General

  • Target

    files.zip

  • Size

    14.0MB

  • MD5

    d74f7519327495a875ef4f500631111b

  • SHA1

    92a7fa442f804fc75f014645a4ef86be3c023d71

  • SHA256

    6840e2da8db9347a148fbca3869b13af2c5bab752b26dfec6c14a2da7488a8d4

  • SHA512

    9660bb34002c14f7e747fbbe04eaa37e5ead22f96bc73e34e837c8980cf12d56d7aa2303a23e2332446c59d66fe285360fac1bb7e89295319be2a0889160f68e

  • SSDEEP

    393216:GzEczUdMmVDBOxcEE/S17dGZ5SlnsmLbxwNkqo6WurmWs:GgczU2mVDEy7egZ5SlnsSxbU7bs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • files.zip
    .zip
  • #N?w_PC?�tup-11370-Pa$$wrD!!/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    2530442c15bdf5e880f3e86bd015d2bf


    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    8307f0e2ecc6bdee56d484a6da9becc5


    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/Setup.exe
    .exe windows:6 windows x64 arch:x64

    e8f6984829b11831577c4d66dfedf94f


    Code Sign

    Headers

    Imports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/amphipod.tiff
  • #N?w_PC?�tup-11370-Pa$$wrD!!/hogg.pptx
  • #N?w_PC?�tup-11370-Pa$$wrD!!/libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    eb9cfc22836094167bd699fc0a51bab6


    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    74f51c2177062ab2752fc871ebf0d685


    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    7be75bce9bc33e1e12ce35a06ab9327d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/updater/manager/ks_tyres.ini
  • #N?w_PC?�tup-11370-Pa$$wrD!!/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/vcruntime140_app.dll
    .dll windows:6 windows x86 arch:x86

    d72f37c91b3ba73278f6e6e6efc9239b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/HDHelper_[0MB]_[1].exe
    .exe windows:5 windows x86 arch:x86

    82a2d44124f64fef31cc8e1daa6c7ece


    Code Sign

    Headers

    Imports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/NvStereoUtilityOGL_[1MB]_[1].exe
    .exe windows:6 windows x86 arch:x86

    3eeeacdc454cd4576630513f651ad97f


    Code Sign

    Headers

    Imports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/VSLauncher_[0MB]_[1].exe
    .exe windows:6 windows x86 arch:x86

    61cdf76393ba81a66e782c6a30558888


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • #N?w_PC?�tup-11370-Pa$$wrD!!/x86/updater.ini