General

  • Target
    LeLow-Bootp1.zip
  • Size 9.8MB
  • Sample260620-lk2casd19p
  • SHA256 6920145c6c9d077785c9a8d2ee29171423865f0ea6355f08c8f16f4e359a6fcf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • LeLow-Bootp1.zip
    .zip 9.8MB
  • LeLow-Bootp2.zip
    .zip 9.8MB
  • LieLat-BootV2.exe
    .exe 683KB
  • local_bin/EqualizerAPO.dll
    .dll 599KB
  • local_bin/Qt5Core.dll
    .dll 5.7MB
  • local_bin/config/config.txt
    201B
  • local_bin/config/demo.txt
    1KB
  • local_bin/config/example.txt
    692B
  • local_bin/config/iir_lowpass.txt
    524B
  • local_bin/config/multichannel.txt
    231B
  • local_bin/config/selective_delay.txt
    353B
  • local_bin/libfftw3f-3.dll
    .dll 2.6MB
  • local_bin/libsndfile-1.dll
    .dll 1.7MB
  • local_bin/msvcp140.dll
    .dll 552KB
  • local_bin/msvcp140_1.dll
    .dll 23KB
  • local_bin/temp/d3dcompiler_47.dll
    .dll 3.3MB
  • local_bin/temp/libGLESv2.dll
    .dll 7.6MB
  • mpclient.dll
    .dll 3.0MB
  • presets/DDSPreview.py
    17KB
  • presets/FNISPatches.py
    9KB
  • presets/FNISTool.py
    19KB
  • presets/FNISToolReset.py
    2KB
  • presets/Form43Checker.py
    3KB
  • presets/check_fnis.dll
    .dll 50KB
  • presets/diagnose_basic.dll
    .dll 131KB
  • presets/game_enderal.dll
    .dll 418KB
  • presets/game_ttw.dll
    .dll 418KB
  • presets/inibakery.dll
    .dll 26KB
  • presets/inieditor.dll
    .dll 38KB
  • presets/installer_bain.dll
    .dll 75KB
  • presets/installer_bundle.dll
    .dll 50KB

LeLow-Bootp1.zip

  • SHA256 6920145c6c9d077785c9a8d2ee29171423865f0ea6355f08c8f16f4e359a6fcf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
1709