General

  • Target

    d875f351b15983c022d5d77f0e0e7b90N.exe

  • Size

    3.4MB

  • MD5

    d875f351b15983c022d5d77f0e0e7b90

  • SHA1

    887c8a026bf59141da95f5d907745a1b53aaf46f

  • SHA256

    07b7aad3a0000718cc08c88a90dcc5bf8add028ba0d50710a62f116ecaeffa59

  • SHA512

    cf7c689e3a79c705ec39f657078100963e31f05c11e479bb490f14048f7987e44e5aa828ad97e5aa84f326ed019a24ef01ed71d8676ba8fa6f8b69fb7e7e8753

  • SSDEEP

    98304:+IrwiY1USnZqSXGlsttPe2SGGxyizdAC1:hcznZqSWlsXPelxyiJ1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • d875f351b15983c022d5d77f0e0e7b90N.exe
    .exe windows:4 windows x86 arch:x86

    5a558123f19bf165866153ecd38a0280


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    b844086d4b3e59aa7b4439d88bcb40cb


    Headers

    Imports

    Exports

    Sections

  • Uninstall OpenConnect.exe
    .exe windows:4 windows x86 arch:x86

    5a558123f19bf165866153ecd38a0280


    Headers

    Imports

    Sections

  • iconv.dll
    .dll windows:4 windows x64 arch:x64

    19c58633d75f5d85da5a211f0377d9a0


    Headers

    Imports

    Exports

    Sections

  • libffi-8.dll
    .dll windows:4 windows x64 arch:x64

    6b539304435d48771cc36f5f9462fabf


    Headers

    Imports

    Exports

    Sections

  • libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    8142ee0f45e10ebbff675b18dc67c93c


    Headers

    Imports

    Exports

    Sections

  • libgmp-10.dll
    .dll windows:4 windows x64 arch:x64

    9125494d70920619fc0847f75cfc2f46


    Headers

    Imports

    Exports

    Sections

  • libgnutls-30.dll
    .dll windows:4 windows x64 arch:x64

    4be538eb8bc2644381d794e4bc7dffe7


    Headers

    Imports

    Exports

    Sections

  • libhogweed-6.dll
    .dll windows:4 windows x64 arch:x64

    718a4c81c626e271719563dae954b711


    Headers

    Imports

    Exports

    Sections

  • libintl-8.dll
    .dll windows:4 windows x64 arch:x64

    f6c58b9142683f3a630e47815d3fec53


    Headers

    Imports

    Exports

    Sections

  • liblz4.dll
    .dll windows:4 windows x64 arch:x64

    53f666d6ef307f589940f0cec5143769


    Headers

    Imports

    Exports

    Sections

  • libnettle-8.dll
    .dll windows:4 windows x64 arch:x64

    570b3139773c95c4b9d229f3ab71079a


    Headers

    Imports

    Exports

    Sections

  • libopenconnect-5.dll
    .dll windows:4 windows x64 arch:x64

    c2ae63444d01ec28f5ba3d8544c73329


    Headers

    Imports

    Exports

    Sections

  • libp11-kit-0.dll
    .dll windows:4 windows x64 arch:x64

    4396cf1f8a1616f794f3fbad9d6c8860


    Headers

    Imports

    Exports

    Sections

  • libstoken-1.dll
    .dll windows:4 windows x64 arch:x64

    e19a7f5b42ad26a814103cf573d106fd


    Headers

    Imports

    Exports

    Sections

  • libtasn1-6.dll
    .dll windows:4 windows x64 arch:x64

    43ba8a7189231afef30cf9e747350bf6


    Headers

    Imports

    Exports

    Sections

  • libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    fea7be972a0bb7dd20cc26160803dae6


    Headers

    Imports

    Exports

    Sections

  • libxml2-2.dll
    .dll windows:4 windows x64 arch:x64

    7cea9440b9d105c07755080a83dccd61


    Headers

    Imports

    Exports

    Sections

  • list-system-keys.exe
    .exe windows:4 windows x64 arch:x64

    c73776219d3ab3344a51b06fd4db3ec7


    Headers

    Imports

    Sections

  • openconnect.exe
    .exe windows:4 windows x64 arch:x64

    4f50506952b8654cd4ec6535a92415da


    Headers

    Imports

    Sections

  • vpnc-script-win.js
    .js
  • wintun.dll
    .dll windows:6 windows x64 arch:x64

    01ce5951b7d0dcca222159a28511a055


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x64 arch:x64

    ff939014e12aa34f771931244cf7b2b1


    Headers

    Imports

    Exports

    Sections