General

  • Target

    Installer-master-BlackMythWukong.rar

  • Size

    54.8MB

  • MD5

    ee0ca9deced958f712b37416ded0ec77

  • SHA1

    cc2f57bc78c61b50b76605975ffc2271fce60bf7

  • SHA256

    b28507f5d646bff668608fd5815137dc2317f2536bfd9dcbb4c412506b31856c

  • SHA512

    fbf9d3ff8d5754aafab9f19b2c44b6c60d1e1b80f0fbf5b8cd492a4f6d82f38be225ee4e1e3d46251d1349e9d5f1be66f8cf11b2e6c1d0b60390193e589431e9

  • SSDEEP

    786432:yK9FbHTJiZVCh7UZaMwuM1nfRZ+bs4ZuRJhHxgqCiIFGD0TvjihWrc2oVNVjZc51:pLd8ChPuqfjis4ZuRJhaqqBTIIR1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Installer-master-BlackMythWukong.rar
    .rar

    Password: 2121

  • Driver_x32.exe
    .exe windows:5 windows x86 arch:x86

    Password: 2121

    322007af740de7180c372869bc4e46e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Installer-master-BlackMythWukong.msi
    .msi
  • dll/Microsoft.Msmq.Activex.Interop.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2121

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dll/Windows.Media.Protection.PlayReady.dll
    .dll windows:10 windows x86 arch:x86

    Password: 2121

    3272cf4753562bdedf68f6b6df70aa27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/install_from_ida.py
  • dll/mispace.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    Password: 2121

    96cc7d69d4489565fff1a31584ba2774


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/mqcertui.dll
    .dll windows:10 windows x86 arch:x86

    Password: 2121

    7e2c8964de87ab813c601b588607ecc6


    Headers

    Imports

    Exports

    Sections

  • dll/mqoa.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    Password: 2121

    fe565bc43e01092ee087db21572e5104


    Headers

    Imports

    Exports

    Sections

  • dll/mqsnap.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    Password: 2121

    6a3cf26e6f7821c972ab1c02b9ecd997


    Headers

    Imports

    Exports

    Sections

  • dll/nshwfp.dll
    .dll windows:10 windows x86 arch:x86

    Password: 2121

    d66558feaf8c05a236d7bec5cbc74298


    Headers

    Imports

    Exports

    Sections

  • ipyida/.gitignore
  • ipyida/LICENSE
  • ipyida/README.adoc
  • ipyida/README.virtualenv.adoc
  • ipyida/__init__.py
  • ipyida/ida_plugin.py
  • ipyida/ida_qtconsole.py
  • ipyida/ipyida-screenshot.png
    .png
  • ipyida/ipyida_plugin_stub.py
  • ipyida/kernel.py
  • ipyida/notebook.py
  • ipyida/setup.py
    .py .sh linux
  • mispace.dll