Overview

overview

10

Static

static

3

d9e3c83508...27.exe

windows7-x64

10

d9e3c83508...27.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Curledness...ds.vbs

windows7-x64

1

Curledness...ds.vbs

windows10-2004-x64

1

Curledness...og.dll

windows7-x64

1

Curledness...og.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9e3c8350875e4f0e74d207351f5db02cfb0e5edd0b62743c38343e38e981727.exe

  • Size

    622KB

  • MD5

    9aae07beb10162a2d525dd3aad707e26

  • SHA1

    387c1cd54061a21941b366d15700c462c5cd2e96

  • SHA256

    d9e3c8350875e4f0e74d207351f5db02cfb0e5edd0b62743c38343e38e981727

  • SHA512

    f31c57173a48db8620dd952bc0180aa6557a0a656e0df6168b5c62eae39fa90547ef350fde10b747bc2c4996c6e22f7f1f4750a63469fe1dd91d5b821575f325

  • SSDEEP

    12288:MkKnLVq69Hrc82yTPZodHtRWztKK7RG1Jz8Ap2x9c8Q04fz/sGoisDsCVVLuSjFs:AQy6ONsqLumFHnHzFTrS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d9e3c8350875e4f0e74d207351f5db02cfb0e5edd0b62743c38343e38e981727.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • Curledness/Hovedplanerne/Syndactyl/Engross/keywords.txt
    .vbs
  • Curledness/Hovedplanerne/Syndactyl/Engross/vtablog.dll
    .dll windows:4 windows x64 arch:x64

    aa85e3b541f368426acfaa9cfbab3c56


    Headers

    Imports

    Exports

    Sections

  • Underlabourer/Hoofbound/x-office-spreadsheet-template.png
    .png
  • rawbone.Pol