General

  • Target
    drivers (2).zip
  • Size 2.1MB
  • Sample260910-24wtxshp81
  • SHA256 4e428fb03df8cdf9d154b14eb7d4e2fa1d147a835a8c6e81b1863115f3cff464
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Untrusted Codesign Signers 3 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • drivers (2).zip
    .zip 2.1MB
  • drivers/.DS_Store
    6KB
  • drivers/BabaelonCoreDriver.exe
    .exe 117KB
  • drivers/NSM.LIC
    263B
  • drivers/NSM.ini
    5KB
  • drivers/PCICHEK.DLL
    .dll 31KB
  • drivers/PCICL32.DLL
    .dll 3.3MB
  • drivers/TCCTL32.DLL
    .dll 459KB
  • drivers/client32.ini
    755B
  • drivers/htctl32.dll
    .dll 316KB
  • drivers/msvcr100.dll
    .dll 755KB
  • drivers/nskbfltr.inf
    328B
  • drivers/nsm_vpro.ini
    46B
  • drivers/pcicapi.dll
    .dll 48KB
  • drivers/remcmdstub.exe
    .exe 75KB

drivers (2).zip

  • SHA256 4e428fb03df8cdf9d154b14eb7d4e2fa1d147a835a8c6e81b1863115f3cff464
  • MD5 SHA1 SHA512 SSDEEP TLSH