Overview

overview

7

Static

static

3

TMLoader-win32.exe

windows7-x64

7

TMLoader-win32.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

ShimRun.exe

windows7-x64

1

ShimRun.exe

windows10-2004-x64

1

TMLoader.exe

windows7-x64

1

TMLoader.exe

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

sciter.dll

windows7-x64

1

sciter.dll

windows10-2004-x64

1

ui/layouts...x.html

windows7-x64

1

ui/layouts...x.html

windows10-2004-x64

1

ui/layouts...dex.js

windows7-x64

3

ui/layouts...dex.js

windows10-2004-x64

3

ui/layouts...dex.js

windows7-x64

3

ui/layouts...dex.js

windows10-2004-x64

3

ui/layouts...r.d.js

windows7-x64

3

ui/layouts...r.d.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    TMLoader-win32.exe

  • Size

    4.6MB

  • MD5

    8baaf648ae315e9b11ce9f129c46387a

  • SHA1

    456e33704f8cbebaf9b6a5195699ff74f61c274f

  • SHA256

    37e1c125cf31402ed94f27de32589402e0ee3100767d977f017a26f4af7e1080

  • SHA512

    d8d77fca9d80f5964ef407b8923c655d550ea0f6ff384c0d5ca0a0ef8af87a4576f349bb17d81d95bdc0aa25e1b8bbcb2058543ca1e84f6f7affde5b80bee567

  • SSDEEP

    98304:kTaLH1ilWv3ju18I+NNOBXFNgPG8qb2xZKH4VbFat:kQ4lgk8rSQqb2SH4VbYt

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • TMLoader-win32.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    85f08eb0cbec010ecbc287fa68321173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSIS.InstallOptions.ini
  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    646971a3aef724d6f553f40ae84fe26b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    68e847ed6763e00454edac87b3abd95a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ShimRun.exe
    .exe windows:6 windows x86 arch:x86

    fbdca8271cdf020364267e88368c1c26


    Headers

    Imports

    Sections

  • TMLoader.exe
    .exe windows:6 windows x86 arch:x86

    d9d0897a7f23a96543457d9f8735b886


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    68e847ed6763e00454edac87b3abd95a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • sciter.dll
    .dll windows:6 windows x86 arch:x86

    2ccd939b04066aa5c1a5ad230185807f


    Headers

    Imports

    Exports

    Sections

  • ui/layouts/default/icon.png
    .png
  • ui/layouts/default/index.css
  • ui/layouts/default/index.html
    .html
  • ui/layouts/default/index.jsx
    .js
  • ui/layouts/default/index.tsx
    .js
  • ui/layouts/loader.d.ts
  • ui/layouts/sciter.d.ts
    .js
  • ui/layouts/tsconfig.json
  • ui/styles/apprentice.css
  • ui/styles/dark.css
  • ui/styles/dracula.css
  • ui/styles/gruvbox-dark.css
  • ui/styles/gruvbox-light.css
  • ui/styles/light.css
  • ui/styles/material.css
  • ui/styles/papercolor-dark.css
  • ui/styles/papercolor-light.css
  • ui/styles/solarized-dark.css
  • ui/styles/solarized-light.css
  • ui/styles/tender.css
  • ui/styles/tokyo-night-dark.css
  • ui/styles/tokyo-night-light.css
  • ui/styles/windows-95-light.css
  • ui/styles/windows-95.css