Overview

overview

9

Static

static

7

Defender_Settings.vbs

windows7-x64

1

Defender_Settings.vbs

windows10-2004-x64

1

dControl.exe

windows7-x64

7

dControl.exe

windows10-2004-x64

7

Flexlm/RLM...er.exe

windows7-x64

9

Flexlm/RLM...er.exe

windows10-2004-x64

9

Flexlm/RLM...de.dll

windows7-x64

1

Flexlm/RLM...de.dll

windows10-2004-x64

1

Flexlm/RLM...ft.bat

windows7-x64

5

Flexlm/RLM...ft.bat

windows10-2004-x64

5

Flexlm/RLM...ft.bat

windows7-x64

8

Flexlm/RLM...ft.bat

windows10-2004-x64

8

block-network.bat

windows7-x64

1

block-network.bat

windows10-2004-x64

1

clean-befo...ll.bat

windows7-x64

8

clean-befo...ll.bat

windows10-2004-x64

8

exe/VC.dll

windows7-x64

1

exe/VC.dll

windows10-2004-x64

1

exe/VCRUNTIME140.dll

windows7-x64

9

exe/VCRUNTIME140.dll

windows10-2004-x64

9

exe/version.dll

windows7-x64

9

exe/version.dll

windows10-2004-x64

9

prs/version.dll

windows7-x64

9

prs/version.dll

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    crack.zip

  • Size

    22.9MB

  • MD5

    9ba83e0b8e55bf950de08bf9cfe0d2f2

  • SHA1

    a982b4dcc1a197aad9e81a22aa13212e18e9202b

  • SHA256

    15082d63b8d260ab182000b054b43679961bb1086ea8fdfdd53833e6148b3c55

  • SHA512

    9e37678ad1161709e0ad22d49a6f548579f87c6e83fb43aaa1c8e101f1c949a680a79261969658aa81d1a6ef2843d2a6df3f3aa16184d95e19853c4a716733e1

  • SSDEEP

    393216:uuBv7rsGjaaMNWdz1AXCLH2RB1R4spIYlWuijCpz/P0KLiGgsU:jBfZjzjdz1KCLHq1R4spdWYprpLiHZ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • crack.zip
    .zip
  • DefenderControl.zip
    .zip
  • Defender_Settings.vbs
    .vbs
  • dControl.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • dControl.ini
  • Flexlm/RLM_Redshift_LicServer/CGHotman_Redshift_Server.exe
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections

  • Flexlm/RLM_Redshift_LicServer/PatchCode.dll
    .dll windows:6 windows x64 arch:x64

    f0e2ad5f3002643b7206edaf50899032


    Headers

    Imports

    Exports

    Sections

  • Flexlm/RLM_Redshift_LicServer/Redshift_firewall.reg
  • Flexlm/RLM_Redshift_LicServer/start_rlm_Redshift.bat
    .bat .vbs
  • Flexlm/RLM_Redshift_LicServer/stop_rlm_Redshift.bat
    .bat .vbs
  • Register.reg
  • block-network.bat
  • clean-before-install.bat
  • exe/VC.dll
    .dll windows:6 windows x64 arch:x64

    f0e2ad5f3002643b7206edaf50899032


    Headers

    Imports

    Exports

    Sections

  • exe/VCRUNTIME140.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • exe/version.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • pdmr/client.lic
  • pdmr/maxon.lic
  • pdmr/redshift-core.lic
  • prs/version.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • readme-ENGLISH.txt
  • readme-RUSSIAN.txt