Tra1ner[.]rar | Triage™

General

Target
Tra1ner.rar
Size 85.7MB
Sample240223-ntssmafh47
SHA256 d34a7eb2556dc71fb7e30c68045bb49de993f314bfc54f3b79914f81814b0dbf
MD5 95d6b107db354bbb1feb8ec67e957d6e
SHA1 217c6a02f08e5e1fbbd2e29914f53221a113eff0
SHA512 8b7255ef5602e6b6a63f2316d2505ce4b2b4ac98c62fd35e07ea2db618864d92da6a8c6efc65102749b635d07f5cea4e112123eb0bd1ad369ef4977687046d38
SSDEEP 1572864:hfISPzFQBRYn+yEXY/Jouqh2p8Cy6IrYWbgRVBUjC1wh3SF3nvDqtKnp7Y:hwSxQMn+yEXYRou40y7tgR717hvDq87Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Trainer.exe

File Explorer

Tra1ner.rar

.rar 85.7MB
Trainer.exe

.exe 297KB
config.dll

85.3MB

Tra1ner.rar

SHA256 d34a7eb2556dc71fb7e30c68045bb49de993f314bfc54f3b79914f81814b0dbf
MD5 95d6b107db354bbb1feb8ec67e957d6e
SHA1 217c6a02f08e5e1fbbd2e29914f53221a113eff0
SHA512 8b7255ef5602e6b6a63f2316d2505ce4b2b4ac98c62fd35e07ea2db618864d92da6a8c6efc65102749b635d07f5cea4e112123eb0bd1ad369ef4977687046d38
SSDEEP 1572864:hfISPzFQBRYn+yEXY/Jouqh2p8Cy6IrYWbgRVBUjC1wh3SF3nvDqtKnp7Y:hwSxQMn+yEXYRou40y7tgR717hvDq87Y
MD5 SHA1 SHA512 SSDEEP

Password

2024

Trainer.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6cda1908e8de75b4285175306ff7396d75599b59cad4828a424d3f6b00b5d849
MD5 44b8777af0485153ac9a64c1d60335c3
SHA1 793080149efc516cdb962418599f51a6d9a7293f
SHA512 41d10fab420cbacf6d29400dbaf5aa1ba37349e24a3aea4aa7f023fcba51eb183208f006e6451d0b901d9df2e9338ca3bd266698723256954e667a01d375151d
SSDEEP 6144:6XXoyOBreyl+AdeJ5+mBY8BU/pfkAM9ZiKfMQCs:goPlFeJ5+FoUxfrja
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

2024

Minor OS version

0

Major OS version

4

Entry point

309422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Rolling.pdb

Tra1ner.rar

Trainer.exe

mscoree

dotnet

config.dll

Sharing

General

Malware Config

Signatures

File Explorer

Tra1ner.rar

Trainer.exe

mscoree

dotnet

config.dll