.dll
    .dll 13KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-processthreads-l1-1-0.dll
    .dll 14KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-processthreads-l1-1-1.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-profile-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-string-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-synch-l1-1-0.dll
    .dll 14KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-synch-l1-2-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll 13KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-timezone-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-core-util-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-conio-l1-1-0.dll
    .dll 13KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-convert-l1-1-0.dll
    .dll 16KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-environment-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 14KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-heap-l1-1-0.dll
    .dll 13KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-locale-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-math-l1-1-0.dll
    .dll 22KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll 20KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-private-l1-1-0.dll
    .dll 65KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-process-l1-1-0.dll
    .dll 13KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-runtime-l1-1-0.dll
    .dll 17KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-stdio-l1-1-0.dll
    .dll 18KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-string-l1-1-0.dll
    .dll 18KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-time-l1-1-0.dll
    .dll 14KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/api-ms-win-crt-utility-l1-1-0.dll
    .dll 12KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/dbghelp.dll
    .dll 1.2MB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/embeddeduiproxy.dll
    .dll 23KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/encoder.dll
    .dll 343KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/expatai.dll
    .dll 216KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/gameratings.dll
    .dll 262KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/msvcp140.dll
    .dll 436KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/msvcp140_app.dll
    .dll 247KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/registryTracer32.dll
    .dll 385KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/sccm.VisualElementsManifest.xml
    .xml 252B
  • #!~#0PEN_6092_P@$$WORd~!$/x86/tools/AngleSharp.dll
    .dll 1.2MB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/tools/SvgConverter
    .exe 26KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/tools/vectorimageprocessor
    .exe 448KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/ucrtbase.dll
    .dll 1.1MB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/updater.ini
    267B
  • #!~#0PEN_6092_P@$$WORd~!$/x86/vcruntime140.dll
    .dll 88KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/vcruntime140_app.dll
    .dll 21KB
  • #!~#0PEN_6092_P@$$WORd~!$/x86/zlibai.dll
    .dll 193KB

2ce94017785dc8db14faf8cd5769a2b854a8ef259ecc0e8eeb27bab230b0f727

  • SHA256 2ce94017785dc8db14faf8cd5769a2b854a8ef259ecc0e8eeb27bab230b0f727
  • MD5 SHA1 SHA512 SSDEEP