General

  • Target
    NS2H.zip
  • Size 2.1MB
  • Sample260701-pergpafx2z
  • SHA256 fa33f0af6511c3e0023d4960fb3f046a09c0e5ae6261d396789baf147ca328a5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Untrusted Codesign Signers 3 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • NS2H.zip
    .zip 2.1MB
  • NS2H/.DS_Store
    6KB
  • NS2H/NSM.LIC
    263B
  • NS2H/NSM.ini
    5KB
  • NS2H/PCICHEK.DLL
    .dll 31KB
  • NS2H/PCICL32.DLL
    .dll 3.3MB
  • NS2H/TCCTL32.DLL
    .dll 459KB
  • NS2H/Updatesystem.exe
    .exe 117KB
  • NS2H/client32.ini
    605B
  • NS2H/htctl32.dll
    .dll 316KB
  • NS2H/msvcr100.dll
    .dll 755KB
  • NS2H/nskbfltr.inf
    328B
  • NS2H/nsm_vpro.ini
    46B
  • NS2H/pcicapi.dll
    .dll 48KB
  • NS2H/remcmdstub.exe
    .exe 75KB

NS2H.zip

  • SHA256 fa33f0af6511c3e0023d4960fb3f046a09c0e5ae6261d396789baf147ca328a5
  • MD5 SHA1 SHA512 SSDEEP TLSH