Overview

overview

7

Static

static

7

CPUIDAPI.dll

windows7-x64

3

CPUIDAPI.dll

windows10-2004-x64

3

spdrwcli.exe

windows7-x64

3

spdrwcli.exe

windows10-2004-x64

3

spdrwcore.dll

windows7-x64

3

spdrwcore.dll

windows10-2004-x64

3

spdrwgui.exe

windows7-x64

3

spdrwgui.exe

windows10-2004-x64

3

tools/late...re.cmd

windows7-x64

3

tools/late...re.cmd

windows10-2004-x64

3

tools/remo...er.cmd

windows7-x64

3

tools/remo...er.cmd

windows10-2004-x64

3

tools/rest...gs.cmd

windows7-x64

3

tools/rest...gs.cmd

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    20231210.zip

  • Size

    421KB

  • MD5

    59e0f7fe0c64f28770fa712da4106294

  • SHA1

    f0889b9f04309f352eb18b127ab053927a087de1

  • SHA256

    e624039d41379571a00f17927bec0e61727785796be1bb8bbf663ddc8de06360

  • SHA512

    b6eecc692cc1234ee79b121089e33427717c507c02daa2f4bf2ef393ec97586e17ac5358e6b5216205799d7245acffd695d801e2ffc69ec615b92e49ad044ae4

  • SSDEEP

    12288:c+XxaPi6Itd7ThLL1fgbb9v7xfUGBkO19lVtExTfg0:c+XxaPij91fgH9v796O15Sxh

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 20231210.zip
    .zip
  • CPUIDAPI.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • spdrwcli.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • spdrwcore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • spdrwgui.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • tools/latest_arduino_firmware.cmd
  • tools/remove_driver.cmd
  • tools/restore_default_settings.cmd