Resubmissions

05-08-2024 08:17

240805-j618ba1cpl 10

05-08-2024 08:15

240805-j5rmgsvdph 3

General

  • Target

    @^NewFile_2024_UseAs_ṔḁṨṨCṏḌḙ^$.zip

  • Size

    21.3MB

  • MD5

    8a5e315d368694692c2e58de3d859676

  • SHA1

    a95f847d22053f61f3b236c05c68fd863b2d072f

  • SHA256

    9192a2b18543b739e6fa11938f4c7ae2e6e9dea348ba7960cb4609f091d83679

  • SHA512

    c595f8bc96ab40e70d94d764056214c48c76aa2f32b541edfd5c50cefd42d943aa063ba526a7a678a36ed8b28939af4fd3dbf5836add135890ee1748cb9804fc

  • SSDEEP

    393216:qaAIUHY9350IKLfcvC7883ROn/1q9m7MYvyvvdDlOUsUL8unjInRk:Dksp8fcv7EROndNQYvyndDl3kunUk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • @^NewFile_2024_UseAs_ṔḁṨṨCṏḌḙ^$.zip
    .zip

    Password: 2024

  • @^NewFile_2024_UseAs_ṔḁṨṨCṏḌḙ^$/@^NewFile_2024_UseAs_ṔḁṨṨCṏḌḙ^$.rar
    .rar

    Password: 2024

  • PaSṣCoḒḕ.css
  • Register.dll
    .dll windows:5 windows x86 arch:x86

    Password: 2024

    ee94d9d14cff80538936ff9d276ecfc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/CMap/Identity-H
  • Resource/CMap/Identity-V
  • Resource/CMap/UCS2-GBK-EUC
  • Resource/CMap/UniKS-UTF16-H
  • Resource/CMap/UniKS-UTF16-V
  • Resource/Font/AdobePIStd.otf
  • Resource/Font/CourierStd-Bold.otf
  • Resource/Font/CourierStd-BoldOblique.otf
  • Resource/Font/CourierStd-Oblique.otf
  • Resource/Font/CourierStd.otf
  • Resource/Font/MinionPro-Bold.otf
  • Resource/Font/MinionPro-BoldIt.otf
  • Resource/Font/MinionPro-It.otf
  • Resource/Font/MinionPro-Regular.otf
  • Resource/Font/MyriadPro-Bold.otf
  • Resource/Font/MyriadPro-BoldIt.otf
  • Resource/Font/MyriadPro-It.otf
  • Resource/Font/MyriadPro-Regular.otf
  • Resource/Font/Pfm/SY______.PFM
  • Resource/Font/Pfm/zx______.pfm
  • Resource/Font/Pfm/zy______.pfm
  • Resource/Font/SY______.PFB
  • Resource/Font/ZX______.PFB
  • Resource/Font/ZY______.PFB
  • Resource/Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    Password: 2024

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • Resource/Language/an.txt
  • Resource/Language/ar.txt
  • Resource/Language/az.txt
  • Resource/Language/ba.txt
  • Resource/Language/be.txt
  • Resource/Language/bg.txt
  • Resource/Language/bn.txt
  • Resource/Language/ca.txt
  • Resource/Language/co.txt
  • Resource/Language/cs.txt
  • Resource/Language/da.txt
  • Resource/Language/de.txt
  • Resource/Language/el.txt
  • Resource/Language/eng.txt
  • Resource/Language/es.txt
  • Resource/Language/et.txt
  • Resource/Language/eu.txt
  • Resource/Language/ext.txt
  • Resource/Language/fa.txt
  • Resource/Language/fi.txt
  • Resource/Language/fr.txt
  • Resource/Language/fur.txt
  • Resource/Language/fy.txt
  • Resource/Language/ga.txt
  • Resource/Language/gl.txt
  • Resource/Language/gu.txt
  • Resource/Language/he.pak
  • Resource/Language/he.txt
  • Resource/Language/hi.pak
  • Resource/Language/hi.txt
  • Resource/Language/hr.pak
  • Resource/Language/hr.txt
  • Resource/Language/hu.pak
  • Resource/Language/hu.txt
  • Resource/Language/hy.txt
  • Resource/Language/id.txt
  • Resource/Language/is.txt
  • Resource/Language/it.txt
  • Resource/Language/ja.txt
  • Resource/Language/ka.txt
  • Resource/Language/kaa.txt
  • Resource/Language/kab.txt
  • Resource/Language/kk.txt
  • Resource/Language/ko.txt
  • Resource/Language/ku-ckb.txt
  • Resource/Language/ky.txt
  • Resource/Language/lij.txt
  • Resource/Language/lt.txt
  • Resource/Language/mk.txt
  • Resource/Language/mn.txt
  • Resource/Language/mng.txt
  • Resource/Language/mng2.txt
  • Resource/Language/mr.txt
  • Resource/Language/ne.txt
  • Resource/Language/nl.txt
  • Resource/Language/pa-in.txt
  • Resource/Language/pl.txt
  • Resource/Language/ps.txt
  • Resource/Language/pt-br.txt
  • Resource/Language/pt.txt
  • Resource/Language/ro.txt
  • Resource/Language/ru.txt
  • Resource/Language/sa.txt
  • Resource/Language/si.txt
  • Resource/Language/sk.txt
  • Resource/Language/sl.txt
  • Resource/Language/sr-spc.txt
  • Resource/Language/sr-spl.txt
  • Resource/Language/sv.txt
  • Resource/Language/sw.txt
  • Resource/Language/ta.txt
  • Resource/Language/tg.txt
  • Resource/Language/th.txt
  • Resource/Language/tk.txt
  • Resource/Language/tr.txt
  • Resource/Language/tt.txt
  • Resource/Language/ug.txt
  • Resource/Language/uk.txt
  • Resource/Language/uz-cyrl.txt
  • Resource/Language/uz.txt
  • Resource/Language/va.txt
  • Resource/Language/vi.txt
  • Resource/Language/yo.txt
  • Resource/Language/zh-cn.txt
  • Resource/Language/zh-tw.txt
  • Resource/Locals/am.pak
  • Resource/Locals/ar.pak
  • Resource/Locals/fi.pak
  • Resource/Locals/fil.pak
  • Resource/Locals/fr.pak
  • Resource/Locals/gu.pak
  • Resource/Locals/he.pak
  • Resource/Locals/hi.pak
  • Resource/Locals/hr.pak
  • Resource/Locals/hu.pak
  • Resource/Locals/id.pak
  • Resource/Locals/lt.pak
  • Resource/Locals/lv.pak
  • Resource/Locals/x64/AdonisUI.ClassicTheme.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2024

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Resource/Locals/x64/AdonisUI.ClassicTheme.xml
    .xml
  • Resource/Locals/x64/AdonisUI.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2024

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Resource/Locals/x64/AdonisUI.xml
    .xml
  • Resource/Locals/x64/SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    a42f73521c784fa06f1d886fcbcefcba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/Locals/x86/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2024

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/Locals/x86/BouncyCastle.Crypto.xml
    .xml
  • Resource/Locals/x86/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    Password: 2024

    39ace63b362beb47a2a7a8202a5c4f2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • Resource/opengl64.dll
  • Resource/resources.pak
  • Setup.exe
    .exe windows:5 windows x86 arch:x86

    28874ed5cf72c5f5139e0f73a21d7936


    Code Sign

    Headers

    Imports

    Sections

  • carferry.flv
  • fxsound/EXEInstallPlugin.dll
    .dll windows:5 windows x86 arch:x86

    b6249787a28a9166daec0295d667b719


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • fxsound/MSIInstallPlugin.dll
    .dll windows:5 windows x86 arch:x86

    f63531d5d0325f81a36f9108749d10f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • fxsound/SoftwareUpdateAdmin.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    b00cdce34a30874132ccefa237aee285


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • fxsound/SoftwareUpdateFiles.dll
    .dll windows:5 windows x86 arch:x86

    2f07b0973f5696d052286993e61000b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • fxsound/WMPMediaSharing.dll
    .dll windows:10 windows x86 arch:x86

    413c7126daf857d47b739e6758e75bad


    Headers

    Imports

    Exports

    Sections

  • fxsound/WMPNSSUI.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    dd2c7fe2c756f791328cc9ebabe3cffb


    Headers

    Imports

    Exports

    Sections

  • fxsound/wmpnssci.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    2c07f50a6f7e56d008222322a40e5147


    Headers

    Imports

    Exports

    Sections

  • glioma.asp
  • libvlc.dll
    .dll windows:4 windows x86 arch:x86

    5c455bebc40d8ab001d42875154b8ef8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libvlccore.dll
    .dll windows:4 windows x86 arch:x86

    f11716690dc3b1ac312b344caaf28102


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/CryptoPP530Fips32.dll
    .dll windows:4 windows x86 arch:x86

    d6c38e965367a686e74b0b12a0cf6e1e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/CryptoPP530Fips64.dll
    .dll windows:4 windows x64 arch:x64

    47c7d73bcbd956569415ba59e9f3031d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/FlowSshC32.dll
    .dll windows:5 windows x86 arch:x86

    84d46400eaae645a88dad66ce90b9fb3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/FlowSshC64.dll
    .dll windows:5 windows x64 arch:x64

    ee2e6d48ce061568a99f225d07587a30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VisualStudio.VsWebProtocol
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • plugins/NvStWiz
    .exe windows:6 windows x86 arch:x86

    a7e73ef2207e9ee97c678506145e1258


    Code Sign

    Headers

    Imports

    Sections

  • plugins/StartupHelper
    .exe windows:5 windows x86 arch:x86

    d21794f0d47bb5c7f5977a6500854d85


    Code Sign

    Headers

    Imports

    Sections

  • plugins/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • plugins/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • @^NewFile_2024_UseAs_ṔḁṨṨCṏḌḙ^$/PaSṣCoḒḕ.css
  • PaSṣCoḒḕ.css