SecuriteInfo[.]com[.]W32[.]Kryptik[.]KMY[.]gen[.]Eldorado[.]22433[.]13822

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.W32.Kryptik.KMY.gen.Eldorado.22433.13822
Size 267KB
Sample231013-ffdsjsgd37
SHA256 9e7c8aea93412acc8d8de3a956e8485a86caf40c626b2abd491bd5404df1bfbb
MD5 24dbebd26b029b6304bed121b5af43c4
SHA1 6657d33ab6958b155c67cc12d55647b1b0bc28ad
SHA512 470559b9db03a1b3c10a6e91a1e03c6b15979a3d754c9f2a5684a06e87a9722bd7929872fa8cb15b8c5f183fead77272e57966095b493a1b608e93130db4ddf8
SSDEEP 3072:QXUMeUgFUvuQ+qOsW8gPwI0eNcCOdvriM5vVos1lRLootRbrNpm:OUMeAvuQ+qOsWttcpRriMMIS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Kryptik.KMY.gen.Eldorado.22433.13822

File Explorer

SecuriteInfo.com.W32.Kryptik.KMY.gen.Eldorado.22433.13822

.exe 267KB

SecuriteInfo.com.W32.Kryptik.KMY.gen.Eldorado.22433.13822

IMPHASH be971270bdc2a8fd4ff1ab41bb993dd1
SHA256 9e7c8aea93412acc8d8de3a956e8485a86caf40c626b2abd491bd5404df1bfbb
MD5 24dbebd26b029b6304bed121b5af43c4
SHA1 6657d33ab6958b155c67cc12d55647b1b0bc28ad
SHA512 470559b9db03a1b3c10a6e91a1e03c6b15979a3d754c9f2a5684a06e87a9722bd7929872fa8cb15b8c5f183fead77272e57966095b493a1b608e93130db4ddf8
SSDEEP 3072:QXUMeUgFUvuQ+qOsW8gPwI0eNcCOdvriM5vVos1lRLootRbrNpm:OUMeAvuQ+qOsWttcpRriMMIS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23673

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode MoveFileExA BuildCommDCBAndTimeoutsA SystemTimeToTzSpecificLocalTime InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize AddConsoleAliasW SetVolumeMountPointW BackupSeek GetModuleHandleW GenerateConsoleCtrlEvent GetNumberFormatA SetFileTime GetConsoleAliasExesW EnumTimeFormatsA GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread FatalAppExitW CopyFileW SetConsoleCP GetVolumePathNameA GetStartupInfoW CreateMailslotW CreateJobObjectA InterlockedExchange SetThreadLocale OpenMutexW GetConsoleAliasesLengthW GetLastError GetCurrentDirectoryW SetLastError PeekConsoleInputW EnumSystemCodePagesW LoadLibraryA GetProcessId InterlockedExchangeAdd LocalAlloc GetFileType RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA GlobalWire EnumDateFormatsA GetModuleHandleA SetLocaleInfoW FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW DeleteFileW CreateFileW EnumCalendarInfoA GetCommandLineW FindFirstFileW EnumResourceNamesW GetComputerNameA GetHandleInformation ReadFile FlushFileBuffers GetStringTypeW LCMapStringW HeapFree HeapAlloc GetProcAddress ExitProcess DecodePointer DeleteFileA EncodePointer HeapReAlloc HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleW CloseHandle

user32

GetListBoxInfo CharUpperW

gdi32

GetCharWidthW GetTextFaceW SelectPalette

advapi32

LookupAccountSidW

shell32

DragFinish

ole32

CoGetInstanceFromFile

winhttp

WinHttpWriteData