General

  • Target

    ErsYmaxz.zip

  • Size

    2.2MB

  • MD5

    8fd4dca41fda77ae4ba4589d38890cd4

  • SHA1

    d5cf964dc193fb774463acbb0a188dc2ec7253c9

  • SHA256

    e26c4397807fe46ca288f3126ef38d2c3c5c210b13a77a12b97ac57c6d042082

  • SHA512

    6f660ad2f7e5e10a20b78a4bb50e758eff45e39bc88407f564733f9ddee84832e0e2bec0e41956e75c16a636dae11c50b798dffbf0a8d338cf634daa667174c5

  • SSDEEP

    49152:ILsPeR8M75q5Kqr2YyNgvOPdrto0p2q5dXAnh2cyauKC4GFvU3x:ILsPeRf5+5yNnVp5xGmauKnYvUh

Score
1/10

Malware Config

Signatures

Files

  • ErsYmaxz.zip
    .zip
  • AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    ba7e9a7cd5ee54c14d0881068fc905c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    56e17186efeb24a70224bc24dced0a14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    285f1795dfcbaca038bd1222a3a96f0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    badb6226fa7082d0185337e46a735c2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • dxva2_.dll
    .dll windows:10 windows x64 arch:x64

    1a53a2a99944f5f7b735af312de55e45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections