SecuriteInfo[.]com[.]W32[.]Kryptik[.]KMY[.]gen[.]Eldorado[.]32288[.]31536[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.W32.Kryptik.KMY.gen.Eldorado.32288.31536.exe
Size 267KB
Sample230915-1hlldsab49
SHA256 7a3ed98aad8f0e6cc774200cdc7b35b86bffdb5f5ce23e8750acb0945d3c78fd
MD5 a40f5d4fa7c449ca99ffe9191ef03988
SHA1 1ecb44d3f7b583463785ba03e57c85d6f452f98e
SHA512 c60aa310ee7f5ca87f4b17375da8c18314b26307a131cf0ea0548caabc760b2d30d83c26742f10a1588a92a840365f54cfd5833deb529275de4403cf8be50822
SSDEEP 6144:QqN+ovUltzqjf2ld/OdtHnhGrJCfH+XQ:QD4UHzU8IHhuoi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Kryptik.KMY.gen.Eldorado.32288.31536.exe

File Explorer

SecuriteInfo.com.W32.Kryptik.KMY.gen.Eldorado.32288.31536.exe

.exe 267KB

SecuriteInfo.com.W32.Kryptik.KMY.gen.Eldorado.32288.31536.exe

IMPHASH be971270bdc2a8fd4ff1ab41bb993dd1
SHA256 7a3ed98aad8f0e6cc774200cdc7b35b86bffdb5f5ce23e8750acb0945d3c78fd
MD5 a40f5d4fa7c449ca99ffe9191ef03988
SHA1 1ecb44d3f7b583463785ba03e57c85d6f452f98e
SHA512 c60aa310ee7f5ca87f4b17375da8c18314b26307a131cf0ea0548caabc760b2d30d83c26742f10a1588a92a840365f54cfd5833deb529275de4403cf8be50822
SSDEEP 6144:QqN+ovUltzqjf2ld/OdtHnhGrJCfH+XQ:QD4UHzU8IHhuoi
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23673

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode MoveFileExA BuildCommDCBAndTimeoutsA SystemTimeToTzSpecificLocalTime InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize AddConsoleAliasW SetVolumeMountPointW BackupSeek GetModuleHandleW GenerateConsoleCtrlEvent GetNumberFormatA SetFileTime GetConsoleAliasExesW EnumTimeFormatsA GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread FatalAppExitW CopyFileW SetConsoleCP GetVolumePathNameA GetStartupInfoW CreateMailslotW CreateJobObjectA InterlockedExchange SetThreadLocale OpenMutexW GetConsoleAliasesLengthW GetLastError GetCurrentDirectoryW SetLastError PeekConsoleInputW EnumSystemCodePagesW LoadLibraryA GetProcessId InterlockedExchangeAdd LocalAlloc GetFileType RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA GlobalWire EnumDateFormatsA GetModuleHandleA SetLocaleInfoW FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW DeleteFileW CreateFileW EnumCalendarInfoA GetCommandLineW FindFirstFileW EnumResourceNamesW GetComputerNameA GetHandleInformation ReadFile FlushFileBuffers GetStringTypeW LCMapStringW HeapFree HeapAlloc GetProcAddress ExitProcess DecodePointer DeleteFileA EncodePointer HeapReAlloc HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleW CloseHandle

user32

GetListBoxInfo CharUpperW

gdi32

GetCharWidthW GetTextFaceW SelectPalette

advapi32

LookupAccountSidW

shell32

DragFinish

ole32

CoGetInstanceFromFile

winhttp

WinHttpWriteData