General

  • Target

    yyy.zip

  • Size

    2.6MB

  • MD5

    2c83c4570b4773898a574e4143d11241

  • SHA1

    cd8632e7edace07cddab7d0b2babecf12e58a102

  • SHA256

    e0ff12dd4dbad622cf4596ef3c00296e99d47aa8e038d32209323887fba730da

  • SHA512

    75ddf226a14515d61a66e9c6c5e5535b0ea6f5c7510d5f8140b7df7dab5befa2ce2aab240bc6e3663189df8d22d860590950a4e39c1d2069294c0b15ea695bf7

  • SSDEEP

    49152:ZZQdM9sL3HYZucbQlRsXwlKsaFnTT7Ejujwk/wGZ1f0ZjkJGwuPVuJREAED4T42u:TQdMeoocbQQXwlSTQju0k/wGvYk8wrRW

Score
1/10

Malware Config

Signatures

Files

  • yyy.zip
    .zip
  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • install_state.json
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • temp/ie_to_edge_bho.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    aa08982f83cf3d61a068e4c61a6a8838


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • temp/ie_to_edge_bho_64.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    9c78e3cb5f4ddff53fb920472b09a133


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • temp/msedge.VisualElementsManifest.xml
  • temp/quit_2.ico