General

  • Target

    prflbmsg.zip

  • Size

    2.0MB

  • MD5

    bce64c218ab2d90739e1965f44eaefc9

  • SHA1

    e97838b05200a69c7981afcf9215137936e99416

  • SHA256

    38cb03bb108b88715d554d1141eb734b2dc25b63fc69c4b037e589caa2e77bec

  • SHA512

    90c2b1147e6b524a8b78ad0f23d305c0389c6f9dfe80a2a59aace232bf5f1fd4b8b5c8f05f1faade959a8f62b25d5d3af1b42e60c17b5075bf3e356e1596052c

  • SSDEEP

    49152:SINfCr5pRrsL3HYZuc+2YDEaJPp+1zLAM/85dqNO:jNaVcooc5Y4aJPpc3AM/85dqNO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • prflbmsg.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    b8a1db56beebf8e839dde8e0df72f492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    a6ab0ac73d733ac12db0454e9a7326f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KBDTAM99.DLL
    .dll windows:10 windows x64 arch:x64


    Headers

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    e05a5a3d0a2f8611baa7485a20209a99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    285f1795dfcbaca038bd1222a3a96f0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TsUsbRedirectionGroupPolicyExtension.dll
    .dll windows:10 windows x64 arch:x64

    54be2b7c7bffa0cee4af2cdb42cf9085


    Headers

    Imports

    Exports

    Sections

  • WiaExtensionHost64.dll
    .dll windows:10 windows x64 arch:x64

    39f7abf43a82831d6b4792c9ce9d440f


    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • client32u.ini
  • comcat.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5c317b4785c1c3ce395f95788fb0f892


    Headers

    Imports

    Exports

    Sections

  • getuname.dll
    .dll windows:10 windows x64 arch:x64

    b5f02961939c3c6edf46e7379484f547


    Headers

    Imports

    Exports

    Sections

  • ifsutilx.dll
    .dll windows:10 windows x64 arch:x64

    f0120248cc8015539d8aaf42f8d64a47


    Headers

    Imports

    Exports

    Sections

  • mprext.dll
    .dll windows:10 windows x64 arch:x64

    8c4eb7a549c77fac0467b83cebc5d650


    Headers

    Imports

    Exports

    Sections

  • msidle.dll
    .dll windows:10 windows x64 arch:x64

    14fd2ad264e565ddd6fbeaa5eeae6e57


    Headers

    Imports

    Sections

  • msidntld.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • neth.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • netmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • panmap.dll
    .dll windows:10 windows x64 arch:x64

    e9dbf5df0a9e862645294faf11ef4307


    Headers

    Imports

    Exports

    Sections

  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    f8282f99f39314d8a05a0ff650027272


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prflbmsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • provdiagnostics.dll
    .dll windows:10 windows x64 arch:x64

    66e2d1b2cdab292d56111a45637c4a3c


    Headers

    Imports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • wiatrace.dll
    .dll windows:10 windows x64 arch:x64

    7146ee63c835f34bc9729fe5ed9f8dbe


    Headers

    Imports

    Exports

    Sections