Overview

overview

7

Static

static

3

bdf14962bd...0N.exe

windows7-x64

3

bdf14962bd...0N.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDIR/xml.dll

windows7-x64

3

$PLUGINSDIR/xml.dll

windows10-2004-x64

3

Program/BugReport.dll

windows7-x64

3

Program/BugReport.dll

windows10-2004-x64

3

Program/BugReport.exe

windows7-x64

3

Program/BugReport.exe

windows10-2004-x64

3

Program/Co...lv.exe

windows7-x64

1

Program/Co...lv.exe

windows10-2004-x64

3

Program/CoolDown.exe

windows7-x64

Program/CoolDown.exe

windows10-2004-x64

Program/atl71.dll

windows7-x64

3

Program/atl71.dll

windows10-2004-x64

3

RayDown.exe

windows7-x64

3

RayDown.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdf14962bd51971263c50718ff0d42d0N.exe

  • Size

    1.2MB

  • MD5

    bdf14962bd51971263c50718ff0d42d0

  • SHA1

    fc8698c45cd2d711b8786f938ffd7ba591641baa

  • SHA256

    2ac9d5307b28175f7c10d3b311cda813a02987c4fa253905c84b17b4bd002bad

  • SHA512

    128754893705c15ea35cfbcaf557794cd7fb2157d32b322216dda76d2d62f186c9f35ed21d1a14719aa590bf0ab6fb89fd62840a18826fb65cabf31ea30f1b91

  • SSDEEP

    24576:1A8UCw0lz3jguc+BWvzAg1zfSOhUMTh4KtOkU/guOQl7TKUcKFhNqNgHrJ:1MZY0OKI9I9Ql7EwOWd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • bdf14962bd51971263c50718ff0d42d0N.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/blowfish.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • Program/BugReport.dll
    .dll windows:4 windows x86 arch:x86

    5f6b2090be1c9106d8e83a62f2aa9396


    Headers

    Imports

    Exports

    Sections

  • Program/BugReport.exe
    .exe windows:5 windows x86 arch:x86

    f62928cec46742a36a3ea7a332a907d4


    Headers

    Imports

    Sections

  • Program/CombineFlv.exe
    .exe windows:4 windows x86 arch:x86

    e7952e17443709581dbddfecdd2166e0


    Headers

    Imports

    Sections

  • Program/CoolDown.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Program/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • Program/config.ini
  • RayDown.exe
    .exe windows:4 windows x86 arch:x86

    c2672e0a9c018d0160de23d96244befd


    Headers

    Imports

    Sections