General

  • Target

    adolf2.0.zip

  • Size

    44.0MB

  • MD5

    f6626b7cfa8356048c818b694a1ea1c2

  • SHA1

    b1a9b423e4356829f2eddc4ad2d324927fd13f2d

  • SHA256

    e69317eaf6539042dfdc3535efaa90e50c2403db2da54dc126ca88d3133817c4

  • SHA512

    421edc114c2831b1e6d91e2327b5be218f726cde3206d4d525c1965f9776b2f6b743a2c3041af13b960f40bb0d40d8342a150b1f585c9fee6a94f456fe2e366b

  • SSDEEP

    786432:4xJx0x+dLNMWDkCkCYEHnj7vcZy0GYGSdLBesNykMgnWpmpMJVW9idWOC5v:V+NNMWAtTEHnj7vEG3urcYnwsMJVW9iS

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • adolf2.0.zip
    .zip
  • adolf.lnk
    .lnk
  • adolf/PySide6/Qt6Core.dll
    .dll windows:6 windows x64 arch:x64

    c7405623ed84a52f086455c921b9f033


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6Gui.dll
    .dll windows:6 windows x64 arch:x64

    bac9a2bab740393ae70c5f8feff5520c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6Network.dll
    .dll windows:6 windows x64 arch:x64

    c31e33e61c9ffa229a0c1fd106264834


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6OpenGL.dll
    .dll windows:6 windows x64 arch:x64

    939bcdaa287fe608333e423d1d375f12


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6Pdf.dll
    .dll windows:6 windows x64 arch:x64

    a8954411a48a52c4e5c3a2e2ceecab9b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6Qml.dll
    .dll windows:6 windows x64 arch:x64

    b7e3ccccdddaa1865b41e7fc4b1c20fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6QmlModels.dll
    .dll windows:6 windows x64 arch:x64

    9fe96e3546a870cc71c6916b1716fa9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6Quick.dll
    .dll windows:6 windows x64 arch:x64

    53deaecf96d701ff1e25b565467bfeea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6Svg.dll
    .dll windows:6 windows x64 arch:x64

    97f144c490afedc451d7170dbbc1d912


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6VirtualKeyboard.dll
    .dll windows:6 windows x64 arch:x64

    8490e3eae51c2d66c995b2c7145fda8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/Qt6Widgets.dll
    .dll windows:6 windows x64 arch:x64

    f12d995bdf2bf9a3a42648ced9bc91d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/QtCore.pyd
    .dll windows:6 windows x64 arch:x64

    cb31b43390ef5c7cc35e6395202c784a


    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/QtGui.pyd
    .dll windows:6 windows x64 arch:x64

    07170a349265286da756b679efcfbb6c


    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/QtNetwork.pyd
    .dll windows:6 windows x64 arch:x64

    20846c305b2b329a98df6cca1c6b2935


    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/QtWidgets.pyd
    .dll windows:6 windows x64 arch:x64

    24ac4691dcbb6d88eab8bf9ffc9cd8a2


    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/opengl32sw.dll
    .dll windows:6 windows x64 arch:x64

    7c204a15e246f025a7513db5a566a6e9


    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/generic/qtuiotouchplugin.dll
    .dll windows:6 windows x64 arch:x64

    a313bdec5a024b44053ecb1e304c40e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    5dd7cbbaa807a34cab2f640429078294


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    9bd61da700521aad35370d97ba8ca11a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    4784effeb53fa639e44464df0c21ff46


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    5c2b5fec94cda30756ced53f8daf268c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    8607baed8280668f9cd92a88ab8d150c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qpdf.dll
    .dll windows:6 windows x64 arch:x64

    bae4749a1f0a6a738481519732cc7a08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    af81a1661103236e82203f19b71aef81


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    893b34d184c4ca000fe0869586b8a3a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    58b6b1b0575007c32e2eb74daebaaf2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    9b9a3e680b0b6fcecc6e402169ecc29d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    8162bd1e3c4565a1cdecc8a8a733a6ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/networkinformation/qnetworklistmanager.dll
    .dll windows:6 windows x64 arch:x64

    75575e4914580ec3792dcb432c34d899


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/platforminputcontexts/qtvirtualkeyboardplugin.dll
    .dll windows:6 windows x64 arch:x64

    b4109ae62c2f5856ee8dec1ce76cbf39


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/platforms/qdirect2d.dll
    .dll windows:6 windows x64 arch:x64

    44f530244d85f8db131729187a19a7c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/platforms/qminimal.dll
    .dll windows:6 windows x64 arch:x64

    a1841581b8c0446e3ef161b8a8ded788


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/platforms/qoffscreen.dll
    .dll windows:6 windows x64 arch:x64

    8355e996a13e176a69bde7e8839471f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    af53af6f54e73680695702afb63c0e9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    5964b07471b6a2339f6dd2ef02006152


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/tls/qcertonlybackend.dll
    .dll windows:6 windows x64 arch:x64

    321a5c6c31221f8c3d0a2e3526f2bc43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/tls/qopensslbackend.dll
    .dll windows:6 windows x64 arch:x64

    e0ad7da75263932e90229654f83b1082


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/plugins/tls/qschannelbackend.dll
    .dll windows:6 windows x64 arch:x64

    734ab3136c717dcceecadc73d055bc59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/pyside6.abi3.dll
    .dll windows:6 windows x64 arch:x64

    32b1783fde6fbcd5f400672921502987


    Headers

    Imports

    Exports

    Sections

  • adolf/PySide6/translations/qtbase_ar.qm
  • adolf/PySide6/translations/qtbase_bg.qm
  • adolf/PySide6/translations/qtbase_ca.qm
  • adolf/PySide6/translations/qtbase_cs.qm
  • adolf/PySide6/translations/qtbase_da.qm
  • adolf/PySide6/translations/qtbase_de.qm
  • adolf/PySide6/translations/qtbase_en.qm
  • adolf/PySide6/translations/qtbase_es.qm
  • adolf/PySide6/translations/qtbase_fa.qm
  • adolf/PySide6/translations/qtbase_fi.qm
  • adolf/PySide6/translations/qtbase_fr.qm
  • adolf/PySide6/translations/qtbase_gd.qm
  • adolf/PySide6/translations/qtbase_he.qm
  • adolf/PySide6/translations/qtbase_hr.qm
  • adolf/PySide6/translations/qtbase_hu.qm
  • adolf/PySide6/translations/qtbase_it.qm
  • adolf/PySide6/translations/qtbase_ja.qm
  • adolf/PySide6/translations/qtbase_ko.qm
  • adolf/PySide6/translations/qtbase_lv.qm
  • adolf/PySide6/translations/qtbase_nl.qm
  • adolf/PySide6/translations/qtbase_nn.qm
  • adolf/PySide6/translations/qtbase_pl.qm
  • adolf/PySide6/translations/qtbase_pt_BR.qm
  • adolf/PySide6/translations/qtbase_ru.qm
  • adolf/PySide6/translations/qtbase_sk.qm
  • adolf/PySide6/translations/qtbase_tr.qm
  • adolf/PySide6/translations/qtbase_uk.qm
  • adolf/PySide6/translations/qtbase_zh_CN.qm
  • adolf/PySide6/translations/qtbase_zh_TW.qm
  • adolf/VCRUNTIME140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/VCRUNTIME140_1.dll
    .dll windows:6 windows x64 arch:x64

    bf380ca954cbf10d1a4cef9ec18e46fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/WindowsSystemManager.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • WindowsSystemManager.pyc
  • adolf/_bz2.pyd
    .dll windows:6 windows x64 arch:x64

    d0a62ab71a2b2ca69c6aba1f0a37fcdd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/_ctypes.pyd
    .dll windows:6 windows x64 arch:x64

    de64e4a0e2dbc68a0b413ce8099db5c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/_decimal.pyd
    .dll windows:6 windows x64 arch:x64

    73c2b50451f272a440f47564c3cbd631


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/_hashlib.pyd
    .dll windows:6 windows x64 arch:x64

    b3b294bbb4a8941fd67b11ccbe0be65b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/_lzma.pyd
    .dll windows:6 windows x64 arch:x64

    c39c7a021b2adfc11bb34f105f70355e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/_multiprocessing.pyd
    .dll windows:6 windows x64 arch:x64

    ad5e2bc3f4742dadfaf9e74afc91a9f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/_queue.pyd
    .dll windows:6 windows x64 arch:x64

    d39104d594ed5774205f94197c63bfbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/_socket.pyd
    .dll .js windows:6 windows x64 arch:x64 polyglot

    332065e5d19d708832b034da27e5571a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/_ssl.pyd
    .dll windows:6 windows x64 arch:x64

    f5dfcd62c36effcb7c07509271acfce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/adolf.mp3
  • adolf/adolf.png
    .jpg
  • adolf/base_library.zip
    .zip
  • _collections_abc.pyc
  • _weakrefset.pyc
  • abc.pyc
  • codecs.pyc
  • collections/__init__.pyc
  • collections/abc.pyc
  • copyreg.pyc
  • encodings/__init__.pyc
  • encodings/aliases.pyc
  • encodings/ascii.pyc
  • encodings/base64_codec.pyc
  • encodings/big5.pyc
  • encodings/big5hkscs.pyc
  • encodings/bz2_codec.pyc
  • encodings/charmap.pyc
  • encodings/cp037.pyc
  • encodings/cp1006.pyc
  • encodings/cp1026.pyc
  • encodings/cp1125.pyc
  • encodings/cp1140.pyc
  • encodings/cp1250.pyc
  • encodings/cp1251.pyc
  • encodings/cp1252.pyc
  • encodings/cp1253.pyc
  • encodings/cp1254.pyc
  • encodings/cp1255.pyc
  • encodings/cp1256.pyc
  • encodings/cp1257.pyc
  • encodings/cp1258.pyc
  • encodings/cp273.pyc
  • encodings/cp424.pyc
  • encodings/cp437.pyc
  • encodings/cp500.pyc
  • encodings/cp720.pyc
  • encodings/cp737.pyc
  • encodings/cp775.pyc
  • encodings/cp850.pyc
  • encodings/cp852.pyc
  • encodings/cp855.pyc
  • encodings/cp856.pyc
  • encodings/cp857.pyc
  • encodings/cp858.pyc
  • encodings/cp860.pyc
  • encodings/cp861.pyc
  • encodings/cp862.pyc
  • encodings/cp863.pyc
  • encodings/cp864.pyc
  • encodings/cp865.pyc
  • encodings/cp866.pyc
  • encodings/cp869.pyc
  • encodings/cp874.pyc
  • encodings/cp875.pyc
  • encodings/cp932.pyc
  • encodings/cp949.pyc
  • encodings/cp950.pyc
  • encodings/euc_jis_2004.pyc
  • encodings/euc_jisx0213.pyc
  • encodings/euc_jp.pyc
  • encodings/euc_kr.pyc
  • encodings/gb18030.pyc
  • encodings/gb2312.pyc
  • encodings/gbk.pyc
  • encodings/hex_codec.pyc
  • encodings/hp_roman8.pyc
  • encodings/hz.pyc
  • encodings/idna.pyc
  • encodings/iso2022_jp.pyc
  • encodings/iso2022_jp_1.pyc
  • encodings/iso2022_jp_2.pyc
  • encodings/iso2022_jp_2004.pyc
  • encodings/iso2022_jp_3.pyc
  • encodings/iso2022_jp_ext.pyc
  • encodings/iso2022_kr.pyc
  • encodings/iso8859_1.pyc
  • encodings/iso8859_10.pyc
  • encodings/iso8859_11.pyc
  • encodings/iso8859_13.pyc
  • encodings/iso8859_14.pyc
  • encodings/iso8859_15.pyc
  • encodings/iso8859_16.pyc
  • encodings/iso8859_2.pyc
  • encodings/iso8859_3.pyc
  • encodings/iso8859_4.pyc
  • encodings/iso8859_5.pyc
  • encodings/iso8859_6.pyc
  • encodings/iso8859_7.pyc
  • encodings/iso8859_8.pyc
  • encodings/iso8859_9.pyc
  • encodings/johab.pyc
  • encodings/koi8_r.pyc
  • encodings/koi8_t.pyc
  • encodings/koi8_u.pyc
  • encodings/kz1048.pyc
  • encodings/latin_1.pyc
  • encodings/mac_arabic.pyc
  • encodings/mac_croatian.pyc
  • encodings/mac_cyrillic.pyc
  • encodings/mac_farsi.pyc
  • encodings/mac_greek.pyc
  • encodings/mac_iceland.pyc
  • encodings/mac_latin2.pyc
  • encodings/mac_roman.pyc
  • encodings/mac_romanian.pyc
  • encodings/mac_turkish.pyc
  • encodings/mbcs.pyc
  • encodings/oem.pyc
  • encodings/palmos.pyc
  • encodings/ptcp154.pyc
  • encodings/punycode.pyc
  • encodings/quopri_codec.pyc
  • encodings/raw_unicode_escape.pyc
  • encodings/rot_13.pyc
  • encodings/shift_jis.pyc
  • encodings/shift_jis_2004.pyc
  • encodings/shift_jisx0213.pyc
  • encodings/tis_620.pyc
  • encodings/undefined.pyc
  • encodings/unicode_escape.pyc
  • encodings/utf_16.pyc
  • encodings/utf_16_be.pyc
  • encodings/utf_16_le.pyc
  • encodings/utf_32.pyc
  • encodings/utf_32_be.pyc
  • encodings/utf_32_le.pyc
  • encodings/utf_7.pyc
  • encodings/utf_8.pyc
  • encodings/utf_8_sig.pyc
  • encodings/uu_codec.pyc
  • encodings/zlib_codec.pyc
  • enum.pyc
  • fnmatch.pyc
  • functools.pyc
  • genericpath.pyc
  • heapq.pyc
  • io.pyc
  • keyword.pyc
  • linecache.pyc
  • locale.pyc
  • ntpath.pyc
  • operator.pyc
  • os.pyc
  • pathlib.pyc
  • posixpath.pyc
  • re/__init__.pyc
  • re/_casefix.pyc
  • re/_compiler.pyc
  • re/_constants.pyc
  • re/_parser.pyc
  • reprlib.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • stat.pyc
  • token.pyc
  • tokenize.pyc
  • traceback.pyc
  • types.pyc
  • urllib/__init__.pyc
  • urllib/error.pyc
  • urllib/parse.pyc
  • urllib/request.pyc
  • urllib/response.pyc
  • urllib/robotparser.pyc
  • warnings.pyc
  • weakref.pyc
  • adolf/libcrypto-1_1.dll
    .dll windows:6 windows x64 arch:x64

    11f2ed72076bbf7871eb95fd5b4e84b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/libffi-8.dll
    .dll windows:6 windows x64 arch:x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/libssl-1_1.dll
    .dll windows:6 windows x64 arch:x64

    3adf02a15243fccc51beb2b37fbf071d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/pyexpat.pyd
    .dll windows:6 windows x64 arch:x64

    c1efb4aba5d0a4e13411d9eacdb4e8d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/python3.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • adolf/python311.dll
    .dll windows:6 windows x64 arch:x64

    7bcba99f43dec2147effa329c42a4378


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/select.pyd
    .dll windows:6 windows x64 arch:x64

    fc4f7d736924aa67a1bd7b7b80894df9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/shiboken6/MSVCP140.dll
    .dll windows:6 windows x64 arch:x64

    c0e775d13a8146396b3de4dc441694a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/shiboken6/MSVCP140_1.dll
    .dll windows:6 windows x64 arch:x64

    a1d1434dddb062f5f5d6615852def52b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/shiboken6/MSVCP140_2.dll
    .dll windows:6 windows x64 arch:x64

    8ceeb902c9887e633d0dec0e28e97944


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/shiboken6/Shiboken.pyd
    .dll windows:6 windows x64 arch:x64

    79285e23a1ce252fe4b61ad7db8be866


    Headers

    Imports

    Exports

    Sections

  • adolf/shiboken6/VCRUNTIME140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • adolf/shiboken6/shiboken6.abi3.dll
    .dll windows:6 windows x64 arch:x64

    137a7d876066a47e797b302fb38d86cc


    Headers

    Imports

    Exports

    Sections

  • adolf/unicodedata.pyd
    .dll windows:6 windows x64 arch:x64

    bb6f6d951dbdd290ecf382ca57459172


    Code Sign

    Headers

    Imports

    Exports

    Sections