Overview

overview

6

Static

static

3

2870A3/5CBF94.exe

windows7-x64

6

2870A3/5CBF94.exe

windows10-2004-x64

6

2870A3/RegEx.dll

windows7-x64

3

2870A3/RegEx.dll

windows10-2004-x64

3

2870A3/cnvpe.dll

windows7-x64

3

2870A3/cnvpe.dll

windows10-2004-x64

3

2870A3/com.dll

windows7-x64

3

2870A3/com.dll

windows10-2004-x64

3

2870A3/dp1.dll

windows7-x64

3

2870A3/dp1.dll

windows10-2004-x64

3

2870A3/eAPI.dll

windows7-x64

3

2870A3/eAPI.dll

windows10-2004-x64

3

2870A3/internet.dll

windows7-x64

3

2870A3/internet.dll

windows10-2004-x64

3

2870A3/krnln.dll

windows7-x64

3

2870A3/krnln.dll

windows10-2004-x64

3

2870A3/shell.dll

windows7-x64

3

2870A3/shell.dll

windows10-2004-x64

3

2870A3/spec.dll

windows7-x64

3

2870A3/spec.dll

windows10-2004-x64

3

2870A3/spec_a.dll

windows7-x64

3

2870A3/spec_a.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa7edc36b1619a7cb14e25fbdea73773bb946d6e6947c8100792ffc364186582

  • Size

    2.6MB

  • MD5

    cbfa61afa64dca33b8622ed3d12ca08c

  • SHA1

    608b70d37bd3f855234dc903f00ea8de387ac795

  • SHA256

    fa7edc36b1619a7cb14e25fbdea73773bb946d6e6947c8100792ffc364186582

  • SHA512

    1c800fb7309a40efe58fa618e0ca0e26bc09871dc894400fed72b75d1f1259e3c63f0fa1a26098384f4190be7226d7bf867dba3a5521c0ecdd7a793570312584

  • SSDEEP

    49152:u3sLrp3suPjjzr/+SgqVVUg4clbKb624mDYDhF/InQdAY:u3vUjjzD+0vlbK74TDhtTl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • fa7edc36b1619a7cb14e25fbdea73773bb946d6e6947c8100792ffc364186582
    .zip
  • 2870A3/5CBF94.EXE
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 2870A3/RegEx.fnr
    .dll windows:4 windows x86 arch:x86

    17065b5c253ba1d2ebb061964e090d5e


    Headers

    Imports

    Exports

    Sections

  • 2870A3/cnvpe.fne
    .dll windows:4 windows x86 arch:x86

    9b2bc32e675d36475a73fd031c085ac1


    Headers

    Imports

    Sections

  • 2870A3/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • 2870A3/dp1.fne
    .dll windows:4 windows x86 arch:x86

    add5dd1fa4b0387f15fda385fe0b8dbe


    Headers

    Imports

    Sections

  • 2870A3/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    9bcf2443ae6efbd86360342fa5ba0d59


    Headers

    Imports

    Sections

  • 2870A3/internet.fne
    .dll windows:4 windows x86 arch:x86

    9819f81ea273ed3793bc6b3b8db90553


    Headers

    Imports

    Exports

    Sections

  • 2870A3/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    8c3f4e70b20ae334f3d2ac5a21c94f0b


    Headers

    Imports

    Sections

  • 2870A3/shell.fne
    .dll windows:4 windows x86 arch:x86

    7bfe20f314273547fb9502c64706871e


    Headers

    Imports

    Sections

  • 2870A3/spec.fne
    .dll windows:4 windows x86 arch:x86

    0b8b5f9848c670c631fa790d1a1a90e5


    Headers

    Imports

    Exports

    Sections

  • 2870A3/spec_a.fne
    .dll windows:4 windows x86 arch:x86

    0b8b5f9848c670c631fa790d1a1a90e5


    Headers

    Imports

    Sections

  • A2899B/a39a.EDT
  • A2899B/a39a.inf
  • A2899B/e628.inf
  • A5CBF9/BF94EE8E.TXT