Overview
overview
10Static
static
3Python-Exe...ile.py
windows11-21h2-x64
3SnosTelegr...10.pyc
windows11-21h2-x64
3SnosTelegr...38.pyc
windows11-21h2-x64
3SnosTelegr...10.pyc
windows11-21h2-x64
3SnosTelegr...38.pyc
windows11-21h2-x64
3SnosTelegr...10.pyc
windows11-21h2-x64
3SnosTelegr...38.pyc
windows11-21h2-x64
3SnosTelegr...ges.py
windows11-21h2-x64
3SnosTelegr...10.pyc
windows11-21h2-x64
3SnosTelegr...38.pyc
windows11-21h2-x64
3SnosTelegr...10.pyc
windows11-21h2-x64
3SnosTelegr...38.pyc
windows11-21h2-x64
3SnosTelegr...am.exe
windows11-21h2-x64
10SnosTelegr...t__.py
windows11-21h2-x64
3SnosTelegr...ule.py
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Python-Exe-Decompiler-main/decompile.py
Resource
win11-20240611-en
Behavioral task
behavioral2
Sample
SnosTelegram/Modules/__init__.cpython-310.pyc
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
SnosTelegram/Modules/__init__.cpython-38.pyc
Resource
win11-20240611-en
Behavioral task
behavioral4
Sample
SnosTelegram/Modules/loader.cpython-310.pyc
Resource
win11-20240508-en
Behavioral task
behavioral5
Sample
SnosTelegram/Modules/loader.cpython-38.pyc
Resource
win11-20240611-en
Behavioral task
behavioral6
Sample
SnosTelegram/Modules/messages.cpython-310.pyc
Resource
win11-20240508-en
Behavioral task
behavioral7
Sample
SnosTelegram/Modules/messages.cpython-38.pyc
Resource
win11-20240419-en
Behavioral task
behavioral8
Sample
SnosTelegram/Modules/messages.py
Resource
win11-20240611-en
Behavioral task
behavioral9
Sample
SnosTelegram/Modules/tgclient.cpython-310.pyc
Resource
win11-20240508-en
Behavioral task
behavioral10
Sample
SnosTelegram/Modules/tgclient.cpython-38.pyc
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
SnosTelegram/Modules/user.cpython-310.pyc
Resource
win11-20240611-en
Behavioral task
behavioral12
Sample
SnosTelegram/Modules/user.cpython-38.pyc
Resource
win11-20240508-en
Behavioral task
behavioral13
Sample
SnosTelegram/SnosTelegram.exe
Resource
win11-20240508-en
Behavioral task
behavioral14
Sample
SnosTelegram/__init__.py
Resource
win11-20240508-en
Behavioral task
behavioral15
Sample
SnosTelegram/telegram_module.py
Resource
win11-20240508-en
General
-
Target
Downloads.zip
-
Size
125KB
-
MD5
061d1f28c348333503cae90509207742
-
SHA1
efdace091083aaa564faeb6a7e5aaad8d0a280b5
-
SHA256
e0d668b40ff86c027068135c66eff3f9fab3c37bdfb86a6d8f2b5c59d70a0d91
-
SHA512
71ed19f74d0f1451b0497846a0219a4f68cc34fd398fc86a2d3ca9d9134b8f9db8898b0c6839a36943d23f587dceaca963ce5ea77ae011e0424f38232f4ff813
-
SSDEEP
3072:QM4uA0no92wvt2rsqxj1cNHQg+TyRDlOUCIGSJp8Z4uUdnWCiG:QisBqcNHHxRlpnzp8ZzMniG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/SnosTelegram/SnosTelegram.exe
Files
-
Downloads.zip.zip
-
Python-Exe-Decompiler-main.zip.zip
-
Python-Exe-Decompiler-main/README.md
-
Python-Exe-Decompiler-main/decompile.py
-
SnosTelegram.zip.zip
-
SnosTelegram/??????????.txt
-
SnosTelegram/Modules/__init__.cpython-310.pyc
-
SnosTelegram/Modules/__init__.cpython-38.pyc
-
SnosTelegram/Modules/loader.cpython-310.pyc
-
SnosTelegram/Modules/loader.cpython-38.pyc
-
SnosTelegram/Modules/messages.cpython-310.pyc
-
SnosTelegram/Modules/messages.cpython-38.pyc
-
SnosTelegram/Modules/messages.py
-
SnosTelegram/Modules/tgclient.cpython-310.pyc
-
SnosTelegram/Modules/tgclient.cpython-38.pyc
-
SnosTelegram/Modules/user.cpython-310.pyc
-
SnosTelegram/Modules/user.cpython-38.pyc
-
SnosTelegram/SnosTelegram.exe.exe windows:5 windows x86 arch:x86
a4a6d285c99bdb73e593491b15a4c14c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
WaitForSingleObject
CreateThread
lstrlenW
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
GetLastError
CreateMutexW
FreeConsole
GetModuleHandleA
CloseHandle
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
SetClipboardViewer
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
SnosTelegram/__init__.py
-
SnosTelegram/database.db
-
SnosTelegram/telegram_module.py