General

  • Target

    bb5739e88d92afd331e476a85ef7fb1f359219b4a3a6f1b76b50e6f5de50f5bc

  • Size

    4.0MB

  • MD5

    90ab1419e81fd4a2fc0a99bbdd6db794

  • SHA1

    2929925fdd0e1d726f468c7ec7f55e89b3a14d4b

  • SHA256

    bb5739e88d92afd331e476a85ef7fb1f359219b4a3a6f1b76b50e6f5de50f5bc

  • SHA512

    f3f745c11fb5ced4a0505009a0a5e3a26e694a7892f6eb68df8b6e256171fef4d7663cd375228745baffea8a22e17a09673bcb5abe6b19730e48a327faf53e8c

  • SSDEEP

    98304:HUdv2kmyw2j6ibWFvcopNGGKHmf//X0erZulAT0luimo:0B2kC2uMdoptKK/v34AQxJ

Score
1/10

Malware Config

Signatures

Files

  • bb5739e88d92afd331e476a85ef7fb1f359219b4a3a6f1b76b50e6f5de50f5bc
    .zip

    Password: infected

  • 3212b31a6177b52096b9652d7a71c66ebdc1e69653f743d7f4300f7dc6f18644.zip
    .zip
  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • install/1a7d70470ec607c8_0
  • install/24.4.4.1168.manifest
  • install/24.6.0.1874.manifest
  • install/StartVoiceCapture.wav
  • install/browser.VisualElementsManifest.xml
  • install/config.cfg
  • install/cs.pak
  • install/de.pak
  • install/delegatedWebFeatures.sccd
    .xml
  • install/en-US.pak
  • install/fr.pak
  • install/install_state.json
  • install/manifest.json
  • install/partner-package.cab
    .cab
  • partner_config
  • resources/configs/all_zip
    .zip
  • ETAGS
  • ad_blocker
  • ad_hide
  • alissenger
  • api_allowed_hosts
  • api_pool
  • apps_promo_common
  • autofill_custom_data_types
  • autofill_heuristic
  • autofill_js_heuristic
  • banks_urls
  • cardman
  • cardsec
  • check_whitelist
  • choose_tab_design_settings
  • chua_list
  • collections_blacklist
  • collections_button_position
  • content_settings
  • custom_root_certs
  • deep_links_catcher
  • dnscrypt-resolvers
  • extensions
  • feature_toggles
  • force_component_update
  • forced_update
  • geop
  • gpu_configs_overrides
  • group_policy
  • hips
  • hosts_allowed_to_play_energy_inefficient_media
  • hosts_map
  • iframe_isolation
  • ignore_lists
  • image_buttons_config
  • important_urls
  • inline_verified_servers
  • inside_rules
  • known_antivirus
  • lookup
  • mining_whitelist
  • minwhite
  • network_requests
  • no_spoof
  • notifications_permission
  • ntp_promo_messengers_adaptive
  • ondemand_features
  • oow_video
  • p2c-phone-schemes
  • page_translator
  • passman
  • plugin_version_overrides
  • poppin
  • preconnect_urls_config
  • prefs_override
  • princ
  • productivity
  • qr_code_detection
  • registry
  • rescuetool
  • rewrite_list
  • rt_monitoring
  • safe_content
  • saferules
  • saferules_v2
  • script_check
  • search_on_site
  • service_urls
  • shock_domains
  • site_summarization
  • smartback
  • sovetnik
  • spa
  • split_cache_config
  • stat_bl
  • tls_gost
  • togglecalipso
  • translate_blacklist
  • translator
  • trusted_extensions
  • turboapps
  • ua_change
  • url_symbols
  • video_translation
  • videocodec_install
  • voiceable_sites
  • webstore
  • welcome_experiment
  • white_dock
  • whitelist_apps
  • whitelist_cert_roots
  • wlpconf
  • ya_push
  • yandex_cards_config
  • ynotif
  • youtube_ad_stats
  • ytp
  • ytrust
  • resources/tablo
  • install/preloaded_data.pb
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • new_chrome_proxy.exe
    .exe windows:10 windows x64 arch:x64

    140ff2ef9713229377b0108ca6c1aa4e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections