General

  • Target
    9500e0c5048bf63eeb3dee4c704ebd0f7ddc24902be50a9ef1dd0c0148546e0f.exe
  • Size 387KB
  • Sample240710-cd578szdnp
  • SHA256 9500e0c5048bf63eeb3dee4c704ebd0f7ddc24902be50a9ef1dd0c0148546e0f
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs

File Explorer

  • 9500e0c5048bf63eeb3dee4c704ebd0f7ddc24902be50a9ef1dd0c0148546e0f.exe
    .exe 387KB
  • Emptyhanded.Sla139
    65KB
  • Scrobicular/Premortuary.heb
    9KB
  • Scrobicular/burgerbars.squ
    7KB
  • Scrobicular/hatchback.jug
    7KB
  • Scrobicular/kitin.bla
    6KB
  • Scrobicular/larunda.pho
    4KB
  • Scrobicular/turjite.pro
    2KB
  • Scrobicular/undersalgs.txt
    415B
  • Varmevrkernes160.Ove
    325KB

9500e0c5048bf63eeb3dee4c704ebd0f7ddc24902be50a9ef1dd0c0148546e0f.exe

  • IMPHASH f10e4da994053bf80c20cee985b32e29
  • SHA256 9500e0c5048bf63eeb3dee4c704ebd0f7ddc24902be50a9ef1dd0c0148546e0f
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
11:6d:e8:29:91:05:91:68:6b:0d:bb:56:95:0c:33:eb:8b:92:6d:be:90:8b:3f:02:a1:eb:e1:94:35:06:8e:01
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=macedon,OU=Microstomia Possumhaw\ ,O=macedon,L=New Ulm,ST=Texas,C=US,1.2.840.113549.1.9.1=#0c14536c696d69657374405468726970656c2e657269
Chains

Jul 8, 2024

Minor OS version
0
Major OS version
4
Entry point
13516
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths