Resubmissions

09/07/2024, 08:24

240709-kayyraxdja10

09/07/2024, 08:05

240709-jy18catfpk8

09/07/2024, 08:03

240709-jxzywstfln10

09/07/2024, 07:56

240709-js4raawenc10

09/07/2024, 07:46

240709-jl1faatarm10

09/07/2024, 07:38

240709-jgh1fawajg8

General

  • Target
    batterie daahindenes.exe
  • Size 398KB
  • Sample240709-jy18catfpk
  • SHA256 4412e46cdfffa346ea1d4e07b30077ccaa09fe1cbbe6f9965df193f2e063f4b7
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs

File Explorer

  • batterie daahindenes.exe
    .exe 398KB
  • Boomless.Fag
    344KB
  • Chthonian/Nonredemption/Invalidepensionist/turjite.pro
    2KB
  • Chthonian/Nonredemption/Invalidepensionist/undersalgs.txt
    415B
  • Chthonian/Nonredemption/larunda.pho
    4KB
  • Chthonian/Premortuary.heb
    9KB
  • Chthonian/burgerbars.squ
    7KB
  • Chthonian/hatchback.jug
    7KB
  • Chthonian/kitin.bla
    6KB
  • Reexpression.Tid
    68KB

batterie daahindenes.exe

  • IMPHASH f10e4da994053bf80c20cee985b32e29
  • SHA256 4412e46cdfffa346ea1d4e07b30077ccaa09fe1cbbe6f9965df193f2e063f4b7
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
a3:ab:64:26:1a:1c:1c:50:5c:16:77:01:a8:74:36:3c:66:da:79:15:45:1e:a2:e3:1b:b9:08:66:f2:34:23:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Instruktionens,OU=Undissimulating Bordigas\ ,O=Instruktionens,L=Fattahead,ST=Scotland,C=GB,1.2.840.113549.1.9.1=#0c194d6174657a6974654046616d696c696172733234372e4b6e6f
Chains

Jul 8, 2024

Minor OS version
0
Major OS version
4
Entry point
13516
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths