Telex_MEDUPO188339[.]scr

Resubmissions

20/07/2023, 13:30

230720-qrwgvagg847

20/07/2023, 13:18

230720-qj37qahc5z10

Sharing

Copy URL Twitter E-mail

General

Target
Telex_MEDUPO188339.scr
Size 341KB
Sample230720-qrwgvagg84
SHA256 57dc1a281905c4a7f12ed5f2e26e1fecaba04cda44f9bb4110dc2c5f6e321658
MD5 b92c138111adc794605849f888ce286e
SHA1 b817be8c3a9cc313a77968a09aa74ff5fdfb4eeb
SHA512 abf6b0acaa42ae6d588409ea5b6d93ed9bc7b5523129d45bda9b094cb6546ebe0f0c8956c3af7982c1f27f95a008e4fa06b8b30f43faf10e30aef28ea8c19524
SSDEEP 6144:44t6Lsc1u+jom7OZgVwy6NlTFWmtiUToRNH35CfrfTuiJRK8rFMQuX5d3M0V55uv:4kcg+MAOZgVwyAiUY8frfTue3rFMb75K
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

Telex_MEDUPO188339.scr

.exe 341KB

Telex_MEDUPO188339.scr

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 57dc1a281905c4a7f12ed5f2e26e1fecaba04cda44f9bb4110dc2c5f6e321658
MD5 b92c138111adc794605849f888ce286e
SHA1 b817be8c3a9cc313a77968a09aa74ff5fdfb4eeb
SHA512 abf6b0acaa42ae6d588409ea5b6d93ed9bc7b5523129d45bda9b094cb6546ebe0f0c8956c3af7982c1f27f95a008e4fa06b8b30f43faf10e30aef28ea8c19524
SSDEEP 6144:44t6Lsc1u+jom7OZgVwy6NlTFWmtiUToRNH35CfrfTuiJRK8rFMQuX5d3M0V55uv:4kcg+MAOZgVwyAiUY8frfTue3rFMb75K
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

e3:c3:41:f4:9f:ae:8a:d7:f0:d8:16:05:cf:d2:19:5d:b5:71:83:ce:b0:50:81:51:0c:66:f0:63:1a:73:63:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

OU=Fredspiben Clathraceous\ ,O=Unitarer,L=Hollywood,ST=Florida,C=US,1.2.840.113549.1.9.1=#0c1f496e746572657373616e7465737465404578747261646974696f6e2e636f6d

Chains

Jul 20, 2023

PE Signature issue

Digest

b1:5e:0f:e9:67:5e:9f:0a:05:dd:18:d1:ab:00:c5:73:6f:df:c3:b1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

OU=Fredspiben Clathraceous\ ,O=Unitarer,L=Hollywood,ST=Florida,C=US,1.2.840.113549.1.9.1=#0c1f496e746572657373616e7465737465404578747261646974696f6e2e636f6d

Chains

Jul 20, 2023

Subject

OU=Fredspiben Clathraceous\ ,O=Unitarer,L=Hollywood,ST=Florida,C=US,1.2.840.113549.1.9.1=#0c1f496e746572657373616e7465737465404578747261646974696f6e2e636f6d

Serial Number

24:98:2c:82:b7:41:05:00:80:c8:a1:22:15:50:71:81:38:ab:65:07

Issuer

OU=Fredspiben Clathraceous\ ,O=Unitarer,L=Hollywood,ST=Florida,C=US,1.2.840.113549.1.9.1=#0c1f496e746572657373616e7465737465404578747261646974696f6e2e636f6d

Timespan

Jun 18, 2023 - Jun 17, 2026

Subject

OU=Fredspiben Clathraceous\ ,O=Unitarer,L=Hollywood,ST=Florida,C=US,1.2.840.113549.1.9.1=#0c1f496e746572657373616e7465737465404578747261646974696f6e2e636f6d

Serial Number

24:98:2c:82:b7:41:05:00:80:c8:a1:22:15:50:71:81:38:ab:65:07

Issuer

OU=Fredspiben Clathraceous\ ,O=Unitarer,L=Hollywood,ST=Florida,C=US,1.2.840.113549.1.9.1=#0c1f496e746572657373616e7465737465404578747261646974696f6e2e636f6d

Timespan

Jun 18, 2023 - Jun 17, 2026

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

Major OS version

Entry point

13054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance