General

  • Target

    ezacid.zip

  • Size

    15.8MB

  • MD5

    1ffcb8c7cbe7e1aea3efd695148c7546

  • SHA1

    583f755c37a4dbce8babada2c695c0ea3f9bac60

  • SHA256

    8b57e13f7301f697a5cc68efcecd816be9bd787f3861813530085c701bf25bc5

  • SHA512

    459d78632edd8128e1cbd065bc6446c930f72a69f13ba3cb19f4ce10728537733edd890c175025706821647450cc66913ac64dd58d65faaa4c481d9368cd6b22

  • SSDEEP

    393216:5TseZ75hOIOG0kvhB4qUy7laIu2SfiJJ9sqx090n67i:5AeZHhO24qhFv09Z7i

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • ezacid.zip
    .zip

    Password: acid1

  • ezacid88/bin/1ciaq/geoip.dat
  • ezacid88/bin/1ciaq/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: acid1

    df1ed3ada0a928f700ff7d951cae6b48


    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/1ciaq/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    Password: acid1

    acedae60834903d93be16474c3956450


    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/1ciaq/qtuiotouchplugin.dll
    .dll windows:6 windows x64 arch:x64

    Password: acid1

    4ed2c6808db7cec206f9eacc57044d4e


    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/1ciaq/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    Password: acid1

    b5427a671f558e76a138c84df8c5c4cf


    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/PaintDotNet.Strings.3.resx
  • ezacid88/bin/Qt5WinExtras.dll
    .dll windows:6 windows x64 arch:x64

    Password: acid1

    305a2818bcbbe98ea06ae2866db77790


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/Qt5Xml.dll
    .dll windows:6 windows x64 arch:x64

    Password: acid1

    24d9a9d9da6c15ddc1476bd55d0caeea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/cjoaq/geosite.dat
  • ezacid88/bin/cjoaq/geosite.db
  • ezacid88/bin/cjoaq/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: acid1

    df1ed3ada0a928f700ff7d951cae6b48


    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/cjoaq/qcertonlybackend.dll
    .dll windows:6 windows x64 arch:x64

    Password: acid1

    2abb5dc1169164e6b85fc54dbe001207


    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/cjoaq/qopensslbackend.dll
    .dll windows:6 windows x64 arch:x64

    a75634585888e5c62549f21d93efebe4


    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/cjoaq/qschannelbackend.dll
    .dll windows:6 windows x64 arch:x64

    a67823b9bd3b16d30fe357e339a2935f


    Headers

    Imports

    Exports

    Sections

  • ezacid88/bin/cjoaq/qtuiotouchplugin.dll
    .dll windows:6 windows x64 arch:x64

    4ed2c6808db7cec206f9eacc57044d4e


    Headers

    Imports

    Exports

    Sections

  • ezacid88/source/AvifNative_x64.dll
    .dll windows:6 windows x64 arch:x64

    1364952e1f3fdfd91bb75e96d6d3577e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezacid88/source/MagixOFA_u_x64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    2e9434d749dc79b845d0e966d5f00af2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezacid88/source/RvROLClient.dll
    .dll windows:6 windows x86 arch:x86

    ddabd4310c1433b794008609f3cc7062


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezacid88/source/RvUESClient.dll
    .dll windows:6 windows x86 arch:x86

    4cd40cfcd2567b094298dea0b4fb9699


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezacid88/source/shelper.dll
    .dll windows:5 windows x86 arch:x86

    1ccb58c346cfdbea2a72089746034496


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezacid88/source/ucrtbase.dll
    .dll windows:10 windows x86 arch:x86

    71f1d8a10f840ffee6964317e974d463


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ezacid88/vlid_acid.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections