General

  • Target

    V2.7.1Updated&InstallationX64-86WIN-EN.zip

  • Size

    28.5MB

  • MD5

    99270d383f4872ee74ef90fdae71fa1d

  • SHA1

    ad5246a196dbc096c99d2d7544e60db1c2130a99

  • SHA256

    871ea1e5041bc5ac2147f9bffa5a191eaf21bfdbf4ff5e5a173d06f395d799d9

  • SHA512

    7a1812b3d0f3ad1a33ea8b25c1b4d514e64df65b0e40fbce6b0ae337ecfdf36b4abbbed5cda50a7ceb54260ea126bb8bf922c6d4185cb46240dc7aa47dfcf37b

  • SSDEEP

    786432:a8baDwBIGdi5p+M732A15MqmC/6BVn1McU1xo4vUtb:a8baEIGdir+Mlkq1iBV1MNxolB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • V2.7.1Updated&InstallationX64-86WIN-EN.zip
    .zip

    Password: 2022

  • PA$$WORD 2022
  • Read me before you start.txt
  • installationFiles_en.rar
    .rar

    Password: 2022

  • Language/Locals/am.pak
  • Language/Locals/ar.pak
  • Language/Locals/fi.pak
  • Language/Locals/fil.pak
  • Language/Locals/fonts/8514sys.fon
  • Language/Locals/fonts/dosapp.fon
  • Language/Locals/fonts/smalle.fon
  • Language/Locals/fonts/symbol.ttf
  • Language/Locals/fonts/trebucbd.ttf
  • Language/Locals/fonts/trebucbi.ttf
  • Language/Locals/fonts/verdana.ttf
  • Language/Locals/fonts/verdanab.ttf
  • Language/Locals/fr.pak
  • Language/Locals/gu.pak
  • Language/Locals/he.pak
  • Language/Locals/hi.pak
  • Language/Locals/hr.pak
  • Language/Locals/hu.pak
  • Language/Locals/id.pak
  • Language/Locals/lt.pak
  • Language/Locals/lv.pak
  • Language/an.txt
  • Language/ar.txt
  • Language/az.txt
  • Language/ba.txt
  • Language/be.txt
  • Language/bg.txt
  • Language/bn.txt
  • Language/ca.txt
  • Language/co.txt
  • Language/cs.txt
  • Language/da.txt
  • Language/de.txt
  • Language/el.txt
  • Language/en-US/AutoWorkplaceN.dll.mui
    .dll windows:6 windows x86 arch:x86

    Password: 2022


    Headers

    Sections

  • Language/en-US/avicap32.dll.mui
    .dll windows:6 windows x86 arch:x86

    Password: 2022


    Headers

    Sections

  • Language/eng.txt
  • Language/es.txt
  • Language/et.txt
  • Language/eu.txt
  • Language/ext.txt
  • Language/fa.txt
  • Language/fi.txt
  • Language/fr.txt
  • Language/fur.txt
  • Language/fy.txt
  • Language/ga.txt
  • Language/gl.txt
  • Language/gu.txt
  • Language/he.pak
  • Language/he.txt
  • Language/hi.pak
  • Language/hi.txt
  • Language/hr.pak
  • Language/hr.txt
  • Language/hu.pak
  • Language/hu.txt
  • Language/hy.txt
  • Language/id.txt
  • Language/is.txt
  • Language/it.txt
  • Language/ja.txt
  • Language/ka.txt
  • Language/kaa.txt
  • Language/kab.txt
  • Language/kk.txt
  • Language/ko.txt
  • Language/ku-ckb.txt
  • Language/ky.txt
  • Language/lij.txt
  • Language/lt.txt
  • Language/mk.txt
  • Language/mn.txt
  • Language/mng.txt
  • Language/mng2.txt
  • Language/mr.txt
  • Language/ne.txt
  • Language/nl.txt
  • Language/pa-in.txt
  • Language/pl.txt
  • Language/ps.txt
  • Language/pt-br.txt
  • Language/pt.txt
  • Language/ro.txt
  • Language/ru.txt
  • Language/sa.txt
  • Language/si.txt
  • Language/sk.txt
  • Language/sl.txt
  • Language/sr-spc.txt
  • Language/sr-spl.txt
  • Language/sv.txt
  • Language/sw.txt
  • Language/ta.txt
  • Language/tg.txt
  • Language/th.txt
  • Language/tk.txt
  • Language/tr.txt
  • Language/tt.txt
  • Language/ug.txt
  • Language/uk.txt
  • Language/uz-cyrl.txt
  • Language/uz.txt
  • Language/va.txt
  • Language/vi.txt
  • Language/yo.txt
  • Language/zh-cn.txt
  • Language/zh-tw.txt
  • Setup.exe
    .exe windows:5 windows x86 arch:x86

    Password: 2022

    7a31665fc7718eb9d365b4d69e4a9ff9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources.pak
  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2022

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections