Overview
overview
7Static
static
7Nova pasta (3).rar
windows10-2004-x64
3Nova pasta...up.exe
windows10-2004-x64
7Nova pasta...in.zip
windows10-2004-x64
1SaltysDDM-...DME.md
windows10-2004-x64
3SaltysDDM-...DM.ahk
windows10-2004-x64
3SaltysDDM-...ed.png
windows10-2004-x64
3SaltysDDM-...ge.png
windows10-2004-x64
3SaltysDDM-...10.png
windows10-2004-x64
3SaltysDDM-...15.png
windows10-2004-x64
3SaltysDDM-...20.png
windows10-2004-x64
3SaltysDDM-...25.png
windows10-2004-x64
3SaltysDDM-.../5.png
windows10-2004-x64
3SaltysDDM-.../6.png
windows10-2004-x64
3SaltysDDM-.../7.png
windows10-2004-x64
3SaltysDDM-.../8.png
windows10-2004-x64
3SaltysDDM-.../9.png
windows10-2004-x64
3SaltysDDM-...MM.png
windows10-2004-x64
3SaltysDDM-...MM.png
windows10-2004-x64
3SaltysDDM-...ed.png
windows10-2004-x64
3SaltysDDM-...ge.png
windows10-2004-x64
3SaltysDDM-...10.png
windows10-2004-x64
3SaltysDDM-...15.png
windows10-2004-x64
3SaltysDDM-...20.png
windows10-2004-x64
3SaltysDDM-...25.png
windows10-2004-x64
3SaltysDDM-.../5.png
windows10-2004-x64
3SaltysDDM-.../6.png
windows10-2004-x64
3SaltysDDM-.../7.png
windows10-2004-x64
3SaltysDDM-.../8.png
windows10-2004-x64
3SaltysDDM-.../9.png
windows10-2004-x64
3SaltysDDM-...MM.png
windows10-2004-x64
3SaltysDDM-...MM.png
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Nova pasta (3).rar
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
Nova pasta (3)/AutoHotkey_2.0.12_setup.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Nova pasta (3)/SaltysDDM-main.zip
Resource
win10v2004-20240412-en
Behavioral task
behavioral4
Sample
SaltysDDM-main/README.md
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
SaltysDDM-main/SaltysDDM/DDM.ahk
Resource
win10v2004-20240412-en
Behavioral task
behavioral6
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Disconnected.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/EssenceStorage.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral8
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/10.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/15.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral10
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/20.png
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/25.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral12
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/5.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/6.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral14
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/7.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/8.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral16
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/9.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/PlayMM.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral18
Sample
SaltysDDM-main/SaltysDDM/Images/1920x1080p/SkipMM.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Disconnected.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral20
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/EssenceStorage.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/10.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral22
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/15.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/20.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral24
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/25.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/5.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral26
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/6.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/7.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral28
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/8.png
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/9.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral30
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/PlayMM.png
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
SaltysDDM-main/SaltysDDM/Images/2560x1440p/SkipMM.png
Resource
win10v2004-20240412-en
General
-
Target
Nova pasta (3).rar
-
Size
2.9MB
-
MD5
1fa1ac95e3386385c7e00613adf33650
-
SHA1
3b17ee0c6b544d8160bf068cf17ba4728c89cc55
-
SHA256
f88f46b5bd766b2e5f2d2fc7ab8e6f6b353eea76dd9292aadda139dee6b00083
-
SHA512
42224409e3f682080838951360c198cacdf2c4c38383fbaf512335f0bc7024558f56719f5784aedb23919bdda18653bc106acdb2e40c9bf4e601a44d2f5a82f1
-
SSDEEP
49152:1r1IWQV8fQllftGd/OR0QObjPOJSY8tXIr/N2g/fRDhgjruXBbDbtIq7:1r1IWboEd/ORSelSGIg/hhcu5vmq7
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Nova pasta (3)/AutoHotkey_2.0.12_setup.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Nova pasta (3)/AutoHotkey_2.0.12_setup.exe
Files
-
Nova pasta (3).rar.rar
-
Nova pasta (3)/AutoHotkey_2.0.12_setup.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Nova pasta (3)/SaltysDDM-main.zip.zip
-
SaltysDDM-main/README.md
-
SaltysDDM-main/SaltysDDM/DDM.ahk
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Disconnected.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/EssenceStorage.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/10.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/15.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/20.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/25.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/5.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/6.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/7.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/8.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/Levels/9.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/PlayMM.png.png
-
SaltysDDM-main/SaltysDDM/Images/1920x1080p/SkipMM.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Disconnected.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/EssenceStorage.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/10.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/15.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/20.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/25.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/5.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/6.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/7.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/8.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/Levels/9.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/PlayMM.png.png
-
SaltysDDM-main/SaltysDDM/Images/2560x1440p/SkipMM.png.png