General

  • Target
    D0WNL0AD_SETUP_FILE (PASS_2113).zip
  • Size 25.1MB
  • Sample260508-tabynaaw71
  • SHA256 4e3cff8898a63a59841a8f59c1dd11056aa7a3e5edc3ac5cecc1c198296e00b6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • DLL Hijacking vulnerability 3 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Insecure Codesign Algorithm 3 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 6 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • D0WNL0AD_SETUP_FILE (PASS_2113).zip
    .zip 25.1MB
  • PASS KEY.png
    .png 7KB
  • ๐——๐—ข๐—ช@๐—ก๐—Ÿ๐—ข๐—”๐——_๐—–๐—ข๐— ๐—ฃ๐—Ÿ๐—˜๐—ง๐—˜โโค–๐—ฆ๐—˜๐—ง๐—จ๐—ฃโœท๐—–๐—ข๐——๐—˜.zip
    .zip 25.1MB
  • SETUP.zip
    .zip 25.2MB
  • SLStore/Adobe01.bmp
    4KB
  • SLStore/BF10AE85CDF7
    20B
  • SLStore/CF05E64E24E0
    20B
  • Setup.exe
    .exe 1009KB
  • Sync/AutoSync64.dll
    .dll 840KB
  • Sync/CloudDriveUtility.exe
    .exe 36KB
  • Sync/IDSyncIntIcon64.dll
    .dll 3.3MB
  • Sync/Syncexe_latest/id_sync.exe
    .exe 2.7MB
  • Sync/id_sync.exe
    .exe 2.7MB
  • Sync/jsoncpp.dll
    .dll 177KB
  • Sync/libcrypto-3.dll
    .dll 4.3MB
  • defaults/OOBE/com.adobe.accc.apps/Records/data
    .xml 4KB
  • defaults/OOBE/ffc
    .js 11.1MB
  • defaults/UPI/Configuration/DB/UPISys.db
    164KB
  • defaults/UPI/Configuration/XManConfig/XManConfigV2.xml
    .xml 526KB
  • defaults/UPI/Configuration/XManConfigV2.xml
    .xml 526KB
  • defaults/messenger/mailViews.dat
    472B
  • defaults/pref/channel-prefs.js
    245B
  • defaults/x64/Sync.dll
    .dll 457KB
  • defaults/x64/data/ASUSGCDriverInitialClient.exe
    .exe 295KB
  • defaults/x64/data/AsusGCGridServiceSetup.exe
    .exe 260KB
  • defaults/x64/data/EzULIB.dll
    .dll 2.1MB
  • defaults/x64/data/StartMenu/Kaspersky.lnk
    .lnk 2KB
  • defaults/x64/doc/diskpulse_manual.pdf
    .pdf 5.3MB
  • defaults/x64/libeay32.dll
    .dll 858KB
  • defaults/x64/libssl-3.dll
    .dll 1.0MB
  • defaults/x64/mfc100u.dll
    .dll 4.2MB
  • defaults/x64/mfc140u.dll
    .dll 4.9MB
  • defaults/x64/mfcm100u.dll
    .dll 78KB
  • defaults/x64/msvcp100.dll
    .dll 411KB
  • defaults/x64/msvcp140.dll
    .dll 427KB
  • defaults/x64/msvcr100.dll
    .dll 750KB
  • defaults/x64/rootcert.pem
    730B
  • defaults/x64/ssleay32.dll
    .dll 162KB
  • defaults/x64/unins000.dat
    73KB
  • defaults/x64/vcruntime140.dll
    .dll 88KB
  • dfrqwqxjx.zip
    .dll 2.8MB
  • libvlc.dll
    .dll 179KB
  • libvlccore.dll
    .dll 13.8MB
  • lua/extensions/VLSub.luac
    79KB
  • lua/http/css/main.css
    3KB
  • lua/http/css/mobile.css
    2KB
  • lua/http/css/ui-lightness/images/ui-bg_diagonals-thick_18_b81900_40x40.png
    .png 201B
  • lua/http/css/ui-lightness/images/ui-bg_diagonals-thick_20_666666_40x40.png
    .png 197B
  • lua/http/css/ui-lightness/images/ui-bg_flat_10_000000_40x100.png
    .png 147B
  • lua/http/css/ui-lightness/images/ui-bg_glass_100_f6f6f6_1x400.png
    .png 103B
  • lua/http/css/ui-lightness/images/ui-bg_glass_100_fdf5ce_1x400.png
    .png 115B
  • lua/http/css/ui-lightness/images/ui-bg_glass_65_ffffff_1x400.png
    .png 95B
  • lua/http/css/ui-lightness/images/ui-bg_gloss-wave_35_f6a828_500x100.png
    .png 2KB
  • lua/http/css/ui-lightness/images/ui-bg_highlight-soft_100_eeeeee_1x100.png
    .png 88B
  • lua/http/css/ui-lightness/images/ui-bg_highlight-soft_75_ffe45c_1x100.png
    .png 126B
  • lua/http/css/ui-lightness/images/ui-icons_222222_256x240.png
    .png 4KB
  • lua/http/css/ui-lightness/images/ui-icons_228ef1_256x240.png
    .png 4KB
  • lua/http/css/ui-lightness/images/ui-icons_ef8c08_256x240.png
    .png 4KB
  • lua/http/css/ui-lightness/images/ui-icons_ffd27a_256x240.png
    .png 4KB
  • lua/http/css/ui-lightness/images/ui-icons_ffffff_256x240.png
    .png 4KB
  • lua/http/css/ui-lightness/jquery-ui-1.8.13.custom.css
    32KB
  • lua/http/custom.lua
    .js 507B
  • lua/http/dialogs/batch_window.html
    .html .js 889B
  • lua/http/dialogs/browse_window.html
    .html .js 1KB
  • lua/http/dialogs/create_stream.html
    .html .js 14KB
  • lua/http/dialogs/equalizer_window.html
    .html .js 1KB
  • lua/http/dialogs/error_window.html
    .html .js 501B
  • lua/http/dialogs/mosaic_window.html
    .html .js 4KB
  • lua/http/dialogs/offset_window.html
    .html .js 1KB
  • lua/http/dialogs/stream_config_window.html
    .html .js 1KB
  • lua/http/dialogs/stream_window.html
    .html .js 4KB
  • lua/http/favicon.ico
    84KB
  • lua/http/images/Audio-48.png
    .png 4KB
  • lua/http/images/Back-48.png
    .png 1KB
  • lua/http/images/Folder-48.png
    .png 1KB
  • lua/http/images/Other-48.png
    .png 2KB
  • lua/http/images/Video-48.png
    .png 4KB
  • lua/http/images/buttons.png
    .png 11KB
  • lua/http/images/speaker-32.png
    .png 942B
  • lua/http/images/vlc-48.png
    .png 15KB
  • lua/http/images/vlc16x16.png
    .png 606B
  • lua/http/index.html
    .html .js 13KB
  • lua/http/js/common.js
    .js 5KB
  • lua/http/js/controllers.js
    .js 23KB
  • lua/http/js/jquery.jstree.js
    .js 180KB
  • lua/http/js/ui.js
    .js 3KB
  • lua/http/mobile.html
    .js 5KB
  • lua/http/mobile_browse.html
    .js 2KB
  • lua/http/mobile_equalizer.html
    .js 2KB
  • lua/http/mobile_view.html
    2KB
  • lua/http/requests/README.txt
    .vbs 5KB
  • lua/http/requests/browse.json
    1KB
  • lua/http/requests/browse.xml
    .xml 1KB
  • lua/http/requests/playlist.json
    1KB
  • lua/http/requests/playlist.xml
    .js .xml 2KB
  • lua/http/requests/playlist_jstree.xml
    .xml 3KB
  • lua/http/requests/status.json
    1KB
  • lua/http/requests/status.xml
    .xml 2KB
  • lua/http/requests/vlm.xml
    .bat .xml 4KB
  • lua/http/requests/vlm_cmd.xml
    .xml 1KB
  • lua/http/view.html
    .js 3KB
  • lua/http/vlm.html
    .html 1KB
  • lua/http/vlm_export.html
    308B
  • lua/intf/cli.luac
    43KB
  • lua/intf/dummy.luac
    819B
  • lua/intf/dumpmeta.luac
    1KB
  • lua/intf/http.luac
    12KB
  • lua/intf/luac.luac
    2KB
  • lua/intf/modules/host.luac
    12KB
  • lua/intf/modules/httprequests.luac
    18KB
  • lua/intf/telnet.luac
    1002B
  • lua/meta/art/00_musicbrainz.luac
    2KB
  • lua/meta/art/01_googleimage.luac
    1KB
  • lua/meta/art/02_frenchtv.luac
    4KB
  • lua/meta/art/03_lastfm.luac
    1KB
  • lua/meta/reader/filename.luac
    1KB
  • lua/modules/common.luac
    7KB
  • lua/modules/dkjson.luac
    25KB
  • lua/modules/sandbox.luac
    3KB
  • lua/modules/simplexml.luac
    3KB
  • lua/playlist/anevia_streams.luac
    2KB
  • lua/playlist/anevia_xml.luac
    2KB
  • lua/playlist/appletrailers.luac
    4KB
  • lua/playlist/bbc_co_uk.luac
    1KB
  • lua/playlist/cue.luac
    5KB
  • lua/playlist/dailymotion.luac
    2KB
  • lua/playlist/jamendo.luac
    2KB
  • lua/playlist/koreus.luac
    3KB
  • lua/playlist/liveleak.luac
    2KB
  • lua/playlist/newgrounds.luac
    1KB
  • lua/playlist/rockbox_fm_presets.luac
    1KB
  • lua/playlist/soundcloud.luac
    2KB
  • lua/playlist/twitch.luac
    5KB
  • lua/playlist/vimeo.luac
    2KB
  • lua/playlist/vocaroo.luac
    895B
  • lua/playlist/youtube.luac
    13KB
  • lua/sd/icecast.luac
    2KB
  • lua/sd/jamendo.luac
    5KB
  • skins/default.vlt
    .gz 158KB
  • skins/fonts/FreeSans.ttf
    250KB
  • skins/fonts/FreeSansBold.ttf
    62KB
  • skins/skin.catalog
    .xml 167B
  • skins/skin.dtd
    10KB
  • skins/winamp2.xml
    31KB
  • vcruntime140.dll
    .dll 81KB

D0WNL0AD_SETUP_FILE (PASS_2113).zip

  • SHA256 4e3cff8898a63a59841a8f59c1dd11056aa7a3e5edc3ac5cecc1c198296e00b6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
2113