Overview

overview

10

Static

static

3

fc708666be...fN.exe

windows7-x64

10

fc708666be...fN.exe

windows10-2004-x64

10

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/w7tbp.dll

windows7-x64

3

$PLUGINSDIR/w7tbp.dll

windows10-2004-x64

3

$PLUGINSDIR/xml.dll

windows7-x64

3

$PLUGINSDIR/xml.dll

windows10-2004-x64

3

$TEMP/Chro...za.exe

windows7-x64

3

$TEMP/Chro...za.exe

windows10-2004-x64

3

ChromePortable.exe

windows7-x64

3

ChromePortable.exe

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc708666be9cd952b23acaaa51c2ef9d920002d5b901d5213a430bc18db625bfN.exe

  • Size

    738KB

  • MD5

    d5ff520190936df131cbdf3640950d10

  • SHA1

    c4d020c45c708d6503bbeb6b723d94ef1801aa82

  • SHA256

    fc708666be9cd952b23acaaa51c2ef9d920002d5b901d5213a430bc18db625bf

  • SHA512

    ba243af338680c2628cfa37bbd70096c66bca29f6c5ea1feecb7c2b906eea65fc09e9c1fa029a1a92b373e36aba3f6219e99d2d8e84bb6bfeab5f7b8e294bba6

  • SSDEEP

    12288:liZ/jUFF5X8dNNKyVnE9OnFoCUBskBIA4YGiRatmAYzeFjBjvrEH7op:wZ/jU+LKcE9OF9NkBt1k7ceF5rEH7op

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • fc708666be9cd952b23acaaa51c2ef9d920002d5b901d5213a430bc18db625bfN.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Dialer.dll
    .dll windows:5 windows x86 arch:x86

    6504337db30ea93d33d7a714fefff047


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    3ed242cfa221f82a48383ccf2212450d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8e4c63f70f7cc6490634d743e795c93e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    a4f5c32542d68c1d7401338981f94111


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    aaa34d9251e34ceebd6bf5066471d799


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    8349690a00ef0e1a0e53b015791d4cf4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    15853d16b1b391dba821d9b99cd14939


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/w7tbp.dll
    .dll windows:4 windows x86 arch:x86

    fdb9d529772752ac356e92b3e3221b71


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/ChromePortableTemp/7za.exe
    .exe windows:4 windows x86 arch:x86

    abae283b9febd6b6c99aae6c6b3d9202


    Headers

    Imports

    Sections

  • App/DefaultData/Chrome/Default/Bookmarks
  • App/DefaultData/Chrome/Default/Preferences
  • ChromePortable.exe
    .exe windows:4 windows x86 arch:x86

    4f67aeda01a0484282e8c59006b0b352


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    2e363db44011ed76701ec6ce62db36f5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFirewall.dll
    .dll windows:4 windows x86 arch:x86

    1a4c99175e8891c64634680f4f238d51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • $PLUGINSDIR/textreplace.dll
    .dll windows:4 windows x86 arch:x86

    c9b875d3f7604775d782afcb308d92df


    Headers

    Imports

    Exports

    Sections

  • Other/Source/Chrome.ico
  • Other/Source/Default/Preferences
  • Other/Source/_ChromePortable.nsi
  • Other/Source/_ChromePortableInstaller.nsi
  • Other/_Include/7-Zip/7za.exe
    .exe windows:4 windows x86 arch:x86

    abae283b9febd6b6c99aae6c6b3d9202


    Headers

    Imports

    Sections

  • Other/_Include/Installer.bmp
  • Other/_Include/Installer.nsh
  • Other/_Include/Launcher.nsh
  • Other/_Include/Splash.bmp