SecuriteInfo[.]com[.]W32[.]Kryptik[.]LKE[.]gen[.]Eldorado[.]4295[.]31394[.]exe

General

Target
SecuriteInfo.com.W32.Kryptik.LKE.gen.Eldorado.4295.31394.exe
Size 264KB
Sample240118-kl1lqagbbk
SHA256 da9f9e614bbc097ddf505d1902f453fcf9fa6bfb7398fa6be77f86aba5843320
MD5 998deefc6289d681bf6b559c6aa3270a
SHA1 54a511b113d76def3c90336617ad3eff07ed992c
SHA512 289932d0f02e61e89495160570a34767469acf0b2568eedd30211e296167429fa23905275d21e8e45a75c12faf2edff5773b45f6232239090503f805ec1bf134
SSDEEP 3072:nERLW/tPcSzN0O2DTY5il0AoSr8BOpvHEwAyHt03vTmLDKeIxkrbQ/BEO8zGV7Ia:nERUqhEgV80NEwAP6XKerkuhaEQRJR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Kryptik.LKE.gen.Eldorado.4295.31394.exe

File Explorer

SecuriteInfo.com.W32.Kryptik.LKE.gen.Eldorado.4295.31394.exe

.exe 264KB

SecuriteInfo.com.W32.Kryptik.LKE.gen.Eldorado.4295.31394.exe

IMPHASH 4f8e2cfb7a56570f82711379d2e1b928
SHA256 da9f9e614bbc097ddf505d1902f453fcf9fa6bfb7398fa6be77f86aba5843320
MD5 998deefc6289d681bf6b559c6aa3270a
SHA1 54a511b113d76def3c90336617ad3eff07ed992c
SHA512 289932d0f02e61e89495160570a34767469acf0b2568eedd30211e296167429fa23905275d21e8e45a75c12faf2edff5773b45f6232239090503f805ec1bf134
SSDEEP 3072:nERLW/tPcSzN0O2DTY5il0AoSr8BOpvHEwAyHt03vTmLDKeIxkrbQ/BEO8zGV7Ia:nERUqhEgV80NEwAP6XKerkuhaEQRJR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9413

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeEnvironmentStringsA GetTickCount LocalFlags GetConsoleAliasesA TlsSetValue LoadLibraryW GetLocaleInfoW HeapDestroy GetAtomNameW GetModuleFileNameW IsBadStringPtrA SetConsoleTitleA WritePrivateProfileStringW InterlockedExchange GetLastError SetLastError GetConsoleAliasExesLengthA VirtualAlloc LoadLibraryA OpenWaitableTimerW LocalAlloc GetTapeParameters EraseTape FreeEnvironmentStringsW CompareStringA SetCalendarInfoA LocalFree SetFileAttributesW EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW GetProcAddress GetEnvironmentVariableW EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree IsProcessorFeaturePresent Sleep HeapSize GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW MultiByteToWideChar IsValidLocale

user32

GetMonitorInfoA GetKeyNameTextW SetActiveWindow

advapi32

OpenEventLogA

Sharing