General

  • Target

    a6e96840029b64d72ddfd94ede969f521e1c05b91d5c23eee56b66afae6800c0

  • Size

    2.5MB

  • MD5

    9ba307c1c2098da12fb968a04b71dd5b

  • SHA1

    288b7dde05bfa47c007eb728bb2813e0306bc734

  • SHA256

    a6e96840029b64d72ddfd94ede969f521e1c05b91d5c23eee56b66afae6800c0

  • SHA512

    7885ad544e4a5d691700ccb63f366ae17cef1565c6185096eba9ef50d5e7bedef3e6957876c2be7e235b592ed7c04280883948e53059f787d47636a0e89d10f8

  • SSDEEP

    49152:PHg6ex2uF+sfC0sJfPT2Xs2WyexyCfXHHVz6UWimMVUiPCqsnaVnHB4lmtpQ3l5c:Pro2wfqNSoyc0G7r6XnaVn/tW5c

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • a6e96840029b64d72ddfd94ede969f521e1c05b91d5c23eee56b66afae6800c0
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    68b7023f8923dd087549802f8fa631c3


    Headers

    Imports

    Exports

    Sections

  • $_39_/Hquziqkko.ico
  • $_39_/PowerRun64.exe
    .exe windows:5 windows x64 arch:x64

    42b8d4fa3bc2c4336a20de1bdf1422d8


    Code Sign

    Headers

    Imports

    Sections

  • $_39_/SetACL64.exe
    .exe windows:6 windows x64 arch:x64

    d4f9425f57877ed12395f309e063b715


    Code Sign

    Headers

    Imports

    Sections

  • $_39_/bn.bat
  • $_39_/bn1.bat
    .bat .ps1
  • $_39_/bnn.bat
  • $_39_/bnz.bat
  • $_39_/dotNetFx40_Full_setup.exe
    .exe windows:5 windows x86 arch:x86

    02483cd76378259a50b7b66146b45f06


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_39_/dotNetFx45_Full_setup.exe
    .exe windows:5 windows x86 arch:x86

    5e3ce2eed99c49477aed11aea6091114


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_39_/tbjfarxhkycdu.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $_39_/tbjfarxhkycdu.exe.config
    .xml
  • $_39_/win_version_csharp.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections