General

  • Target
    update-mixed-5561a8b6.zip
  • Size 6.7MB
  • Sample260701-aj461scv4y
  • SHA256 6bc7ea5d27e2932e3103ed2bc0000499e699620c76c587175e63fe2fdc0add44
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • update-mixed-5561a8b6.zip
    .zip 6.7MB
  • AccessibleMarshal.dll
    .dll 228KB
  • firefoxupdate.dll
    .dll 229KB
  • freebl3.dll
    .dll 228KB
  • gkcodecs.dll
    .dll 228KB
  • lgpllibs.dll
    .dll 234KB
  • libEGL.dll
    .dll 1.4MB
  • libGLESv2.dll
    .dll 1.6MB
  • mozavcodec.dll
    .dll 287KB
  • mozavutil.dll
    .dll 231KB
  • mozglue.dll
    .dll 596KB
  • mozglue.manifest
    .xml 240B
  • mozinference.dll
    .dll 244KB
  • mozwer.dll
    .dll 229KB
  • msvcp140.dll
    .dll 540KB
  • notificationserver.dll
    .dll 228KB
  • nss3.dll
    .dll 233KB
  • plugin-container.exe
    .exe 141KB
  • softokn3.dll
    .dll 238KB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB
  • wmfclearkey.dll
    .dll 253KB
  • xul.dll
    .dll 5.5MB

update-mixed-5561a8b6.zip

  • SHA256 6bc7ea5d27e2932e3103ed2bc0000499e699620c76c587175e63fe2fdc0add44
  • MD5 SHA1 SHA512 SSDEEP TLSH