TuTutorial - KTNE[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
TuTutorial - KTNE.rar
Size 65.5MB
Sample240223-ar1tkahd44
SHA256 48ddf7dff79ea60daf404c21840c3b0ff1c31bd95111c70887440f6fda9dd5ef
MD5 99e47429246a9935b79cc1fa0ad51ea0
SHA1 90c95d4d55133820c1824bc09a73354bb3965ed0
SHA512 a8b0c0bcff038f09bce9d29ea0d6ede98db0f3c85668a5108d68ee367d6edb4519eb5c5769f0f97d3ebb61a9e622d416f3e26b58a8df6bd076d42ffd4958c453
SSDEEP 1572864:4nhH8rTI314adjf+olgYjfloYO5qhzhT27ZKrhKx5:4hCTwW2fyMf+7whz12700x5
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Tututorial - KTNE/KTNE.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Tututorial - KTNE/KTNE.exe

File Explorer

TuTutorial - KTNE.rar

.rar 65.5MB
KTNE - Manual en Español.pdf

.pdf 1.6MB
Tututorial - KTNE/Bomb-Defusal-Manual.pdf

.pdf 914KB
Tututorial - KTNE/KTNE.exe

.exe 63.7MB

TuTutorial - KTNE.rar

SHA256 48ddf7dff79ea60daf404c21840c3b0ff1c31bd95111c70887440f6fda9dd5ef
MD5 99e47429246a9935b79cc1fa0ad51ea0
SHA1 90c95d4d55133820c1824bc09a73354bb3965ed0
SHA512 a8b0c0bcff038f09bce9d29ea0d6ede98db0f3c85668a5108d68ee367d6edb4519eb5c5769f0f97d3ebb61a9e622d416f3e26b58a8df6bd076d42ffd4958c453
SSDEEP 1572864:4nhH8rTI314adjf+olgYjfloYO5qhzhT27ZKrhKx5:4hCTwW2fyMf+7whz12700x5
MD5 SHA1 SHA512 SSDEEP

Password

Tututorial - KTNE/KTNE.exe

SHA256 4db4d30b24a7fe1504ccc3bbd6eda776f446016f57a8d4680f9123561a94bb49
MD5 cf719e6de02adfeb8b50f7ecee35ccf9
SHA1 3da4fc1ffbf2b7c4c045b6e87b567c86b846dab2
SHA512 83d8dea2df5a8cb19d3d45f93fb65f578b4c677a167f702b7720fb7b4866d0446c04c642d4d92c3333e26df29b0f7e5c6db0ea3cb3a4123d49dd708ee7af8c36
SSDEEP 1572864:8hH8rTI314adjf+olgYjfloYO5qhzhT27ZKrhKx:+CTwW2fyMf+7whz12700x
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3498672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths