SecuriteInfo[.]com[.]W32[.]Kryptik[.]KSH[.]gen[.]Eldorado[.]16539[.]23365[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.W32.Kryptik.KSH.gen.Eldorado.16539.23365.exe
Size 2.2MB
Sample230930-at2tmsgh75
SHA256 e7f0a03d34cf93e1dc0bc78b4d08436de180e22fada1628810873683b9b2ee73
MD5 5e403aaba5cde3f98d71d0b94c0538b1
SHA1 1c3a1f3e360d23a50dc2c2ade840cace7ef237fc
SHA512 f19439bfdfbd7e81b502048ecebae7b85ea1bb282a1c59f89dce8db0c60da684bb9a5f3bdcdbb77c168c715be859e102c6b70ac3a40caeb85fff8dff3627f12a
SSDEEP 49152:WfJPU05snBtsnHtkMJqk5DxXkFXMnaZKSMUxMdKxk0/R8T3BN:WClsHKM4oyFIWK+mlTRN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Kryptik.KSH.gen.Eldorado.16539.23365.exe

File Explorer

SecuriteInfo.com.W32.Kryptik.KSH.gen.Eldorado.16539.23365.exe

.exe 2.2MB

SecuriteInfo.com.W32.Kryptik.KSH.gen.Eldorado.16539.23365.exe

IMPHASH 1d0e3506c01cb61e9312cbea4911e92e
SHA256 e7f0a03d34cf93e1dc0bc78b4d08436de180e22fada1628810873683b9b2ee73
MD5 5e403aaba5cde3f98d71d0b94c0538b1
SHA1 1c3a1f3e360d23a50dc2c2ade840cace7ef237fc
SHA512 f19439bfdfbd7e81b502048ecebae7b85ea1bb282a1c59f89dce8db0c60da684bb9a5f3bdcdbb77c168c715be859e102c6b70ac3a40caeb85fff8dff3627f12a
SSDEEP 49152:WfJPU05snBtsnHtkMJqk5DxXkFXMnaZKSMUxMdKxk0/R8T3BN:WClsHKM4oyFIWK+mlTRN
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

105740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocStringLen VariantClear SysStringLen

user32

DialogBoxParamW SetWindowLongW GetWindowLongW GetDlgItem LoadStringW CharUpperW DestroyWindow EndDialog PostMessageW SetWindowTextW ShowWindow MessageBoxW SetTimer SendMessageW LoadIconW KillTimer

shell32

ShellExecuteExW

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset wcsstr free malloc memcpy _CxxThrowException _purecall memmove memcmp wcscmp __CxxFrameHandler

kernel32

GetStartupInfoA InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW ResetEvent SetEvent CreateEventW lstrlenW lstrcatW VirtualFree VirtualAlloc Sleep GetStdHandle GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetFileInformationByHandle GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GetCurrentThreadId GetTickCount GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW GetModuleHandleW GetProcAddress RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime GetSystemDirectoryW GetCurrentProcessId FormatMessageW LocalFree GetModuleFileNameW LoadLibraryExW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetVersionExW GetCommandLineW CreateProcessW CloseHandle WaitForSingleObject