Suspicious
Suspect

84af691aa16ebac3b5d5e224f83310d0

ZIP Archive
MD5: 84af691aa16ebac3b5d5e224f83310d0
Size: 1.15 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 84af691aa16ebac3b5d5e224f83310d0
Sha1 35789756dab95fcecefa7a4e72d53a095d340718
Sha256 3181508a22cff05c76b202edf8ff58141cd6e9e551233d16b86bbfdf3d4ed48e
Sha384 a8ca2824011e241715e06c854daea179aab9596897f5d4574b8a3f50d51f40be050c0e9956037bbc0a44c6b3487a72c6
Sha512 10bbfb105991459d04da7a833ab8cbd8b62037d633b1338dce5165f0f547fc156307f531618ba42c56c44da686f02c8ea02d716ca6f8fb9877d146895094f64c
SSDeep 24576:rSltwlxX4q+Pk1d7lio/3ABERfZID1NUvMo70mNqYsPLdTB4RsED5:OltwlF4q+sVPrRx44vMo7ZNqYkLdTBuT
TLSH 7B353350EEAE83DEC00FEBB224DCA80DE3E76585E2DE740F05825E4156D21D0FE6A579
84af691aa16ebac3b5d5e224f83310d0
Realtek
68DPSPI.CFG
68EPSPI.CFG
68FPSPI.CFG
8117APEF.CFG
8119EF.CFG
8119EF.MAC
8119EF_X.MAC
8125AGEF.CFG
8125AGEF.MAC
8125AGEF_X.MAC
8125BGEF.CFG
8125BGEF.MAC
8125BGEF_X.MAC
8168DEF.CFG
8168DPEF.CFG
8168EEF.CFG
8168ELEF.CFG
8168ELEF.MAC
8168ELEF_X.MAC
8168EPEF.CFG
8168EPEF.MAC
8168EPEF_X.MAC
8168FBEF.CFG
8168FBEF.MAC
8168FBEX.MAC
8168FPEF.CFG
8168FPEF.MAC
8168FPEF_X.MAC
8168GEF.CFG
8168GEF.MAC
8168GEF_X.MAC
8168HEF.CFG
8168HEF.MAC
8168HEF_X.MAC
8168K.CFG
CmdLineMode.exe
[Authenticode]_0db5e76a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_STRING
ID:0001
ID:1028
RT_MANIFEST
ID:0001
ID:1033
devcon.exe
[Authenticode]_f35d5983.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_STRING
ID:00BC
ID:1033
ID:00BD
ID:1033
RT_MESSAGETABLE
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
DPFLASH.BIN
E3100GEF.CFG
E3100GEF.MAC
E3100GEF_X.MAC
RTIoLib32.dll
[Authenticode]_94e17857.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
Shared
.rsrc
.reloc
RTIoLib64.dll
[Authenticode]_69664e93.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
Shared
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1028
RT_MANIFEST
ID:0002
ID:1033
rtkio64.sys
[Authenticode]_4f56786a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkio86.sys
[Authenticode]_dc0ca2e0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkiow10x64.sys
[Authenticode]_5a52e6fe.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkiow10x86.sys
[Authenticode]_0ec8ea9c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkiow8x64.sys
[Authenticode]_ac43aabe.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkiow8x86.sys
[Authenticode]_475be410.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RTNicPgW32.exe
[Authenticode]_3d826698.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1028
RT_MANIFEST
ID:0001
ID:1033
RTNicPgW64.exe
[Authenticode]_08ffdf42.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
STICH beta

No STICH Path has been generated for this analysis yet.

5 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 5
84af691aa16ebac3b5d5e224f83310d0
Realtek
68DPSPI.CFG
68EPSPI.CFG
68FPSPI.CFG
8117APEF.CFG
8119EF.CFG
8119EF.MAC
8119EF_X.MAC
8125AGEF.CFG
8125AGEF.MAC
8125AGEF_X.MAC
8125BGEF.CFG
8125BGEF.MAC
8125BGEF_X.MAC
8168DEF.CFG
8168DPEF.CFG
8168EEF.CFG
8168ELEF.CFG
8168ELEF.MAC
8168ELEF_X.MAC
8168EPEF.CFG
8168EPEF.MAC
8168EPEF_X.MAC
8168FBEF.CFG
8168FBEF.MAC
8168FBEX.MAC
8168FPEF.CFG
8168FPEF.MAC
8168FPEF_X.MAC
8168GEF.CFG
8168GEF.MAC
8168GEF_X.MAC
8168HEF.CFG
8168HEF.MAC
8168HEF_X.MAC
8168K.CFG
CmdLineMode.exe
[Authenticode]_0db5e76a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_STRING
ID:0001
ID:1028
RT_MANIFEST
ID:0001
ID:1033
devcon.exe
[Authenticode]_f35d5983.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_STRING
ID:00BC
ID:1033
ID:00BD
ID:1033
RT_MESSAGETABLE
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
DPFLASH.BIN
E3100GEF.CFG
E3100GEF.MAC
E3100GEF_X.MAC
RTIoLib32.dll
[Authenticode]_94e17857.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
Shared
.rsrc
.reloc
RTIoLib64.dll
[Authenticode]_69664e93.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
Shared
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1028
RT_MANIFEST
ID:0002
ID:1033
rtkio64.sys
[Authenticode]_4f56786a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkio86.sys
[Authenticode]_dc0ca2e0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkiow10x64.sys
[Authenticode]_5a52e6fe.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkiow10x86.sys
[Authenticode]_0ec8ea9c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkiow8x64.sys
[Authenticode]_ac43aabe.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
rtkiow8x86.sys
[Authenticode]_475be410.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RTNicPgW32.exe
[Authenticode]_3d826698.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1028
RT_MANIFEST
ID:0001
ID:1033
RTNicPgW64.exe
[Authenticode]_08ffdf42.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙