General

  • Target

    tttt.zip

  • Size

    3.4MB

  • MD5

    bf066b3e8e921b1f0dc7ccf1efea3a77

  • SHA1

    24c6b250410d3aa9bd9c2c211c16f82621bb4d8b

  • SHA256

    ccfa0cd8595ce66b62cd12c83fe215874b858a5668efcb5c5b32ee416bdd8af6

  • SHA512

    f8923602757e1deb27dc3726ad0603b5ceb902faff48d9f070c83cf78c11a0dd68c2cc8bb4a4d354bf10902b710abbf93ec28af325766bd8152b85420543e63c

  • SSDEEP

    98304:E1NFXa/hRFY89YYc9jh23redpmQRHU6nJsjfOQZg:UNSxYoY59V0redpmQRHdnJGOmg

Score
1/10

Malware Config

Signatures

Files

  • tttt.zip
    .zip
  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • install/24.4.4.1168.manifest
  • install/brand_config
  • install/browser.VisualElementsManifest.xml
  • install/clidmgr.exe
    .exe windows:5 windows x86 arch:x86

    994d1bcde44281f4376792fc9383ef1b


    Code Sign

    Headers

    Imports

    Sections

  • install/cs.pak
  • install/de.pak
  • install/en-US.pak
  • install/install_state.json
  • install/manifest.json
  • install/partner-package.cab
    .cab
  • partner_config
  • resources/configs/all_zip
    .zip
  • ETAGS
  • ad_blocker
  • ad_hide
  • alissenger
  • api_allowed_hosts
  • api_pool
  • apps_promo_common
  • autofill_custom_data_types
  • autofill_heuristic
  • autofill_js_heuristic
  • banks_urls
  • cardman
  • cardsec
  • check_whitelist
  • choose_tab_design_settings
  • chua_list
  • collections_blacklist
  • collections_button_position
  • content_settings
  • custom_root_certs
  • deep_links_catcher
  • dnscrypt-resolvers
  • extensions
  • feature_toggles
  • force_component_update
  • forced_update
  • geop
  • gpu_configs_overrides
  • group_policy
  • hips
  • hosts_allowed_to_play_energy_inefficient_media
  • hosts_map
  • iframe_isolation
  • ignore_lists
  • image_buttons_config
  • important_urls
  • inline_verified_servers
  • inside_rules
  • known_antivirus
  • lookup
  • mining_whitelist
  • minwhite
  • network_requests
  • no_spoof
  • notifications_permission
  • ntp_promo_messengers_adaptive
  • ondemand_features
  • oow_video
  • p2c-phone-schemes
  • page_translator
  • passman
  • plugin_version_overrides
  • poppin
  • preconnect_urls_config
  • prefs_override
  • princ
  • productivity
  • qr_code_detection
  • registry
  • rescuetool
  • rewrite_list
  • rt_monitoring
  • safe_content
  • saferules
  • saferules_v2
  • script_check
  • search_on_site
  • service_urls
  • shock_domains
  • site_summarization
  • smartback
  • sovetnik
  • spa
  • split_cache_config
  • stat_bl
  • tls_gost
  • togglecalipso
  • translate_blacklist
  • translator
  • trusted_extensions
  • turboapps
  • ua_change
  • url_symbols
  • video_translation
  • videocodec_install
  • voiceable_sites
  • webstore
  • welcome_experiment
  • white_dock
  • whitelist_apps
  • whitelist_cert_roots
  • wlpconf
  • ya_push
  • yandex_cards_config
  • ynotif
  • youtube_ad_stats
  • ytp
  • ytrust
  • resources/tablo
  • install/preloaded_data.pb
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections