Overview

overview

8

Static

static

3

dvision/DA...ON.exe

windows7-x64

8

dvision/DA...ON.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    dvision.zip

  • Size

    11.3MB

  • MD5

    85ba560f538ddc776f6f15c30def9cca

  • SHA1

    4681ea56f8ac1af9a42621430a584b166b592fee

  • SHA256

    0e9e521c005a113417e8bc7ec3e4a2acae832eca7ceb9261cb7567678a9374ef

  • SHA512

    c60a76daeed795a8455dfccf637e6107f1003ec9cdeab85f8a894f67abc6d8b41c26920b755bc1bb63250ebcef4aed909784f0f8720791bad26438d8e181c977

  • SSDEEP

    196608:070oy+3zbXqMXU8NGcra/0eOGEpYPdTWD7dD8q+i5/zHTxyVd0JkrshHT6byjyQP:cxBE8Nt80eEyVU7d1tlzHlyVjrsdObyL

Score
3/10

Malware Config

Signatures

  • Unsigned PE 41 IoCs

    Checks for missing Authenticode signature.

Files

  • dvision.zip
    .zip
  • dvision/DARKVISION.exe
    .exe windows:4 windows x86 arch:x86

    a9c887a4f18a3fede2cc29ceea138ed3


    Headers

    Imports

    Sections

  • dvision/DROPPERPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    c61c8f15ab1ada85d3af8cef4761e8da


    Headers

    Imports

    Sections

  • dvision/DROPPERPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    6aa0ffc8bf7520e9f92e49061aacc9ce


    Headers

    Imports

    Sections

  • dvision/FILEPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    2603ac6185cae5a9d11c4b1760edd513


    Headers

    Imports

    Sections

  • dvision/FILEPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    b7135b928b0b41a17d135afba310f435


    Headers

    Imports

    Sections

  • dvision/HVNCPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    7429f35c51464226a056431cc232f2e0


    Headers

    Imports

    Sections

  • dvision/HVNCPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    42aaa46f2a42e0245dedb9ecb302fdfb


    Headers

    Imports

    Sections

  • dvision/KILLSWITCHPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    2e68d440da524cd907f6a4ad2f227ad3


    Headers

    Imports

    Sections

  • dvision/KILLSWITCHPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    b3665936bf969fa267ff52933902f29e


    Headers

    Imports

    Sections

  • dvision/LIVEKEYLOGGERPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    aab3f306267063cc1f3de9f102df14e9


    Headers

    Imports

    Sections

  • dvision/LIVEKEYLOGGERPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    2f1b93fd8732d11b51b708045d39f3f3


    Headers

    Imports

    Sections

  • dvision/MEMORYDUMPPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    858b02bab6881eff3e13cdb9fdab12e9


    Headers

    Imports

    Sections

  • dvision/MEMORYDUMPPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    ad71a68ad83070970fb137e3269ee9c0


    Headers

    Imports

    Sections

  • dvision/MESSAGEPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    e8d4e5bc10a2da224711b1f86c0a54c3


    Headers

    Imports

    Sections

  • dvision/MESSAGEPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    5a1b789ee6f22749a684205b58b6f886


    Headers

    Imports

    Sections

  • dvision/MICROPHONECAPTUREPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    b357f8b780591f5c327481df1ac3106b


    Headers

    Imports

    Sections

  • dvision/MICROPHONECAPTUREPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    f5e33d84132dd5a50f1ed1a41fcfe029


    Headers

    Imports

    Sections

  • dvision/OFFLINEKEYLOGGERPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    5b857cdfcd6baced0ff98d4edf8a6a9a


    Headers

    Imports

    Sections

  • dvision/OFFLINEKEYLOGGERPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    ef33a010507e0c3b2c51175489933373


    Headers

    Imports

    Sections

  • dvision/PASSWORDRECOVERYPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    398bfe2e8a3b16b83ac0c66c2a8c158f


    Headers

    Imports

    Sections

  • dvision/PASSWORDRECOVERYPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    02ef1a298451701d52875dc9662f0833


    Headers

    Imports

    Sections

  • dvision/PROCESSPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    87cbae09dca61793400c76c4a2d1b2ce


    Headers

    Imports

    Sections

  • dvision/PROCESSPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    c25b69b8def9a74146d4672cd490608d


    Headers

    Imports

    Sections

  • dvision/REGISTRYPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    622c98c3366578f56c5dae12a50c308f


    Headers

    Imports

    Sections

  • dvision/REGISTRYPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    ac5f835f720b362937d20d907e20cdfd


    Headers

    Imports

    Sections

  • dvision/REMOTESHELLPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    282fc7a11c37706ecf10825ce70fef52


    Headers

    Imports

    Sections

  • dvision/REMOTESHELLPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    4c4301e6322f2946de8ec9240e9786f3


    Headers

    Imports

    Sections

  • dvision/SCREENCAPTUREPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    583506e5e7e518b2e9c9952d61a41040


    Headers

    Imports

    Sections

  • dvision/SCREENCAPTUREPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    88da1eb545a0568839384f466efda85d


    Headers

    Imports

    Sections

  • dvision/SOCKSRELAYPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    d15d5bde26e984feb9bef91830130140


    Headers

    Imports

    Sections

  • dvision/SOCKSRELAYPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    7b1538194556fc969f62012036c99248


    Headers

    Imports

    Sections

  • dvision/SYSTEMCONTROLPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    e3c2a95ef165b045f3902143afb5d50f


    Headers

    Imports

    Sections

  • dvision/SYSTEMCONTROLPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    40ed67ed94b502e3df428248aca6e97d


    Headers

    Imports

    Sections

  • dvision/VNCPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    48b02c29a241c40915ae85639a6c867b


    Headers

    Imports

    Sections

  • dvision/VNCPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    93091bd6b315205bbc533727a353bc36


    Headers

    Imports

    Sections

  • dvision/WALLPAPERPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    d5f01c411703c156a030e8f04647e662


    Headers

    Imports

    Sections

  • dvision/WALLPAPERPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    792271e5aa0ae8209513ddd0ca17980f


    Headers

    Imports

    Sections

  • dvision/WEBCAMPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    c1cd7530c9a548c383f53a7737253aba


    Headers

    Imports

    Sections

  • dvision/WEBCAMPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    43cabba3a2348d08457152f2d424f8d6


    Headers

    Imports

    Sections

  • dvision/WINDOWPLUGIN32.DLL
    .dll windows:5 windows x86 arch:x86

    5f312beccb4c144aad8cabdef237f461


    Headers

    Imports

    Sections

  • dvision/WINDOWPLUGIN64.DLL
    .dll windows:5 windows x64 arch:x64

    23b040dec8b2f3289ea5382d4d503425


    Headers

    Imports

    Sections

  • dvision/{9B0AF4E7-83D4-4AF8-83EC-9EFAF0769048}