General

  • Target

    setup.exe

  • Size

    11.7MB

  • MD5

    1287223e90507c1ac0bc0b60f1b039e9

  • SHA1

    7853f575349907eabb0dcd190fe746eb1c1c8d01

  • SHA256

    b13ade9fa58f96d8f03e4e241455c1af226d6b654e2ad48a8ae7d3a61f7ad64d

  • SHA512

    b90117cee136da27aefe612c73284a9977fe836ac364afc68d7bb78ca6828efd21b60b2c9ba866a6bcf0479db1c64eef6fe06b4ca0ccb0f2d8a3e3b333361d2e

  • SSDEEP

    196608:uRRS34smUEH4IXhxpMzHQCMFGfDQ5jSajl3clBg3j/cWnoCfrR1:uq/fRI9MzaGf0nl3cli3J/

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela family
  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 8 IoCs

Files

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
    .dll windows:4 windows x86 arch:x86

    8a595235c826f2ae0f0362f688723bd0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/dat_bgm.ogg
  • $PLUGINSDIR/dat_skin.skf
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/shareddlls_install.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    ed83f419402bc3b83a08e3aaf8b5b5b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ILInstallUtil.dll
    .dll windows:4 windows x86 arch:x86

    a6959eb69f73b43021eaad8f794a22a5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioA.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Elastique.dll
    .dll windows:4 windows x86 arch:x86

    91ae1ec78af40e0a0ed6e4479e4daea6


    Headers

    Imports

    Exports

    Sections

  • LAMEenc.dll
    .dll windows:4 windows x86 arch:x86

    960669d9280ac2c4fe5b4f3cf1dbae70


    Headers

    Imports

    Exports

    Sections

  • REX Shared Library.dll
    .dll windows:4 windows x86 arch:x86

    770e0fa719194a93077ef969cd4a4e83


    Headers

    Imports

    Exports

    Sections

  • Reverb.dll
    .dll windows:4 windows x86 arch:x86

    bd65ec4c173739c6ea5c9bffb160ec15


    Headers

    Imports

    Exports

    Sections

  • SG.dll
    .dll windows:4 windows x86 arch:x86

    c5e8cff5b1fcfd18f631c1c27d2dbd5e


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ILUninstall.dll
    .dll windows:4 windows x86 arch:x86

    d7908ee00d4ee887b3dac488dd2aa8fa


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • uninstall.fud
  • dsp_ipp.dll
    .dll windows:4 windows x86 arch:x86

    7b5125d2f80f5f7947131a80c664fc60


    Headers

    Imports

    Exports

    Sections

  • oggio.dll
    .dll windows:4 windows x86 arch:x86

    984ae25a8963daafaa1da959beef6abc


    Headers

    Imports

    Exports

    Sections

  • wavpackdll.dll
    .dll windows:4 windows x86 arch:x86

    f59ee14e51b58c2a878c5ff5cc02ded1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • Artwork/About.png
    .png
  • Artwork/Back.bmp
  • Artwork/Demo.bmp
  • Artwork/TB Btn.bmp
  • Artwork/TB PrevNextBtn.bmp
  • Artwork/TB Small.bmp
  • Artwork/TB WP.bmp
  • Artwork/skin.ini
  • Data/Maps/Default.fnv
  • Data/Maps/Env filter - asymmetry.fnv
  • Data/Maps/Env filter - default.fnv
  • Data/Maps/Env filter - flat.fnv
  • Data/Maps/Env filter - small knee.fnv
  • Gross Beat.chm
    .chm
  • Gross Beat.chw
  • IL Gross Beat.dll
    .dll windows:4 windows x86 arch:x86

    29f9b0bb42684460fbf24e776473eb09


    Headers

    Imports

    Exports

    Sections

  • Presets/Default.fst
  • Presets/Flanging.fst
  • Presets/Momentary.fst
  • Presets/Patterns.fst
  • Presets/Pitch shifter.fst
  • Presets/Stutter.fst
  • Presets/Turntablist.fst
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections