General

  • Target

    b59e172cda955322b0cbdc152f723b82eef222014a631dc3b1d8fe4144480374.zip

  • Size

    52.5MB

  • MD5

    189a27978d0fafb0b2de6a4c792318d3

  • SHA1

    e1bd2facb0a52b98ea199415665eebec15f053fb

  • SHA256

    b59e172cda955322b0cbdc152f723b82eef222014a631dc3b1d8fe4144480374

  • SHA512

    7cf79020ce4fd445f78febe015503da5769fad122ed809ebbd5b606b3634b63fbf6f7173ab86b4eb8d284da87a2707f4ee06b3173efea1102a0727ef19b8a025

  • SSDEEP

    1572864:9p+AkxOx6mkMspNbawUPlE6p7NqR2nWXHxMsjoQD:x+M6mk5pshPlE6p7NqR2nYMsjf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • b59e172cda955322b0cbdc152f723b82eef222014a631dc3b1d8fe4144480374.zip
    .zip
  • Repository/dnsclientcim.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    cfca51f8bf1bf8f90661aaeef676fdc5


    Headers

    Imports

    Exports

    Sections

  • Repository/dnsclientpsprovider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    47a7811f3d8736ad100cd1666b45c8f8


    Headers

    Imports

    Exports

    Sections

  • Repository/dsprov.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    f512e8a06eebaee00a6ec0e81b77e259


    Headers

    Imports

    Exports

    Sections

  • SR/spsreng.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    85ca5e894a94fccd6b54c5abed4ff89f


    Headers

    Imports

    Exports

    Sections

  • SR/spsrx.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    623052070b7eb1d9cebfa38f9eb93fca


    Headers

    Imports

    Exports

    Sections

  • SR/srloc.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    d83c436f2c45db50cdd9841f0ed5cf06


    Headers

    Imports

    Exports

    Sections

  • SpeechUX/SpeechUXPS.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    8829fd2a260d90741120b084abeb8d0b


    Headers

    Imports

    Exports

    Sections

  • SpeechUX/sapi.cpl
    .dll regsvr32 windows:10 windows x64 arch:x64

    02aeb6e42acafca4d9e23e7cc11e41ec


    Headers

    Imports

    Exports

    Sections

  • SpeechUX/speechuxcpl.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    9602aa96e1595eb184b0fde3b2bd3ceb


    Headers

    Imports

    Exports

    Sections

  • TTS/MSTTSEngine.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    59c93fe60a75ce27609b1934013528d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TTS/MSTTSLoc.dll
    .dll windows:10 windows x64 arch:x64

    936851e62dbbc290e5656d1905192998


    Headers

    Imports

    Exports

    Sections

  • UMDF/EhStorPwdDrv.dll
    .dll windows:10 windows x64 arch:x64

    534a0927defe4d5bb14c2ca60ad1d5ed


    Headers

    Imports

    Exports

    Sections

  • UMDF/HidTelephony.dll
    .dll windows:10 windows x64 arch:x64

    7143fc73024f2f4e0fdd7e4df5c226e8


    Headers

    Imports

    Exports

    Sections

  • UMDF/IddCx.dll
    .dll windows:10 windows x64 arch:x64

    0bd8e168fad73542a802ed0ffedd1cce


    Headers

    Imports

    Exports

    Sections

  • UMDF/Microsoft.Bluetooth.Profiles.HidOverGatt.dll
    .dll windows:10 windows x64 arch:x64

    abbac69270f8a5d2e4dfeb1d2908df5e


    Headers

    Imports

    Exports

    Sections

  • UMDF/NfcCx.dll
    .dll windows:10 windows x64 arch:x64

    ff52f8de87fa8680782f83a0278acd52


    Headers

    Imports

    Exports

    Sections

  • app__v6.15.9_.msi
    .msi