General

  • Target
    Cloudnet.zip
  • Size 82.6MB
  • Sample260620-q8t1caft7m
  • SHA256 407d2abf86bc7fd825db9dfc7fcfd872a2da13208a2bb16b676e11c08562c828
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 10 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned MSI 1 IoCs

    Checks for missing Authenticode signature.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Cloudnet.zip
    .zip 82.6MB
  • A3DLIBS.dll
    .dll 846KB
  • CRClient.dll
    .dll 326KB
  • Design.dll
    75.6MB
  • Launcher.exe
    .exe 2.9MB
  • TfFontMgr.dll
    .dll 228KB
  • data1.bin
    .msi 96KB
  • drivers/CoolType.dll
    .dll 4.0MB
  • drivers/boost_system.dll
    .dll 37KB
  • ffmpeg.dll
    .dll 2.6MB
  • msvcp140.dll
    .dll 544KB
  • sqlite.dll
    .dll 1.9MB
  • vcruntime140.dll
    .dll 124KB
  • vcruntime140_1.dll
    .dll 51KB

Cloudnet.zip

  • SHA256 407d2abf86bc7fd825db9dfc7fcfd872a2da13208a2bb16b676e11c08562c828
  • MD5 SHA1 SHA512 SSDEEP TLSH