General

  • Target

    _Getintopc.com_Xfer_Serum_and_Serum_FX_Update_127b6.rar

  • Size

    201.6MB

  • MD5

    a495aa50a3a866cf7ee71b185790c9be

  • SHA1

    fd7abc68a4e7769784e07ec66e3d8e238ed89f3e

  • SHA256

    06e85e4119c4d147ff82daee555bb22a0bb675e0258e3e5dcd37bceeabbd49d1

  • SHA512

    a6fc23b046d93aec778e8544048fe6bf383ff138ab8e466f1041a9fa32f8d852d853af1005c2006b9d3c3dc2e1a9494382739780798f00877ebc73ebd8c237b3

  • SSDEEP

    3145728:8otF8EV8A68/GiI4y54u/8zF/h+uvULDaVUzZFTLyJKppY8I2d3F:8owEVR68/GixuEZZbvU+UzZxLoKnd3F

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • _Getintopc.com_Xfer_Serum_and_Serum_FX_Update_127b6.rar
    .rar

    Password: 123

  • Xfer_Serum_and_Serum_FX_Update_127b6/Password 123.txt
  • Xfer_Serum_and_Serum_FX_Update_127b6/Xfer_Serum_and_Serum_FX_Update_127b6/win/FiX/FiX info.txt
  • Xfer_Serum_and_Serum_FX_Update_127b6/Xfer_Serum_and_Serum_FX_Update_127b6/win/FiX/x64/SerumFX_x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    94b96794b5c4c7135f6d9ef344094beb


    Headers

    Imports

    Exports

    Sections

  • Xfer_Serum_and_Serum_FX_Update_127b6/Xfer_Serum_and_Serum_FX_Update_127b6/win/FiX/x64/Serum_x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 123

    94b96794b5c4c7135f6d9ef344094beb


    Headers

    Imports

    Exports

    Sections

  • Xfer_Serum_and_Serum_FX_Update_127b6/Xfer_Serum_and_Serum_FX_Update_127b6/win/FiX/x86/Serum.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    9083b4bd340208e27b14c803c48e6774


    Headers

    Imports

    Exports

    Sections

  • Xfer_Serum_and_Serum_FX_Update_127b6/Xfer_Serum_and_Serum_FX_Update_127b6/win/FiX/x86/SerumFX.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    9083b4bd340208e27b14c803c48e6774


    Headers

    Imports

    Exports

    Sections

  • Xfer_Serum_and_Serum_FX_Update_127b6/Xfer_Serum_and_Serum_FX_Update_127b6/win/Install_Xfer_SerumFX_Update_127b6.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    c0d4e5fadc92d88e6603d2d1c1d8421c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • $_14_/SerumFX_x64.dll
    .dll windows:6 windows x64 arch:x64

    94b96794b5c4c7135f6d9ef344094beb


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Resources/PageTable.xml
    .xml
  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    1e6025bf85db549a0866a59ce55a46d4


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    3d4430605cf7f078fd23b089d93cec9a


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Resources/PageTable.xml
    .xml
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    1e6025bf85db549a0866a59ce55a46d4


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    3d4430605cf7f078fd23b089d93cec9a


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
  • SerumFX.dll
    .dll windows:6 windows x86 arch:x86

    9083b4bd340208e27b14c803c48e6774


    Headers

    Imports

    Exports

    Sections

  • Xfer_Serum_and_Serum_FX_Update_127b6/Xfer_Serum_and_Serum_FX_Update_127b6/win/Install_Xfer_Serum_127b6.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections

  • Xfer_Serum_and_Serum_FX_Update_127b6/Xfer_Serum_and_Serum_FX_Update_127b6/win/Install_Xfer_Serum_Update_127b6.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Code Sign

    Headers

    Imports

    Sections