General

  • Target
    Tide.zip
  • Size 58.9MB
  • Sample260803-jprbsaeb88
  • SHA256 e8bcefaeecdfa734c75cd7451ea8ea511dd0b811c35ae18482e8abeac9494566
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: AdWind

    A Java-based RAT family operated as malware-as-a-service.

  • Class file contains resources related to AdWind 1 IoCs
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned JAR 1 IoCs

    Checks for missing JAR codesign signature.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Tide.zip
    .zip 58.9MB
  • Tide.NELauncher.2.5.231110/GameAuth.Core.dll
    .dll 3.4MB
  • Tide.NELauncher.2.5.231110/GameLib.dll
    .dll 7.2MB
  • Tide.NELauncher.2.5.231110/HPSocket4C.dll
    .dll 1.7MB
  • Tide.NELauncher.2.5.231110/MPayCliCppWrapper.dll
    .dll 117KB
  • Tide.NELauncher.2.5.231110/NeteaseLogin.dll
    .dll 54KB
  • Tide.NELauncher.2.5.231110/Newtonsoft.Json.dll
    .dll 420KB
  • Tide.NELauncher.2.5.231110/NtUniSDKResources.dll
    .dll 333KB
  • Tide.NELauncher.2.5.231110/NtUniSdk.log
    1KB
  • Tide.NELauncher.2.5.231110/NtUniSdkBase..dll
    .dll 2.8MB
  • Tide.NELauncher.2.5.231110/NtUniSdkMpay.dll
    .dll 2.3MB
  • Tide.NELauncher.2.5.231110/NtUniSdkNgWebview.dll
    .dll 2.5MB
  • Tide.NELauncher.2.5.231110/TEL.ModLoader.exe
    .exe 14KB
  • Tide.NELauncher.2.5.231110/Tide.NELauncher.2.4.231110.exe
    .exe 16.4MB
  • Tide.NELauncher.2.5.231110/Tide.Proxy.exe
    .exe 6.1MB
  • Tide.NELauncher.2.5.231110/api-ms-win-crt-utility-l1-1-1.dll
    .dll 5.3MB
  • Tide.NELauncher.2.5.231110/hyt.zip
    .zip 7.5MB
  • 4620273834210283309@[email protected]
    .jar 46KB
  • 4620273834395780067@[email protected]
    .jar 25KB
  • 4620273834451558259@[email protected]
    .jar 8KB
  • 4620702976810361335@[email protected]
    .jar 6KB
  • 4621632218832071536@[email protected]
    .jar 12KB
  • 4624104029891423116@[email protected]
    .jar 15KB
  • 4633394671597683929@[email protected]
    .jar 21KB
  • 4640208094372507127@[email protected]
    .jar 7KB
  • 4660517239875585007@[email protected]
    .jar 87KB
  • 4663899962476874551@[email protected]
    .jar 54KB
  • 4667218261821964387@[email protected]
    .jar 75KB
  • 4667218261830514168@[email protected]
    .jar 4.3MB
  • 4667218261842506458@[email protected]
    .jar 10KB
  • 4667218261851154083@[email protected]
    .jar 2.5MB
  • 4667218261861348386@[email protected]
    .jar 868KB
  • 4667218261870823985@[email protected]
    .jar 23KB
  • 4667218261883658177@[email protected]
    .jar 11KB
  • 4667218261892081599@[email protected]
    .jar 295KB
  • 4667218261900722967@[email protected]
    .jar 6KB
  • Tide.NELauncher.2.5.231110/libcrypto-1_1.dll
    .dll 2.0MB
  • Tide.NELauncher.2.5.231110/libenvsdk.dll
    .dll 6.1MB
  • Tide.NELauncher.2.5.231110/mpay.dll
    .dll 6.7MB
  • Tide.NELauncher.2.5.231110/mpay_interface.dll
    .dll 37KB
  • Tide.NELauncher.2.5.231110/mpay_webviewsupport.data
    16B
  • Tide.NELauncher.2.5.231110/msvcp120.dll
    .dll 444KB
  • Tide.NELauncher.2.5.231110/msvcp140.dll
    .dll 429KB
  • Tide.NELauncher.2.5.231110/msvcr120.dll
    .dll 948KB
  • Tide.NELauncher.2.5.231110/netease.data
    400B
  • Tide.NELauncher.2.5.231110/ngwebview.data
    48B
  • Tide.NELauncher.2.5.231110/unisdk_dll_load_whitelist
    72B
  • Tide.NELauncher.2.5.231110/vcruntime140.dll
    .dll 81KB

Tide.zip

  • SHA256 e8bcefaeecdfa734c75cd7451ea8ea511dd0b811c35ae18482e8abeac9494566
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Class file contains resources related to AdWind