General

  • Target

    ca342cba60fad09da513ff9ea3720ac71ade49d76b8821688a66d33ae8f22591.exe

  • Size

    12.8MB

  • MD5

    5e97c02ee47ffb36675aefc18d2d2c02

  • SHA1

    fc88b5be82393d5a40170ee95fbe4f766f2d2b0c

  • SHA256

    ca342cba60fad09da513ff9ea3720ac71ade49d76b8821688a66d33ae8f22591

  • SHA512

    01ba08514c296dc4d210ceeda362627b1acdcab945cf1e93f682d8f1a1330bcad1efaf96c01cb3dcaa26aa2f5dc1c5aad16b59005fc6ddc2dad7eba6bd73eec3

  • SSDEEP

    393216:pL81JU+h5ey8Nq8Y1ba0a+tXfJbAcWjOh:C1JUq5178ybTBZRAfjOh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • ca342cba60fad09da513ff9ea3720ac71ade49d76b8821688a66d33ae8f22591.exe
    .exe windows:4 windows x86 arch:x86

    12082e77cfc7e34f96f21f95764c8ac3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:6 windows x86 arch:x86

    ea039c6c5875b84c250de0cd6c42e9e6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:6 windows x86 arch:x86

    595f0352a4f0334083ff07b9ff6579d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    8abe046ef411de4d3e6e831b6b1ee264


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/services.dll
    .dll windows:4 windows x86 arch:x86

    caddd9e268e5bc2a8b67248bc1f72836


    Headers

    Imports

    Exports

    Sections

  • $TEMP/8059a7e62d2a4da6ac16d9fe8efc295e/6432.ps1
    .ps1
  • $TEMP/8059a7e62d2a4da6ac16d9fe8efc295e/runpwsh.ps1
  • $TEMP/tosibox-install/$R0
    .exe windows:6 windows x86 arch:x86

    681cf2a2d22d9cab26f641e2a47f7e0b


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/tosibox-install/capicom.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    817acf67b593a3bed6b4a50e83400d47


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/$_8_
    .exe windows:4 windows x86 arch:x86

    12082e77cfc7e34f96f21f95764c8ac3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    8abe046ef411de4d3e6e831b6b1ee264


    Headers

    Imports

    Exports

    Sections

  • bin/AUTORUN.INF
  • bin/OemVista.inf
  • bin/Qt6Core.dll
    .dll windows:6 windows x64 arch:x64

    a95e032d5e4425893cbc369bf952e92b


    Headers

    Imports

    Exports

    Sections

  • bin/Qt6Gui.dll
    .dll windows:6 windows x64 arch:x64

    e984d25223d3283309bd13b2ccd30faa


    Headers

    Imports

    Exports

    Sections

  • bin/Qt6Network.dll
    .dll windows:6 windows x64 arch:x64

    9db5773e5f33c2572ab429fedcca0828


    Headers

    Imports

    Exports

    Sections

  • bin/Qt6Widgets.dll
    .dll windows:6 windows x64 arch:x64

    118c3182dc640550e69a27a60072372f


    Headers

    Imports

    Exports

    Sections

  • bin/ShuttleCsp11_2001.dll
    .dll windows:5 windows x64 arch:x64

    776ec260664bef343b406de275da6d22


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/TosiboxKey.exe
    .exe windows:6 windows x64 arch:x64

    733509e7a5d2d92c6f0dd7e4ecbe9366


    Code Sign

    Headers

    Imports

    Sections

  • bin/TosiboxKeyAgent.exe
    .exe windows:6 windows x64 arch:x64

    9b36c0f02956a69e777f525cf4c46ab6


    Code Sign

    Headers

    Imports

    Sections

  • bin/TosiboxKeyService.exe
    .exe windows:6 windows x64 arch:x64

    1c3365454cb65d9c1e5a2bf7cd62712b


    Code Sign

    Headers

    Imports

    Sections

  • bin/TosiboxKeyUpdateProgress.exe
    .exe windows:6 windows x64 arch:x64

    70a18aa17abcc577b221801f66ce6541


    Code Sign

    Headers

    Imports

    Sections

  • bin/capicom.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    817acf67b593a3bed6b4a50e83400d47


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/cchannel.dll
    .dll windows:6 windows x64 arch:x64

    78fe5ad231d6aa9734512c2c12d3a63f


    Headers

    Imports

    Exports

    Sections

  • bin/combined_ca_tosibox.pem
  • bin/eps2003csp11.dll
    .dll windows:5 windows x64 arch:x64

    8a3aed71edc3b0e6941ad253d7efe97c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/key2.ico
  • bin/libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    9e838455ae7ea799f93ad26b13f1cafa


    Headers

    Imports

    Exports

    Sections

  • bin/libp11.dll
    .dll windows:6 windows x64 arch:x64

    ab6ae09b3497a3c2026b5927497e8ed8


    Headers

    Imports

    Exports

    Sections

  • bin/libpkcs11-helper-1.dll
    .dll windows:6 windows x64 arch:x64

    3c8ea84e163afacb685c41e44eba156a


    Headers

    Imports

    Exports

    Sections

  • bin/libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    66394c235100d979eda223039d10576d


    Headers

    Imports

    Exports

    Sections

  • bin/licenses/GPL_2.txt
  • bin/licenses/LGPL_2.1.txt
  • bin/licenses/LGPL_3.txt
  • bin/licenses/license.OpenVPN.txt
  • bin/licenses/license.libevent.txt
  • bin/licenses/license.libp11.txt
  • bin/licenses/license.libqrencode.txt
  • bin/licenses/license.ofl.txt
  • bin/licenses/license.openssl.txt
  • bin/licenses/license.pkcs11-helper.txt
  • bin/licenses/license.protobuf-c.txt
  • bin/licenses/license.pthreads-win32.txt
  • bin/licenses/license.qt.txt
  • bin/lzo2.dll
    .dll windows:6 windows x64 arch:x64

    55efb3c6ae185b00bae727a806eab018


    Headers

    Imports

    Exports

    Sections

  • bin/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    c1687527a3d5b7532fa653f66eba12e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    2f8a18fefaba28c3707dae8605d51b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/nvspbind.exe
    .exe windows:6 windows x86 arch:x86

    6029dabd0936521907040793c1fd427a


    Headers

    Imports

    Sections

  • bin/openvpn.exe
    .exe windows:6 windows x64 arch:x64

    376819822a48ccce97d7f9ac139aae09


    Headers

    Imports

    Sections

  • bin/pkcs11.dll
    .dll windows:6 windows x64 arch:x64

    e2061b75116379a30dbf6129581d19c3


    Headers

    Imports

    Exports

    Sections

  • bin/plugins/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    7054fb06cd9ff7187e4418fcd1373d5b


    Headers

    Imports

    Exports

    Sections

  • bin/plugins/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    5a5d6c6c2d8810fabac9ae35dd59e2cf


    Headers

    Imports

    Exports

    Sections

  • bin/plugins/tls/qopensslbackend.dll
    .dll windows:6 windows x64 arch:x64

    9f03a4788a8d4ef4306de0e8aa9a8f0d


    Headers

    Imports

    Exports

    Sections

  • bin/probeclient.dll
    .dll windows:6 windows x64 arch:x64

    90ba674d70d1a93dfac02661507ec251


    Headers

    Imports

    Exports

    Sections

  • bin/pthreadVC2.dll
    .dll windows:6 windows x64 arch:x64

    4580355a28b8a780693d1c8465d06d25


    Headers

    Imports

    Exports

    Sections

  • bin/qrencode.dll
    .dll windows:6 windows x64 arch:x64

    19197745ef12cd500cfd66af4fb234ab


    Headers

    Imports

    Exports

    Sections

  • bin/signtool.exe
    .exe windows:6 windows x86 arch:x86

    681cf2a2d22d9cab26f641e2a47f7e0b


    Code Sign

    Headers

    Imports

    Sections

  • bin/tapdriver_uninstall.ps1
    .ps1
  • bin/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    59dfe5c9f961f1417775cd3a41a8be62


    Code Sign

    Headers

    Imports

    Sections

  • bin/taptosi.cat
  • bin/taptosi.sys
    .sys windows:10 windows x64 arch:x64

    6951888e15c9a7d15f304320298d1328


    Code Sign

    Headers

    Imports

    Sections

  • bin/tosibox.exe
    .exe windows:4 windows x86 arch:x86

    12082e77cfc7e34f96f21f95764c8ac3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • bin/tosibox_software.cer
  • bin/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections