General

  • Target

    OneclickTools.zip

  • Size

    1.7MB

  • MD5

    517b76cba1c1b12ec146a60a2745b28e

  • SHA1

    0a867eac3a9fe1cba33542fd1184fc08ac8ca609

  • SHA256

    c0f0d33d18d79c58d0956a5057ec26407d50bebb8960514ceb88d7fb7fb2502b

  • SHA512

    be3215579c6330225640bbae1fa1569f836ba04aad9f4e85b7449de01b076940a9a45abd14b2783a143b51d393f52784894a7fae4a9d527431f804e15635bcb6

  • SSDEEP

    24576:p3NRKVkMUTHu7paGx4lXVd425Tx8Btq3/r/TGLcgdcJDmHRqYq+qNJyRFc+3Ig:zR7MqlVdLTGLkjKYQKDAA+qjyRFcfg

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • OneclickTools.zip
    .zip
  • OneclickTools/Amd/1- What's AMD.txt
  • OneclickTools/Amd/AMD.bat
  • OneclickTools/DPC Checker/1- What's dpclat.txt
  • OneclickTools/DPC Checker/dpclat.exe
    .exe windows:4 windows x86 arch:x86

    6109c06809e7a16475b9b07ee9115652


    Code Sign

    Headers

    Imports

    Sections

  • OneclickTools/Dcontrol/1- What's dControl.txt
  • OneclickTools/Dcontrol/dControl.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • OneclickTools/NSudo/1- What's NSudo.txt
  • OneclickTools/NSudo/NSudoLG.exe
    .exe windows:6 windows x64 arch:x64

    1188b455132bc86c7e9e68ae98ce4171


    Headers

    Imports

    Sections

  • OneclickTools/OOshutup10/1- What's OOSU10.txt
  • OneclickTools/OOshutup10/OOSU10.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • OneclickTools/OOshutup10/QuakedOOshutup10.cfg
  • OneclickTools/Orca/1- What's Orca.txt
  • OneclickTools/Orca/Orca.bat
  • OneclickTools/Power Plan/1- What are these pow files.txt
  • OneclickTools/Power Plan/Quaked Ultimate Performance Idle Off.pow
  • OneclickTools/Power Plan/Quaked Ultimate Performance.pow
  • OneclickTools/Sound/1- What's Sound.txt
  • OneclickTools/Sound/Sound.bat
    .bat .vbs
  • OneclickTools/Timer Resolution/1- What's SetTimerResolution.txt
  • OneclickTools/Timer Resolution/SetTimerResolution.exe
    .exe windows:6 windows x64 arch:x64

    c1c671ec492bcf13ef9a966821b522cb


    Headers

    Imports

    Sections