General

  • Target
    Stolprende.exe
  • Size 685KB
  • Sample240506-ppln7abf61
  • SHA256 b073ae4a0ecc5af2e1e13862e97aa242768fe6f3ce1a0eb5bce474be65a5a0a7
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Stolprende.exe
    .exe 685KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • Fordre/licensors.opf
    3KB
  • Fordre/ligningsraadets.bro
    1KB
  • Glasfiber/Forblindelsen/Hunknnets/Modehandlerens.con
    3KB
  • Handout/Forventningsfuldt/Stjplagens/Undefiably/nerve.med
    1KB
  • Handout/Forventningsfuldt/Stjplagens/Undefiably/olefines.erk
    1KB
  • Handout/Forventningsfuldt/Stjplagens/Undefiably/ombetrkke.ser
    3KB
  • Handout/Forventningsfuldt/Stjplagens/Undefiably/pendent.aut
    1KB
  • Knusene/Whatchamacallit1.soa
    2KB
  • Knusene/abcen.vil
    3KB
  • Knusene/applikeredes.ana
    2KB
  • Knusene/archiheretical.vag
    3KB
  • Knusene/bekransninger.tra
    3KB
  • Knusene/betalingsbetingelserne.par
    1KB
  • Knusene/blankminded.tum
    1KB
  • Knusene/blommehave.vol
    1KB
  • Knusene/brndselscellen.sac
    3KB
  • Lidkbets/personalerabattens.bus
    3KB
  • Lidkbets/pistole.obs
    1KB
  • Lidkbets/puton.zea
    1KB
  • Lidkbets/realive.kil
    2KB
  • Lidkbets/rentegnet.tor
    1KB
  • Lidkbets/revideringers.ati
    3KB
  • Lidkbets/rindekrsel.tav
    1KB
  • Lidkbets/shaken.krn
    2KB
  • Lidkbets/signetringes.out
    1KB
  • Lidkbets/skindhuernes.kon
    2KB
  • Lidkbets/slagordners.owe
    3KB
  • Lidkbets/sleeplessess.kan
    1KB
  • Lidkbets/slutnotens.bly
    2KB
  • Lidkbets/smaaprogrammer.coc
    1KB
  • Lidkbets/smudsigeste.inf
    1KB
  • Lidkbets/sprnglrde.non
    3KB
  • Lidkbets/spurlet.opt
    3KB
  • Lidkbets/stallard.fum
    2KB
  • Lidkbets/stamp.cuf
    2KB
  • Lidkbets/suburbanisation.lar
    2KB
  • Lidkbets/superorganizes.bef
    2KB
  • Lidkbets/syconoid.unp
    1KB
  • Lidkbets/teoribogen.dag
    1KB
  • Lidkbets/timeworks.med
    2KB
  • Lidkbets/transseksuelt.rve
    3KB
  • Lidkbets/trigonite.per
    2KB
  • Lidkbets/tumulter.per
    3KB
  • Lidkbets/udspecialiseringen.sul
    2KB
  • Lidkbets/unflock.hal
    1KB
  • Lidkbets/upflung.cop
    3KB
  • Lidkbets/utero.dem
    1KB
  • Lidkbets/variabilitetens.ark
    1KB
  • Lidkbets/weam.rum
    2KB
  • Lidkbets/yngres.emb
    2KB
  • Massefabrikation/Bzerens/Rustpletter/herbist/Rgslrs.afp
    3KB
  • Massefabrikation/Bzerens/Rustpletter/herbist/Sakell.oto
    3KB
  • Ostepulverets249/Antiegotistical/Leaden/Bortvisningens228.Hyd
    389KB
  • Prancome250.res
    1KB
  • Solingklasses/Hemadromometer/bulken.bas
    3KB
  • Solingklasses/Hemadromometer/charlies.dig
    2KB
  • Solingklasses/Hemadromometer/conelet.gen
    3KB
  • Solingklasses/Hemadromometer/cryptococci.las
    3KB
  • Solingklasses/Hemadromometer/deputer.mor
    3KB
  • Solingklasses/Hemadromometer/endamoebae.ces
    1KB
  • Solingklasses/Hemadromometer/favositidae.ant
    3KB
  • Solingklasses/Hemadromometer/filtervrdierne.unt
    1KB
  • Solingklasses/Hemadromometer/fiskestangens.cot
    2KB
  • Sympatiskes/roberd/Benzinforhandlernes/Smdenavnes.syn
    2KB
  • Sympatiskes/roberd/Benzinforhandlernes/Subskribentens98.hyl
    1KB
  • Sympatiskes/roberd/Benzinforhandlernes/Telesia83.uly
    1KB
  • Sympatiskes/roberd/Benzinforhandlernes/Tilslutningspligten83.bjr
    1KB
  • Tironian/Tvisteemner/Fortjenstfuld.for
    3KB
  • Tironian/Tvisteemner/Gears.hum
    1KB
  • Tironian/Tvisteemner/Halmstraas212.rec
    1KB
  • Tironian/Tvisteemner/Kvajende101.nea
    2KB
  • Tironian/Tvisteemner/Metusalem.afl
    3KB
  • Tjenerindernes177/forelbigt.abd
    2KB
  • Tjenerindernes177/forestilles.reb
    1KB
  • Tjenerindernes177/grdesmutte.pen
    2KB
  • Tjenerindernes177/hejserne.asa
    1KB
  • Tjenerindernes177/hofteholdernes.sin
    1KB
  • Tjenerindernes177/husfdrenes.udg
    3KB
  • Tjenerindernes177/invigorated.ski
    1KB
  • Tjenerindernes177/job.aln
    1KB
  • Tjenerindernes177/kaput.pre
    3KB
  • Tjenerindernes177/kendeordets.zug
    1KB
  • Tjenerindernes177/khat.ind
    1KB
  • Tjenerindernes177/kostaldens.aut
    2KB
  • Tjenerindernes177/kromosomers.the
    2KB
  • Tjenerindernes177/larrikiness.flo
    3KB
  • Tjenerindernes177/leucocythaemic.vis
    2KB
  • Uheldene/Bearbejdede/Pyongyang.gab
    3KB
  • Uheldene/Bearbejdede/Quirked.sma
    1KB
  • Yawey/Coatie/Refroid.sol
    3KB
  • Yawey/Coatie/Revelries.kon
    3KB
  • aarsfester/shamanisme/Birdsong61.alb
    1KB
  • aarsfester/shamanisme/Carpocephalum.hel
    3KB
  • brickyard/Sengelinned235/lunefulde.dip
    2KB
  • brickyard/Sengelinned235/medicochirurgic.her
    3KB
  • brickyard/Sengelinned235/meningorachidian.qua
    1KB
  • brickyard/Sengelinned235/multielectrode.txt
    502B
  • sulforicinoleate/Typeregningen.non
    3KB
  • sulforicinoleate/Upharsin.hyd
    1KB
  • sulforicinoleate/Voluptuous.fol
    3KB

Stolprende.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 b073ae4a0ecc5af2e1e13862e97aa242768fe6f3ce1a0eb5bce474be65a5a0a7
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
80:3c:7d:3d:55:4e:c2:9f:5b:ae:53:89:c4:c1:25:64:4b:db:a7:8e:b5:c7:cc:73:84:ce:74:ec:d0:96:b8:20
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Uncreaturely,OU=Elektricitetens Debarkeredes Precounsellor\ ,O=Uncreaturely,L=Wachenheim,ST=Rheinland-Pfalz,C=DE,1.2.840.113549.1.9.1=#0c124a6f756d626f40536f6369616c732e556473
Chains

May 6, 2024

PE Signature issue

Digest
28:78:1d:e8:72:50:d3:06:01:3d:24:f4:95:97:7e:f8:50:c2:7d:19
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Uncreaturely,OU=Elektricitetens Debarkeredes Precounsellor\ ,O=Uncreaturely,L=Wachenheim,ST=Rheinland-Pfalz,C=DE,1.2.840.113549.1.9.1=#0c124a6f756d626f40536f6369616c732e556473
Chains

May 3, 2024

Minor OS version
0
Major OS version
4
Entry point
13117
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths