General

  • Target
    cognition.pbi.zip
  • Size 3.6MB
  • Sample261007-e57lgsssfs
  • SHA256 52b29b43b364314968aaca8ef61f87e05d68bca81e3dfd445093c18cd6ea5ceb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Untrusted Codesign Signers 4 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • cognition.pbi.zip
    .zip 3.6MB
  • AudioCapture.dll
    .dll 87KB
  • HTCTL32.DLL
    .dll 320KB
  • NSM.LIC
    253B
  • PCICHEK.DLL
    .dll 18KB
  • PCICL32.DLL
    .dll 3.5MB
  • Patch.css
    .html 829KB
  • TCCTL32.DLL
    .dll 382KB
  • client32.ini
    1KB
  • complex.exe
    .exe 117KB
  • fa-1.pak
    855KB
  • msvcr100.dll
    .dll 755KB
  • nskbfltr.inf
    328B
  • nsm_vpro.ini
    46B
  • pcicapi.dll
    .dll 32KB
  • remcmdstub.exe
    .exe 61KB
  • ru-1.pak
    972KB
  • sr-1.pak
    903KB

cognition.pbi.zip

  • SHA256 52b29b43b364314968aaca8ef61f87e05d68bca81e3dfd445093c18cd6ea5ceb
  • MD5 SHA1 SHA512 SSDEEP TLSH