General

  • Target

    d674f6949be9220dcbb02f745adde8c2f83e7fa3e7ed94fe96aeda10030634f3

  • Size

    2.8MB

  • MD5

    b9250b85e14e3a91db8a98378b4e69b7

  • SHA1

    a92b46e83657581f4b82ba3cd9cf6a5d7aa80920

  • SHA256

    d674f6949be9220dcbb02f745adde8c2f83e7fa3e7ed94fe96aeda10030634f3

  • SHA512

    2d1e4afaad7c56631a47483ca3dff22b8b94cf8453d3f274c5e21d4793e66c08f3833d7264621476314805755e79979b0803e42e9e5be4fc93e3771eabb81121

  • SSDEEP

    49152:3FAwTBs9+95FHRqBtz6EYdROalg7Zy+qDE5PbqVrowLMmotMd1aqlC3ca:nxvO77ZyJD8PbMrowYmotM3C

Score
1/10

Malware Config

Signatures

Files

  • d674f6949be9220dcbb02f745adde8c2f83e7fa3e7ed94fe96aeda10030634f3
    .zip

    Password: infected

  • 96bfd1af7fb8710b125a4cc33eb6e3c2e538fb002de3c854d1a1370605183264.zip
    .zip
  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LogoDev.png
    .png
  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup_files/en-GB.pak
  • Setup_files/en-US.pak
  • Setup_files/es-419.pak
  • Setup_files/es.pak
  • Setup_files/stable.identity_helper.exe.manifest
    .xml
  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • delegatedWebFeatures.sccd
    .xml
  • install_state.json
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • package_metadata
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections