72b1c85eede5ca8c04c1d472cd2ea3a86e7442c4933105c50fb0484d1f4c5ad0.rar
- SHA256 72b1c85eede5ca8c04c1d472cd2ea3a86e7442c4933105c50fb0484d1f4c5ad0
Static task
static1
Behavioral task
behavioral1
Sample
Telescribe.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Telescribe.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/$PLUGINSDIR/System.dll |
| resource | yara_rule |
|---|---|
| static1/unpack001/Telescribe.exe | nsis_installer_1 |
| static1/unpack001/Telescribe.exe | nsis_installer_2 |
NSIS installer
May 20, 2024
May 16, 2024
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=159, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,