General

  • Target

    5x.7z

  • Size

    13.0MB

  • MD5

    54cbc3ad22e197cc9c56b6726014fe71

  • SHA1

    d71970525722ea619833ccb1924b816307540910

  • SHA256

    f07ce85bd9b3c10c104cce02f671e5ed8791ad5a356c5aff0bcf566818579877

  • SHA512

    73a850f006bc56e35130b536f775fb7bbe59a1422b409f89901058455d2f0c4968f6d43b61c99e1454bcf3651d3fc1fc5bc2eb3111c9191428cce8e3ebb558e2

  • SSDEEP

    196608:1T8mvTbXrQhfdTnxZAA9O7h4fdeIi4Sb/PGZZZugiTwsKMulbK136/+i0IRVT3aJ:1TnbbeeUhZYNTwJc36/PRtayc3Oq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 5x.7z
    .7z
  • 2Q5G0@16/PX.txt
  • 2Q5G0@16/QQSetupEx.exe
    .exe windows:5 windows x86 arch:x86

    ad7ff6f16b89bba47bed0bcd585e5ccd


    Code Sign

    Headers

    Imports

    Sections

  • 2Q5G0@16/arkHttpClient.dll
    .dll windows:5 windows x86 arch:x86

    1bf6fc251fd21646809a294118ac1738


    Headers

    Imports

    Exports

    Sections

  • 2Q5G0@16/b
  • 2Q5G0@16/v
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 9Lb6~w1/1905Client.exe
    .exe windows:5 windows x86 arch:x86

    30d14f44e323f0c93100e0187a88fed5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 9Lb6~w1/DuiLib_u.dll
    .dll windows:5 windows x86 arch:x86

    dc9062b88f92360312da35947010cd90


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 9Lb6~w1/HttpLoad.dll
    .dll windows:4 windows x86 arch:x86

    c27d87dd4e69ef61b23da979e1cb6b07


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 9Lb6~w1/NH.txt
  • 9Lb6~w1/WasabiDLL.dll
    .dll windows:5 windows x86 arch:x86

    379689ad7211406010f964de12d9690d


    Headers

    Imports

    Exports

    Sections

  • 9Lb6~w1/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 9Lb6~w1/p
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 9Lb6~w1/sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    5efddbd1b1a1ac9465cf6ec63a39e0b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 9Lb6~w1/w
  • Hvd6d~18/SK.txt
  • Hvd6d~18/SkinSharp.dll
    .dll windows:5 windows x86 arch:x86

    17d9e2b6dda8429eead4e0852a386dba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hvd6d~18/TSLib.dll
    .dll windows:5 windows x86 arch:x86

    834a157bba14539161205d2063b8a86e


    Headers

    Imports

    Exports

    Sections

  • Hvd6d~18/UICore.dll
    .dll windows:5 windows x86 arch:x86

    1b30e5a7bdc620f7d8ed30dc092ea121


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hvd6d~18/VMCore.dll
    .dll windows:5 windows x86 arch:x86

    2dd2239d555b5ced0a4b30a91311a4de


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hvd6d~18/ZLib.dll
    .dll windows:5 windows x86 arch:x86

    eef8d41bf3054eed911375924cf725ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hvd6d~18/a
  • Hvd6d~18/iToolsAVMTask.exe
    .exe windows:5 windows x86 arch:x86

    40552df8efd5d585cea4d772d8ea4f0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hvd6d~18/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hvd6d~18/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Hvd6d~18/s
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • VSQ0e@6/PX.txt
  • VSQ0e@6/apache.exe
    .exe windows:4 windows x86 arch:x86

    575f62cf02af533e399b1950a7daed62


    Headers

    Imports

    Sections

  • VSQ0e@6/b
  • VSQ0e@6/libapr-1.dll
    .dll windows:4 windows x86 arch:x86

    6275aba34743d1fc38bca7f56cbb7e5b


    Headers

    Imports

    Exports

    Sections

  • VSQ0e@6/libapriconv-1.dll
    .dll windows:4 windows x86 arch:x86

    8480c7a521e05e33d28841c9d6bf81d9


    Headers

    Imports

    Exports

    Sections

  • VSQ0e@6/libaprutil-1.dll
    .dll windows:4 windows x86 arch:x86

    4b3983ae025ed1609dfa9e8299c41d85


    Headers

    Imports

    Exports

    Sections

  • VSQ0e@6/libhttpd.dll
    .dll windows:5 windows x86 arch:x86

    1bf6fc251fd21646809a294118ac1738


    Headers

    Imports

    Exports

    Sections

  • VSQ0e@6/mfc100u.dll
    .dll windows:5 windows x86 arch:x86

    6ecbd31f78660e8af99e665d8a5ae336


    Code Sign

    Headers

    Imports

    Sections

  • VSQ0e@6/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VSQ0e@6/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VSQ0e@6/v
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • xkxkv/CKeyboardH.dll
    .dll windows:5 windows x86 arch:x86

    7f0ef290eb61eaaf6e8c0a61812501fc


    Headers

    Imports

    Exports

    Sections

  • xkxkv/dms.exe
    .exe windows:4 windows x86 arch:x86

    e63ccae6fa78202321de4a498df88f74


    Code Sign

    Headers

    Imports

    Sections

  • xkxkv/dms.h5av
  • xkxkv/dms.txt