General

  • Target

    Plasma.rar

  • Size

    13.2MB

  • MD5

    d7e421726eedf062df075b92f51c698c

  • SHA1

    3b24f33d5e3772a27cc6bcde19dd6d0636b18ad9

  • SHA256

    0824fe8fbe440db145c58f90db08213532f486157bb863b385bbf46002b28f71

  • SHA512

    4042c515b6fef01ffab5864de945363daea27b4e554c47eea1bff94e92bb4c7fa8199ae010016b387c90594be164b7eefb66bff6e8ba6e172d0bca7046570e40

  • SSDEEP

    393216:YhlrJdw7WL1oz94qdm8C+u9dBN1O8nW+N:0rJx1S94C0+QdB7O8nn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Plasma.rar
    .rar
  • CRU(Do me first)/CRU.exe
    .exe windows:4 windows x86 arch:x86

    cafc89e1b0a9b2c5b10389d6d19936ce


    Headers

    Imports

    Exports

    Sections

  • CRU(Do me first)/reset-all.exe
    .exe windows:5 windows x86 arch:x86

    32f33abb2edf5d9be4310f0050d459d0


    Headers

    Imports

    Sections

  • CRU(Do me first)/restart.exe
    .exe windows:5 windows x86 arch:x86

    cf4f510acda53bad738cb1d4e01b1c70


    Headers

    Imports

    Sections

  • CRU(Do me first)/restart64.exe
    .exe windows:5 windows x64 arch:x64

    2a69fe822ced9bf301916c1307e497a9


    Headers

    Imports

    Sections

  • Fixer(HWID reset fix)/FIXER(run as admin).exe
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • PlasmaTemp.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • msvcp140d.dll
    .dll windows:6 windows x64 arch:x64

    ad8ded5102aefb2aa1ef491db8fd987f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ucrtbased.dll
    .dll windows:10 windows x64 arch:x64

    b55fd631afff103d396e8e1df0093baa


    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1d.dll
    .dll windows:6 windows x64 arch:x64

    30c26d0c0b20ce0c9f73508ad9ade67f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140d.dll
    .dll windows:6 windows x64 arch:x64

    6d2ebbac26c86d9b55659b1fd91aaff8


    Code Sign

    Headers

    Imports

    Exports

    Sections