General

  • Target
    Installer.zip
  • Size 114.3MB
  • Sample260621-mxvkysdx4y
  • SHA256 b41099c1cf6c319a01572b72a1d7e9b60b294b21dd26ee0297875ad0d4ea2668
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Insecure Codesign Algorithm 2 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 4 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Installer.zip
    .zip 114.3MB
  • Installer/!!README!!.txt
    5KB
  • Installer/ALI213.ini
    2KB
  • Installer/Installer.exe
    .exe 3.2MB
  • Installer/Serilg.dll
    .dll 125KB
  • Installer/SystemEx.dll
    .dll 23KB
  • Installer/act/ALI213.ini
    2KB
  • Installer/act/GameSettings.ini
    4KB
  • Installer/act/Localization.json
    8KB
  • Installer/act/OneCoreUAPCommonProxyStub.dll
    .dll 7.9MB
  • Installer/act/Serilg.dll
    .dll 125KB
  • Installer/act/SystemEx.dll
    .dll 23KB
  • Installer/act/bin/ProtectionManagement.mfl
    98KB
  • Installer/act/bin/ProtectionManagement_Uninstall.mfl
    1KB
  • Installer/act/bin/shellext.dll.mui
    .dll 3KB
  • Installer/act/config.jet
    697B
  • Installer/act/eula.1042.txt
    17KB
  • Installer/act/eula.2052.txt
    17KB
  • Installer/act/extensions/MsMpRes.dll.mui
    .dll 9KB
  • Installer/act/extensions/OfflineScannerShell.exe.mui
    .dll 8KB
  • Installer/act/extensions/ProtectionManagement.dll.mui
    .dll 38KB
  • Installer/act/extensions/sfcdix.dll
    .dll 10.0MB
  • Installer/act/globdata.ini
    1KB
  • Installer/act/kernel.bin
    518KB
  • Installer/act/lib/EppManifest.dll.mui
    .dll 3KB
  • Installer/act/lib/MpAsDesc.dll.mui
    .dll 57KB
  • Installer/act/lib/MpEvMsg.dll.mui
    .dll 47KB
  • Installer/act/local/DefenderCSP.dll
    .dll 205KB
  • Installer/act/local/EppManifest.dll
    .dll 716KB
  • Installer/act/mshtmI.dll
    .dll 22.4MB
  • Installer/act/mstscax.dll
    .dll 8.0MB
  • Installer/act/ncuvid.dll
    .dll 19.0MB
  • Installer/act/overrideAutodetect.lua
    162B
  • Installer/act/prm0019.dll
    .dll 8.2MB
  • Installer/act/windows.storage.dll
    .dll 7.7MB
  • Installer/act/x64_x32/ProtectionManagement.dll
    .dll 678KB
  • Installer/act/x64_x32/ProtectionManagement.mof
    32KB
  • Installer/act/x64_x32/ProtectionManagement_Uninstall.mof
    2KB
  • Installer/config.jet
    697B
  • Installer/data/ALI213.ini
    2KB
  • Installer/data/Localization.json
    8KB
  • Installer/data/Micro
    .dll 24.9MB
  • Installer/data/eula.1042.txt
    17KB
  • Installer/data/eula.2052.txt
    17KB
  • Installer/data/globdata.ini
    1KB
  • Installer/data/kernel.bin
    518KB
  • Installer/data/keygetn.SDK
    .dll 24.9MB
  • Installer/data/mstscax.dll
    .dll 8.0MB
  • Installer/data/overrideAutodetect.lua
    162B
  • Installer/fix/Fix.exe
    .exe 3.2MB
  • Installer/localdata/ALI213.ini
    2KB
  • Installer/localdata/GameSettings.ini
    4KB
  • Installer/localdata/Localization.json
    8KB
  • Installer/localdata/OneCoreUAPCommonProxyStub.dll
    .dll 7.9MB
  • Installer/localdata/Serilg.dll
    .dll 125KB
  • Installer/localdata/SystemEx.dll
    .dll 23KB
  • Installer/localdata/bin/ProtectionManagement.mfl
    98KB
  • Installer/localdata/bin/ProtectionManagement_Uninstall.mfl
    1KB
  • Installer/localdata/bin/shellext.dll.mui
    .dll 3KB
  • Installer/localdata/config.jet
    697B
  • Installer/localdata/dll/Qt5Core.dll
    .dll 5.9MB
  • Installer/localdata/dll/Qt5Gui.dll
    .dll 6.2MB
  • Installer/localdata/dll/Qt5Widgets.dll
    .dll 5.3MB
  • Installer/localdata/dll/Qt6Core.dll
    .dll 5.5MB
  • Installer/localdata/dll/Qt6Gui.dll
    .dll 7.4MB
  • Installer/localdata/dll/Qt6Widgets.dll
    .dll 5.8MB
  • Installer/localdata/dll/SyncEngine.dll
    .dll 12.4MB
  • Installer/localdata/dll/libasset32.dll
    .dll 8.8MB
  • Installer/localdata/dll/mfc140.dll
    .dll 5.5MB
  • Installer/localdata/dll/mfc140u.dll
    .dll 5.6MB
  • Installer/localdata/dll/server.dll
    .dll 10.9MB
  • Installer/localdata/dll/usbaaplrc.dll
    .dll 5.8MB
  • Installer/localdata/dll/wxmsw32u_core_gcc_custom.dll
    .dll 5.0MB
  • Installer/localdata/eula.1042.txt
    17KB
  • Installer/localdata/eula.2052.txt
    17KB
  • Installer/localdata/extensions/MsMpRes.dll.mui
    .dll 9KB
  • Installer/localdata/extensions/OfflineScannerShell.exe.mui
    .dll 8KB
  • Installer/localdata/extensions/ProtectionManagement.dll.mui
    .dll 38KB
  • Installer/localdata/extensions/sfcdix.dll
    .dll 10.0MB
  • Installer/localdata/globdata.ini
    1KB
  • Installer/localdata/kernel.bin
    518KB
  • Installer/localdata/lib/EppManifest.dll.mui
    .dll 3KB
  • Installer/localdata/lib/MpAsDesc.dll.mui
    .dll 57KB
  • Installer/localdata/lib/MpEvMsg.dll.mui
    .dll 47KB
  • Installer/localdata/local/DefenderCSP.dll
    .dll 205KB
  • Installer/localdata/local/EppManifest.dll
    .dll 716KB
  • Installer/localdata/mshtmI.dll
    .dll 22.4MB
  • Installer/localdata/mstscax.dll
    .dll 8.0MB
  • Installer/localdata/ncuvid.dll
    .dll 19.0MB
  • Installer/localdata/overrideAutodetect.lua
    162B
  • Installer/localdata/prm0019.dll
    .dll 8.2MB
  • Installer/localdata/windows.storage.dll
    .dll 7.7MB
  • Installer/localdata/x64_x32/ProtectionManagement.dll
    .dll 678KB
  • Installer/localdata/x64_x32/ProtectionManagement.mof
    32KB
  • Installer/localdata/x64_x32/ProtectionManagement_Uninstall.mof
    2KB
  • Installer/setcr.ini
    1KB
  • Installer/windows.storage.dll
    .dll 7.7MB

Installer.zip

  • SHA256 b41099c1cf6c319a01572b72a1d7e9b60b294b21dd26ee0297875ad0d4ea2668
  • MD5 SHA1 SHA512 SSDEEP TLSH