Resubmissions

08-11-2024 01:13

241108-blevks1lgs 10

08-11-2024 00:57

241108-ba4dsstqfn 10

07-11-2024 19:15

241107-xypq7sznbk 7

General

  • Target

    infected.zip

  • Size

    31.2MB

  • MD5

    f3086b596f50e215a706559d5ec8cbc8

  • SHA1

    afa5c27fbc93d1398d00324de3ac467ae377bc6e

  • SHA256

    5f73dab125efbe100426f39621d5fdedb343a1d912f88ed322ed04a66daab473

  • SHA512

    d5141566392f7089da4db9940d0ec86d236dfb68dbf05f9377797df0d9ae2b447cffe75fe0d32be402e6f3af57aff677e9ae604a63b839afd62f362a9c687016

  • SSDEEP

    786432:qHjbJsO6eSFdZUDAea6ebsP+DPdIfpCdFD5ojjBW7PQbB:GjCRVFrDeqbsPCdIfpCnDWMbQF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • infected.zip
    .zip
  • infected/QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    94edee571d3a6c3103264e81c1452c8a


    Headers

    Imports

    Exports

    Sections

  • infected/QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    665a7203ee328c8774e946b947bd499e


    Headers

    Imports

    Exports

    Sections

  • infected/QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    51d391f74bdd44264db9d63f1a545d8d


    Headers

    Imports

    Exports

    Sections

  • infected/QtWebKit4.dll
    .dll windows:5 windows x86 arch:x86

    b55a1f6c1c8beacf6b60a4dc7ffd6a2f


    Headers

    Imports

    Exports

    Sections

  • infected/Setup.exe
    .exe windows:5 windows x86 arch:x86

    7b0d18726a59afb1c9222b57066a4db2


    Code Sign

    Headers

    Imports

    Sections

  • infected/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • infected/dsngvls
  • infected/ks_tyres.ini
  • infected/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • infected/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • infected/nvdisps.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    dfbc2610ae891add5adee324a4d9ad92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • infected/nvdispsr.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • infected/nvptxJitCompiler32.dll
    .dll windows:6 windows x86 arch:x86

    a21080ac288fcf24521518c1d5302242


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • infected/pgjs
  • infected/trading_api64.dll
    .dll windows:5 windows x64 arch:x64

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • infected/tradingnetworkingsockets.dll
    .dll windows:6 windows x64 arch:x64

    e917d42bcc53c047e3b944d762080d33


    Code Sign

    Headers

    Imports

    Exports

    Sections