General

  • Target

    mega.zip

  • Size

    8.8MB

  • MD5

    f03a3b8258491d88421bee58f106779b

  • SHA1

    f7a2b3bae96aa46fb7c457425bf426307148d33f

  • SHA256

    af04f7d4f6615a16469dc56c2f7d1b0419048630de148b9d1c2f6c12bb1abd66

  • SHA512

    71cd35d268213f2117e6f139609d205c5a4120a96afdb9959c170a0b48b871322cbae776b26ad7ea19a791bcb6dd5e1bdd04733e5789d50115b397e8de72b92e

  • SSDEEP

    196608:cXDC3Xw658DDKlFQ6ntedj+/TuqlMtzI8KdKHCwZDHZZRj:cm0DkQ6nMELuqytz8dC3/j

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • mega.zip
    .zip
  • 0Devicemeister.exe
    .exe windows:6 windows x86 arch:x86

    1aae8bf580c846f39c71c05898e57e88


    Headers

    Imports

    Sections

  • AppointmentApis.dll
    .dll windows:10 windows x64 arch:x64

    37ea5bc26bf34b464718f6cebb2849d2


    Headers

    Imports

    Exports

    Sections

  • Microsoft.PowerShell.Commands.Utility.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • WINSSNAP.DLL
    .dll windows:10 windows x64 arch:x64

    1b05a286c255eb22d1143fa1c05b9d98


    Headers

    Imports

    Exports

    Sections

  • WMADMOD.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    3843935862382fc6903ebaa7c00bd5cd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WMADMOE.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    a87320ede89e3eba1b5aafaa24fb3c60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WSDApi.dll
    .dll windows:10 windows x64 arch:x64

    41cb8788b6b067087aa4e1fb215e80e8


    Headers

    Imports

    Exports

    Sections

  • appraiser.dll
    .dll windows:10 windows x64 arch:x64

    8f6d243eac64aa44dba47e2009e0033a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wlanpref.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    080890b09d1fb2411ed096cb5140b1b8


    Headers

    Imports

    Exports

    Sections

  • wlidcli.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    9fedd0e4c01324ab04eb22ff6f7cb491


    Headers

    Imports

    Exports

    Sections

  • wxmsw32u_xrc_gcc_custom.dll
    .dll windows:4 windows x64 arch:x64

    61f52898006c9551a4c4108c1f7e8236


    Code Sign

    Headers

    Imports

    Exports

    Sections