General

  • Target

    SecuriteInfo.com.BScope.Downloader.YgData.12878.14250.exe

  • Size

    2.8MB

  • MD5

    bdc0e8154ddad722188b773dfdfd1b68

  • SHA1

    49e94ca174d5833780f805649bf094bd131024fe

  • SHA256

    3b89425237e586d25c00e13a84757cc129d4467faee57a6121354562cbb877ca

  • SHA512

    f049f540151ec34a863a12fdae61c62ec93b2be1b4a01a74294bc6b7263695993ce93e079821940bab8da32528872dc1c62cc81cfdcbc5ce2c84cd1ead157b0d

  • SSDEEP

    49152:7MlPvgODit6HddEZSbARJ9hvTTPAvt6Ey2QyqRTrO8FMFiTX6+TUwRwwv9CbKc:7RAddyHHfTITVCHMFmX6+fCuc

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • SecuriteInfo.com.BScope.Downloader.YgData.12878.14250.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/processwork.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • DeleteMonitor.bat
    .bat .vbs
  • Help/Faq001.html
    .html
  • Help/Faq002.html
    .html
  • Help/Faq003.html
    .html
  • Help/Faq004.html
    .html
  • Help/css/style.css
  • Help/images/KGcopyright.png
    .png
  • Help/images/KGcuowu.png
    .png
  • Help/images/KGcuowu1.png
    .png
  • Help/images/KGguoqi.png
    .png
  • Help/images/KGqidong.png
    .png
  • Help/images/KGqidong1.png
    .png
  • Help/images/KGqidong2.png
    .png
  • Help/images/KGqidong3.png
    .png
  • Help/images/kinggrid.png
    .png
  • KGBrowser.exe
    .exe windows:5 windows x86 arch:x86

    7b1386f3815dc561c717007591cc6f48


    Code Sign

    Headers

    Imports

    Sections

  • KGBrowserURLProtocol.exe
    .exe windows:5 windows x86 arch:x86

    5897e1717b76f0033c12137725f5a62c


    Code Sign

    Headers

    Imports

    Sections

  • KGMCS.exe
    .exe windows:5 windows x86 arch:x86

    f808897fe3b35b7f81c3972f50a7f4cb


    Code Sign

    Headers

    Imports

    Sections

  • KGMCSMonitorService.exe
    .exe windows:5 windows x86 arch:x86

    592287b684263b793af2a90032bc9ea1


    Code Sign

    Headers

    Imports

    Sections

  • StartMonitor.bat
    .bat .vbs
  • StopMonitor.bat
    .bat .vbs
  • Uninstall.exe.nsis
  • WinExec.exe
    .exe windows:5 windows x86 arch:x86

    b0fa0c9841b9cbf77fcf8fbb8bf259d0


    Headers

    Imports

    Sections

  • mfc100.dll
    .dll windows:5 windows x86 arch:x86

    913659d5824252f76b6534ebb663565c


    Code Sign

    Headers

    Imports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings.ini
  • setup.bat
  • world.ico