General

  • Target

    07022025_0716_GB1.zip

  • Size

    3.4MB

  • MD5

    e9868ffb6e250bf0ea1fa9088519a316

  • SHA1

    aa1eab37c6bdc31e1ad881adefcfd359ea250661

  • SHA256

    690e67ce9765578e8fac66640f838ef5906f41b308ff82e78cb09fe363707012

  • SHA512

    2ac4232d9a4af09444de50cff882ee29dcd66b6a5de40ff037824278b7bb484cf9a5a9560eee9c5569393cf231c695f9b6b7284473461b436fde5c1feffe223b

  • SSDEEP

    98304:v16FXa/hRFY89YYc9jh23redpmQRENXFMGzBk/KfHwjbsgHpJf:t62xYoY59V0redpmQREtdBkEHwjbsgvf

Score
1/10

Malware Config

Signatures

Files

  • 07022025_0716_GB1.zip
    .zip

    Password: infected

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

  • steam/games/PlatformMenu.vdf
  • steam/steam_api.dll
    .dll windows:5 windows x86 arch:x86

    9fea7f6093bf62b997f1ffcbccb61a11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam/vip.mdl