General

  • Target

    Tournament_Fixer.rar

  • Size

    16.4MB

  • MD5

    846faf2371b3e40599af6f1b03b835c6

  • SHA1

    d86d6314348f4af979429c20fddc4ad02ab083af

  • SHA256

    4f227fbdd3f19966cabc85466c501239154de556fd683bc125665a05fa31491c

  • SHA512

    ddd2b328191ff6b83f5fa19de8b1f5a5f18c1e9ed72a2b843a10bc5c13e44bb7b233194ce177f482d27456bbdedfa6ecbf058cb099e876facb2d39a7903738f8

  • SSDEEP

    393216:b7D6CgsUJPebpgmATkcIXKH2oo9g8IOxxW3eSkQh7:OC4hTkcQKOFIUae4l

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 2 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • Unsigned PE 39 IoCs

    Checks for missing Authenticode signature.

Files

  • Tournament_Fixer.rar
    .rar
  • AdditionalRuntimes/DevManView.cfg
  • AdditionalRuntimes/DevManView.exe
    .exe windows:4 windows x64 arch:x64

    5baa6c7b9e24684d9b409007f190954e


    Code Sign

    Headers

    Imports

    Sections

  • AdditionalRuntimes/MCCSPal.dll
    .dll windows:10 windows x64 arch:x64

    f1b1d4a73f1bd33bc27848a2984031c0


    Headers

    Imports

    Sections

  • AdditionalRuntimes/MaintenanceUI.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    80827bb21ab283ce307f9d69535898d6


    Headers

    Imports

    Exports

    Sections

  • AdditionalRuntimes/ccl.dll
    .exe windows:4 windows x64 arch:x64

    f326f88ca83c9aacaa44acfb8884f1d4


    Headers

    Imports

    Sections

  • AdditionalRuntimes/cpuz.dll
    .exe windows:4 windows x64 arch:x64

    f326f88ca83c9aacaa44acfb8884f1d4


    Headers

    Imports

    Sections

  • AdditionalRuntimes/ddc.dll
    .exe windows:4 windows x64 arch:x64

    f326f88ca83c9aacaa44acfb8884f1d4


    Headers

    Imports

    Sections

  • AdditionalRuntimes/hssft.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/hwbd64.exe
    .exe windows:5 windows x64 arch:x64

    735aed1002ee8ff1be0e1dee668e8b0d


    Code Sign

    Headers

    Imports

    Sections

  • AdditionalRuntimes/hwinfo32.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/hwinfo64.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/jfg.dll
    .exe windows:6 windows x64 arch:x64

    f17493a532ed6da1a4dc66a8e599527c


    Headers

    Imports

    Sections

  • AdditionalRuntimes/jsg.dll
    .exe windows:6 windows x64 arch:x64

    f17493a532ed6da1a4dc66a8e599527c


    Headers

    Imports

    Sections

  • AdditionalRuntimes/jsr.dll
    .exe windows:6 windows x64 arch:x64

    7493c40f56321f1be0c86ed3bd0ed120


    Headers

    Imports

    Sections

  • AdditionalRuntimes/kwg.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/lsm.dll
    .dll windows:10 windows x64 arch:x64

    9a355903c2fb39dd048a3d53463ee305


    Headers

    Imports

    Exports

    Sections

  • AdditionalRuntimes/lsmproxy.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    9a1a21514db4b6a0e66741e25921c83d


    Headers

    Imports

    Exports

    Sections

  • AdditionalRuntimes/lstelemetry.dll
    .dll windows:10 windows x64 arch:x64

    a39c8b758adfe527d7b5a6c376c9140b


    Headers

    Imports

    Exports

    Sections

  • AdditionalRuntimes/luainstall.dll
    .dll windows:10 windows x64 arch:x64

    83e1cc7b5d3ad3cf0954e1939ad4c0e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AdditionalRuntimes/luiapi.dll
    .dll windows:10 windows x64 arch:x64

    84a2e07c0bcaf25fa1653106dd9545b5


    Headers

    Imports

    Exports

    Sections

  • AdditionalRuntimes/lz32.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Exports

    Sections

  • AdditionalRuntimes/mcicda.dll
    .dll windows:10 windows x64 arch:x64

    0d89d9da8396d1a5914feeb96c39a152


    Headers

    Imports

    Exports

    Sections

  • AdditionalRuntimes/mciwave.dll
    .dll windows:10 windows x64 arch:x64

    15e9d4e4361a2382061f2630c12285cb


    Headers

    Imports

    Exports

    Sections

  • AdditionalRuntimes/mfc70.dll
    .dll windows:4 windows x86 arch:x86

    9321f3638afaacbe90a60259c0b9564d


    Headers

    Imports

    Sections

  • AdditionalRuntimes/nvrl.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/nvrl64.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/tcs.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/tcs64.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/tm.dll
    .exe windows:4 windows x64 arch:x64

    f326f88ca83c9aacaa44acfb8884f1d4


    Headers

    Imports

    Sections

  • AdditionalRuntimes/wmc.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • AdditionalRuntimes/wsflib.dll
    .exe windows:4 windows x86 arch:x86

    2c5f2513605e48f2d8ea5440a870cb9e


    Headers

    Imports

    Sections

  • CupFixer.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • Kernelmode/CupFixerx32.EXE
    .exe windows:6 windows x64 arch:x64

    a411d6c4955ed012fe763a4108288ce7


    Headers

    Imports

    Sections

  • Kernelmode/CupFixerx64.exe
    .exe windows:5 windows x64 arch:x64

    5d7543265f1d05f9bd6a417f4988fb48


    Headers

    Imports

    Sections

  • Kernelmode/CupFixerx64.sys
    .sys windows:10 windows x64 arch:x64

    f9141c3df8f7ec7b3f2d46265a3b5528


    Code Sign

    Headers

    Imports

    Sections

  • Kernelmode/gsoftgmx64.sys
    .sys windows:6 windows x64 arch:x64

    b05ee5c816a30bc52378c759486af0b9


    Code Sign

    Headers

    Imports

    Sections

  • Libraries/MCCSPal.dll
    .dll windows:10 windows x64 arch:x64

    f1b1d4a73f1bd33bc27848a2984031c0


    Headers

    Imports

    Sections

  • Libraries/MCRecvSrc.dll
    .dll windows:10 windows x64 arch:x64

    c68229fa7cee41e4e3a038d1091a0717


    Headers

    Imports

    Exports

    Sections

  • Libraries/McpManagementProxy.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5205866b226d328a00560258b15ca67f


    Headers

    Imports

    Exports

    Sections

  • Libraries/McpManagementService.dll
    .dll windows:10 windows x64 arch:x64

    db4cad22556660bbc1d441c4e3729204


    Headers

    Imports

    Exports

    Sections

  • Libraries/mci32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ebe52399f0abdf7ae1e8463db2b837d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Libraries/mciavi32.dll
    .dll windows:10 windows x64 arch:x64

    64ac7fcfa1bf5a3af1997b9aef6cbfc9


    Headers

    Imports

    Exports

    Sections

  • Libraries/mcicda.dll
    .dll windows:10 windows x64 arch:x64

    0d89d9da8396d1a5914feeb96c39a152


    Headers

    Imports

    Exports

    Sections

  • Libraries/mciqtz32.dll
    .dll windows:10 windows x64 arch:x64

    aa49ffaf18d1603d93ade801f235c7b5


    Headers

    Imports

    Exports

    Sections

  • Libraries/mciseq.dll
    .dll windows:10 windows x64 arch:x64

    3d070c72b47e27e56cd2e801654f9392


    Headers

    Imports

    Exports

    Sections

  • Libraries/mciwave.dll
    .dll windows:10 windows x64 arch:x64

    15e9d4e4361a2382061f2630c12285cb


    Headers

    Imports

    Exports

    Sections