Overview

overview

10

Static

static

10

data-Setup/Setup.exe

windows10-2004-x64

10

data-Setup/Setup.exe

windows10-ltsc 2021-x64

10

data-Setup/Setup.exe

windows11-21h2-x64

10

data-Setup...za.dll

windows10-2004-x64

8

data-Setup...za.dll

windows10-ltsc 2021-x64

8

data-Setup...za.dll

windows11-21h2-x64

3

data-Setup...za.exe

windows10-2004-x64

8

data-Setup...za.exe

windows10-ltsc 2021-x64

8

data-Setup...za.exe

windows11-21h2-x64

3

data-Setup...SE.url

windows10-2004-x64

8

data-Setup...SE.url

windows10-ltsc 2021-x64

8

data-Setup...SE.url

windows11-21h2-x64

3

data-Setup...pt.ps1

windows10-2004-x64

10

data-Setup...pt.ps1

windows10-ltsc 2021-x64

10

data-Setup...pt.ps1

windows11-21h2-x64

10

data-Setup...ss.bat

windows10-2004-x64

10

data-Setup...ss.bat

windows10-ltsc 2021-x64

10

data-Setup...ss.bat

windows11-21h2-x64

10

data-Setup...cc.dll

windows10-2004-x64

8

data-Setup...cc.dll

windows10-ltsc 2021-x64

8

data-Setup...cc.dll

windows11-21h2-x64

1

data-Setup...kv.dll

windows10-2004-x64

8

data-Setup...kv.dll

windows10-ltsc 2021-x64

8

data-Setup...kv.dll

windows11-21h2-x64

3

data-Setup...mon.js

windows10-2004-x64

8

data-Setup...mon.js

windows10-ltsc 2021-x64

8

data-Setup...mon.js

windows11-21h2-x64

3

data-Setup...ub.dll

windows10-2004-x64

8

data-Setup...ub.dll

windows10-ltsc 2021-x64

8

data-Setup...ub.dll

windows11-21h2-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    data-Setup.zip

  • Size

    116.2MB

  • MD5

    73261f78d0e4ba21f39ac38d51f307f1

  • SHA1

    ac32357ab75dc163c04926d2dac3d733c6e49e10

  • SHA256

    c7d2fda303d9928f804d3269d128b216844d9afcb2f533054c8d87e1c6fd4aeb

  • SHA512

    c9d513bba7480f23700fbcc581001402b3d3247cd39fde4f107a0ff0224a4c191dd516678690aefb6c61106c513b2ff651f49235f10ee7886a9bb4d252afc1fe

  • SSDEEP

    3145728:dArgv0TG0kgc/l0Ivny7AEv+b8zliOFf6y/0g77Lsan:dAr00TfkLQAU+b84vG0qD

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

https://micfriosogprodnorthghostcom.top/kjgkjlKLkjfjkrhjHRGHKLNMREJGHKJnlGKL3454345BFJKKJnVBEKERJKRGEGREGRGERGERWBFDGGBTfgfbergsc4334ggd/lice
exe.dropper

https://micfriosogprodnorthghostcom.top/kjgkjlKLkjfjkrhjHRGHKLNMREJGHKJnlGKL3454345BFJKKJnVBEKERJKRGEGREGRGERGERWBFDGGBTfgfbergsc4334ggd/lice

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • data-Setup.zip
    .zip
  • data-Setup/Setup.exe
    .exe windows:10 windows x64 arch:x64

    d8314833ef52a5350cf45df946c73dd9


    Headers

    Imports

    Sections

  • data-Setup/data/7za.dll
    .dll windows:4 windows x86 arch:x86

    edb01ced967d1545f46e4d8d004d088e


    Headers

    Imports

    Exports

    Sections

  • data-Setup/data/7za.exe
    .exe windows:4 windows x86 arch:x86

    6f18dc28cf1faef40cedf506a5685aac


    Headers

    Imports

    Sections

  • data-Setup/data/bin
    .zip
  • data-Setup/data/brotli/LICENSE.txt
  • data-Setup/data/brotli/README.md
  • data-Setup/data/brotli/decode.h
  • data-Setup/data/brotli/encode.h
  • data-Setup/data/brotli/port.h
  • data-Setup/data/brotli/shared_dictionary.h
  • data-Setup/data/brotli/types.h
  • data-Setup/data/cacert/LICENSE.url
  • data-Setup/data/curl/curl.h
  • data-Setup/data/curl/curlver.h
  • data-Setup/data/curl/easy.h
  • data-Setup/data/curl/header.h
  • data-Setup/data/curl/mprintf.h
  • data-Setup/data/curl/multi.h
  • data-Setup/data/curl/options.h
  • data-Setup/data/curl/stdcheaders.h
  • data-Setup/data/curl/system.h
  • data-Setup/data/curl/typecheck-gcc.h
  • data-Setup/data/curl/urlapi.h
  • data-Setup/data/curl/websockets.h
  • data-Setup/data/extracted_3382/script.ps1
    .ps1
  • data-Setup/data/extracted_3382/sss.bat
    .bat .vbs
  • data-Setup/data/gkcc.dll
  • data-Setup/data/gkv.dll
  • data-Setup/data/libbrotlicommon.a
    .js
  • data-Setup/data/libbrotlidec.a
  • data-Setup/data/libcrypto.a
  • data-Setup/data/libcurl.a
  • data-Setup/data/libcurl.dll.a
  • data-Setup/data/libnghttp2.a
  • data-Setup/data/libnghttp3.a
  • data-Setup/data/libngtcp2.a
  • data-Setup/data/libngtcp2_crypto_quictls.a
  • data-Setup/data/libpsl.a
  • data-Setup/data/libpsl.h
  • data-Setup/data/libpsl/AUTHORS.txt
  • data-Setup/data/libpsl/COPYING.txt
  • data-Setup/data/libpsl/NEWS.txt
  • data-Setup/data/libressl/COPYING.txt
  • data-Setup/data/libressl/ChangeLog.txt
  • data-Setup/data/libressl/README.md
  • data-Setup/data/libssh2.a
  • data-Setup/data/libssh2.h
  • data-Setup/data/libssh2/COPYING.txt
  • data-Setup/data/libssh2/NEWS.txt
  • data-Setup/data/libssh2/README.txt
  • data-Setup/data/libssh2/RELEASE-NOTES.txt
  • data-Setup/data/libssh2/docs/AUTHORS.txt
  • data-Setup/data/libssh2/docs/HACKING-CRYPTO.txt
  • data-Setup/data/libssh2/docs/INSTALL_AUTOTOOLS.txt
  • data-Setup/data/libssh2/docs/TODO.txt
  • data-Setup/data/libssh2_publickey.h
  • data-Setup/data/libssh2_sftp.h
  • data-Setup/data/libssl.a
  • data-Setup/data/libz.a
  • data-Setup/data/libzstd.a
  • data-Setup/data/nghttp2/AUTHORS.txt
  • data-Setup/data/nghttp2/COPYING.txt
  • data-Setup/data/nghttp2/ChangeLog.txt
  • data-Setup/data/nghttp2/README.rst
  • data-Setup/data/nghttp2/nghttp2.h
  • data-Setup/data/nghttp2/nghttp2ver.h
  • data-Setup/data/nghttp3/AUTHORS.txt
  • data-Setup/data/nghttp3/COPYING.txt
  • data-Setup/data/nghttp3/ChangeLog.txt
  • data-Setup/data/nghttp3/README.rst
  • data-Setup/data/nghttp3/nghttp3.h
  • data-Setup/data/nghttp3/version.h
  • data-Setup/data/ngtcp2/AUTHORS.txt
  • data-Setup/data/ngtcp2/COPYING.txt
  • data-Setup/data/ngtcp2/ChangeLog.txt
  • data-Setup/data/ngtcp2/README.rst
  • data-Setup/data/ngtcp2/ngtcp2.h
  • data-Setup/data/ngtcp2/ngtcp2_crypto.h
  • data-Setup/data/ngtcp2/ngtcp2_crypto_quictls.h
  • data-Setup/data/ngtcp2/version.h
  • data-Setup/data/openssl/aes.h
  • data-Setup/data/openssl/asn1.h
  • data-Setup/data/openssl/asn1t.h
  • data-Setup/data/openssl/bio.h
  • data-Setup/data/openssl/blowfish.h
  • data-Setup/data/openssl/bn.h
  • data-Setup/data/openssl/buffer.h
  • data-Setup/data/openssl/camellia.h
  • data-Setup/data/openssl/cast.h
  • data-Setup/data/openssl/chacha.h
  • data-Setup/data/openssl/cmac.h
  • data-Setup/data/openssl/cms.h
  • data-Setup/data/openssl/comp.h
  • data-Setup/data/openssl/conf.h
  • data-Setup/data/openssl/crypto.h
  • data-Setup/data/openssl/ct.h
  • data-Setup/data/openssl/curve25519.h
  • data-Setup/data/openssl/des.h
  • data-Setup/data/openssl/dh.h
  • data-Setup/data/openssl/dsa.h
  • data-Setup/data/openssl/dtls1.h
  • data-Setup/data/openssl/ec.h
  • data-Setup/data/openssl/ecdh.h
  • data-Setup/data/openssl/ecdsa.h
  • data-Setup/data/openssl/engine.h
  • data-Setup/data/openssl/err.h
  • data-Setup/data/openssl/evp.h
  • data-Setup/data/openssl/hkdf.h
  • data-Setup/data/openssl/hmac.h
  • data-Setup/data/openssl/idea.h
  • data-Setup/data/openssl/kdf.h
  • data-Setup/data/openssl/lhash.h
  • data-Setup/data/openssl/md4.h
  • data-Setup/data/openssl/md5.h
  • data-Setup/data/openssl/modes.h
  • data-Setup/data/openssl/obj_mac.h
  • data-Setup/data/openssl/objects.h
  • data-Setup/data/openssl/ocsp.h
  • data-Setup/data/openssl/opensslconf.h
  • data-Setup/data/openssl/opensslfeatures.h
  • data-Setup/data/openssl/opensslv.h
  • data-Setup/data/openssl/ossl_typ.h
  • data-Setup/data/openssl/pem.h
  • data-Setup/data/openssl/pkcs12.h
  • data-Setup/data/openssl/pkcs7.h
  • data-Setup/data/openssl/poly1305.h
  • data-Setup/data/openssl/posix_time.h
  • data-Setup/data/openssl/rand.h
  • data-Setup/data/openssl/rc2.h
  • data-Setup/data/openssl/rc4.h
  • data-Setup/data/openssl/ripemd.h
  • data-Setup/data/openssl/rsa.h
  • data-Setup/data/openssl/safestack.h
  • data-Setup/data/openssl/sha.h
  • data-Setup/data/openssl/sm3.h
  • data-Setup/data/openssl/sm4.h
  • data-Setup/data/openssl/srtp.h
  • data-Setup/data/openssl/ssl.h
  • data-Setup/data/openssl/ssl3.h
  • data-Setup/data/openssl/stack.h
  • data-Setup/data/openssl/tls1.h
  • data-Setup/data/openssl/ts.h
  • data-Setup/data/openssl/txt_db.h
  • data-Setup/data/openssl/ui.h
  • data-Setup/data/openssl/x509.h
  • data-Setup/data/openssl/x509_vfy.h
  • data-Setup/data/openssl/x509v3.h
  • data-Setup/data/zconf.h
  • data-Setup/data/zdict.h
  • data-Setup/data/zlib/ChangeLog.txt
  • data-Setup/mapistub.dll
    .dll windows:6 windows x64 arch:x64

    55c215be0298065cf040f435fff93712


    Headers

    Imports

    Sections