Overview

overview

7

Static

static

3

6fcc613d3f...af.exe

windows7-x64

7

6fcc613d3f...af.exe

windows10-2004-x64

7

$PLUGINSDI...ol.dll

windows7-x64

3

$PLUGINSDI...ol.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

putty.exe

windows7-x64

1

putty.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6fcc613d3f9820f850f21df01ea55628ae5a58d69ec9b1f4ca86d626e4001baf.exe

  • Size

    4.2MB

  • MD5

    7084963d84d3fcff3635fb504374c652

  • SHA1

    413cf899c87e185df7f6e0c356fc214ac52466a5

  • SHA256

    6fcc613d3f9820f850f21df01ea55628ae5a58d69ec9b1f4ca86d626e4001baf

  • SHA512

    94117fd0954abd0846dd074c5d424b30107ac615d2d877c1ab0b83e9cf8b3f521bbe3a93cdcdf2716af292e2e3e9b96f39a06f309c648638e7e6f65b35405fe2

  • SSDEEP

    98304:UGeK1J1XvknOPZNq6Mx7VrzkYU/VsyZyZUsEWBGCyFEr9il:QKJcnORNq667Vr+/eKMUc3GS98

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 6fcc613d3f9820f850f21df01ea55628ae5a58d69ec9b1f4ca86d626e4001baf.exe
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    ed83f419402bc3b83a08e3aaf8b5b5b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    7458f96eb10904198d988c72ce690084


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9ba9bc6867bc30d6e7600633f9cabe23


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    ea0aa0a9e9dc166e514586b9219c0789


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/options.ini
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    28a099a911237a28521d8b7ea250f089


    Headers

    Imports

    Sections

  • favico.kalisil.ico
  • netika-ca.cer
  • netika.ico
  • putty.exe
    .exe windows:4 windows x86 arch:x86

    bc07e7b366ac9ad23951888606f0f0fa


    Headers

    Imports

    Sections