General

  • Target
    win.rar
  • Size 85.2MB
  • Sample240603-hteccafe8w
  • SHA256 591ddc0a974dcf3925377fbcac1f9dfd810a8a2dd450fcc69d2051163bdba912
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 34 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • win.rar
    .rar 85.2MB
  • win/7z.dll
    .dll 1.0MB
  • win/7z.exe
    .exe 259KB
  • win/CubeDLL.dll
    .dll 5.0MB
  • win/FastReport4LOC/FastReport4ARE.xml
    .xml 90KB
  • win/FastReport4LOC/FastReport4PLK.xml
    .xml 82KB
  • win/FastReport4LOC/FastReport4RUS.xml
    .xml 104KB
  • win/NOVEX32.DLL
    .dll 356KB
  • win/Netkern.dll
    .dll 331KB
  • win/Port32.exe
    .exe 344KB
  • win/Preload.exe
    .exe 1.3MB
  • win/TCPSOC.dll
    .dll 188KB
  • win/Thread32.dll
    .dll 142KB
  • win/agregate_install.exe
    .exe 2.7MB
  • win/bldcube.exe
    .exe 1.3MB
  • win/bldcubex.exe
    .exe 1.3MB
  • win/borlndmm.dll
    .dll 31KB
  • win/cc3260mt.dll
    .dll 1.4MB
  • win/dbup70500.exe
    .exe 1.7MB
  • win/dbup70504.exe
    .exe 3.9MB
  • win/dllman.dll
    .dll 83KB
  • win/errors32.dll
    .dll 111KB
  • win/escape.dat
    2KB
  • win/frResRUS.dll
    .dll 53KB
  • win/ini/RKEEPER.INI
    692B
  • win/ini/ShelterConnect.ini
    917B
  • win/ini/common.ini
    197B
  • win/ini/remotefm.ini
    160B
  • win/ini/repsserv.ini
    693B
  • win/ini/rk7man.ini
    345B
  • win/ini/rk7srv.INI
    463B
  • win/ini/wincash.ini
    396B
  • win/ini/winprint.ini
    343B
  • win/libeay32.dll
    .dll 1.3MB
  • win/localize/manager7/manager7.ar.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.az.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.bg.xlf
    .xml 1.6MB
  • win/localize/manager7/manager7.cs.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.de.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.en.xlf
    .xml 1.2MB
  • win/localize/manager7/manager7.es.xlf
    .xml 1.3MB
  • win/localize/manager7/manager7.et.xlf
    .xml 1.3MB
  • win/localize/manager7/manager7.fr.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.hu.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.hy.xlf
    .xml 1.6MB
  • win/localize/manager7/manager7.it.xlf
    .xml 1.2MB
  • win/localize/manager7/manager7.ka.xlf
    .xml 1.8MB
  • win/localize/manager7/manager7.km.xlf
    .xml 1.5MB
  • win/localize/manager7/manager7.lo.xlf
    .xml 1.2MB
  • win/localize/manager7/manager7.lt.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.lv.xlf
    .xml 1.5MB
  • win/localize/manager7/manager7.mk.xlf
    .xml 1.6MB
  • win/localize/manager7/manager7.mn.xlf
    .xml 1.2MB
  • win/localize/manager7/manager7.my.xlf
    .xml 1.2MB
  • win/localize/manager7/manager7.nl.xlf
    .xml 1.2MB
  • win/localize/manager7/manager7.pl.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.ro.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.ru.xlf
    .xml 1.6MB
  • win/localize/manager7/manager7.sr.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.tr.xlf
    .xml 1.2MB
  • win/localize/manager7/manager7.uk.xlf
    .xml 1.6MB
  • win/localize/manager7/manager7.vi.xlf
    .xml 1.4MB
  • win/localize/manager7/manager7.zh.xlf
    .xml 1.2MB
  • win/localize/manager7/manager7.zu.xlf
    .xml 1.4MB
  • win/localize/rkeeper7/rkeeper7.ar.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.az.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.bg.xlf
    .xml 1.4MB
  • win/localize/rkeeper7/rkeeper7.cs.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.de.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.en.xlf
    .xml 1.1MB
  • win/localize/rkeeper7/rkeeper7.es.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.et.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.fr.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.hu.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.hy.xlf
    .xml 1.4MB
  • win/localize/rkeeper7/rkeeper7.it.xlf
    .xml 1.1MB
  • win/localize/rkeeper7/rkeeper7.ka.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.km.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.lo.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.lt.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.lv.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.mk.xlf
    .xml 1.4MB
  • win/localize/rkeeper7/rkeeper7.mn.xlf
    .xml 1.4MB
  • win/localize/rkeeper7/rkeeper7.my.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.nl.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.pl.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.ro.xlf
    .xml 1.2MB
  • win/localize/rkeeper7/rkeeper7.ru.xlf
    .xml 1.4MB
  • win/localize/rkeeper7/rkeeper7.sr.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.tr.xlf
    .xml 1.1MB
  • win/localize/rkeeper7/rkeeper7.uk.xlf
    .xml 1.4MB
  • win/localize/rkeeper7/rkeeper7.vi.xlf
    .xml 1.3MB
  • win/localize/rkeeper7/rkeeper7.zh.xlf
    .xml 1.1MB
  • win/localize/rkeeper7/rkeeper7.zu.xlf
    .xml 1.3MB
  • win/logsToSQL.exe
    .exe 3.9MB
  • win/midas.dll
    .dll 289KB
  • win/midserv.exe
    .exe 7.4MB
  • win/nginx-rk/0.rotate_logs.bat
    .bat .vbs 449B
  • win/nginx-rk/1.rotate_file.bat
    .bat .vbs 1KB
  • win/nginx-rk/2.del_all_but_10.bat
    448B
  • win/nginx-rk/LICENSE
    1KB
  • win/nginx-rk/libexslt.dll
    .dll 66KB
  • win/nginx-rk/libxml2.dll
    .dll 1.9MB
  • win/nginx-rk/libxslt.dll
    .dll 186KB
  • win/nginx-rk/rk7-nginx.exe
    .exe 640KB
  • win/nginx-rk/vcruntime140.dll
    .dll 81KB
  • win/rabbitmq.dll
    .dll 53KB
  • win/refsToSQL.exe
    .exe 3.9MB
  • win/refsrv.eng
    8KB
  • win/refsrv.exe
    .exe 8.5MB
  • win/rk7.chm
    .chm 18.2MB
  • win/rk7copy.exe
    .exe 93KB
  • win/rk7man.bat
    402B
  • win/rk7man.eng
    135KB
  • win/rk7man.exe
    .exe 21.6MB
  • win/rk7manex.exe
    .exe 21.6MB
  • win/rkReportsServer.exe
    .exe 7.7MB
  • win/rkzabbix/libcrypto-1_1.dll
    .dll 1.7MB
  • win/rkzabbix/libssl-1_1.dll
    .dll 355KB
  • win/rkzabbix/zabbix_sender.exe
    .exe 237KB
  • win/rkzabdll.dll
    .dll 394KB
  • win/sh5rki.dll
    .dll 82KB
  • win/shift2sql.exe
    .exe 3.9MB
  • win/sqlcipher.dll
    .dll 1.8MB
  • win/sqlite3.dll
    .dll 643KB
  • win/ssleay32.dll
    .dll 330KB
  • win/wincash.bat
    2KB
  • win/wincash.dat
    .sh 775B
  • win/winprint.exe
    .exe 6.3MB

win.rar

  • SHA256 591ddc0a974dcf3925377fbcac1f9dfd810a8a2dd450fcc69d2051163bdba912
  • MD5 SHA1 SHA512 SSDEEP