Overview

overview

9

Static

static

3

EKTEDIR SWIFT.exe

windows7-x64

7

EKTEDIR SWIFT.exe

windows10-2004-x64

9

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    EKTEDIR SWIFT.LZH

  • Size

    1.1MB

  • MD5

    88de9b2859727216d12bcc71b9ca88c5

  • SHA1

    1b3baa41da7d9d17c9616ff189c3ac4b082b6cf6

  • SHA256

    6b2613a86a7b4f111d258da3d6d78c42ee3781b56d311945646098358804e5f4

  • SHA512

    0446d2cf886cb783e80d47ffbb37a85adf0fae66108928d9c9500aff21cff66843cb3fe81aa0017960bc230552b3afe54a0fa5e4c4e3bac751d05bbfc1716f5f

  • SSDEEP

    24576:EemGwVBPZKdxzxXuv8O/d5mD4TOojF8A1KAt1PSE1:ETHR4/+vt5mUTOojT1aE1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • EKTEDIR SWIFT.LZH
    .rar
  • EKTEDIR SWIFT.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • Advokatfirmaer107.opt
  • Afskilredes/Smolts.blu
  • Afskilredes/Spaanernes.dod
  • Afskilredes/Spaanskrabernes.dis
  • Afskilredes/Stigevognens.pir
  • Afskilredes/Tapes16.vrd
  • Afskilredes/Telephonically.upg
  • Afskilredes/Ti95.sch
  • Afskilredes/Tokronesfrimrkerne27.err
  • Afskilredes/Tolvas.ste
  • Afskilredes/Transactionally.unm
  • Afskilredes/Vekselformularernes204.ins
  • Afskilredes/Volding239.erh
  • Afskilredes/Voluntaristic64.har
  • Afskilredes/arpeggio.bro
  • Afskilredes/awnings.sup
  • Afstningsforholdernes.bli
  • Entropion.Fra
  • Exciters/Albertin.pre
  • Exciters/Archaeopteris.sul
  • Exciters/Astel.aro
  • Exciters/Atonements71.unb
  • Exciters/Basiliker101.kon
  • Homogenisjjr/Colormaking173.skr
  • Homogenisjjr/Daabsattester198.ind
  • Homogenisjjr/Detections120.gli
  • Homogenisjjr/Foldere.cal
  • Homogenisjjr/Forpustet.wro
  • Intraformational/Beslaegtet.var
  • Intraformational/Besliming111.eks
  • Intraformational/Boardingkorts22.pro
  • Lightningproof/rigsmaals.uds
  • Lightningproof/ripperman.mik
  • Lightningproof/samuelsen.apr
  • Lightningproof/servicegarantiernes.rha
  • Lightningproof/sideformatet.ran
  • Lightningproof/sparrede.fre
  • Lightningproof/strafforflgelserne.ast
  • Lightningproof/superprogrammrs.age
  • Mesomerism.Hul
  • Rheologists/Polythalamia/ticket.tro
  • Rheologists/Polythalamia/tillystes.mis
  • Rheologists/Polythalamia/tocifret.vol
  • Rheologists/Polythalamia/triform.txt
  • Rheologists/Polythalamia/ubesejret.det
  • Rheologists/Polythalamia/udvejningsvgt.mon
  • Rheologists/Polythalamia/uforlignelige.arb
  • Rheologists/Polythalamia/uncomic.hyd
  • Rheologists/Polythalamia/unhalved.for
  • Rheologists/Polythalamia/unmarked.ord
  • Rheologists/Polythalamia/unrounded.she
  • Rheologists/Polythalamia/untraitored.men
  • Rheologists/Polythalamia/uofficiel.auk
  • Rheologists/Polythalamia/vandrefugle.stj
  • Rheologists/Polythalamia/varicosity.gal
  • Rheologists/Polythalamia/viers.alm
  • Rheologists/symfoniorkesters.ent
  • Rheologists/thrawing.aff
  • Sinkiuse/Adfrdsmnsteret12/Navlebeskuere/Sllen.sko
  • Sinkiuse/Adfrdsmnsteret12/Skbnen55.att
  • Sinkiuse/Adfrdsmnsteret12/Slattent.tid
  • Sinkiuse/Generindringens.tra
  • Sinkiuse/Gthedernes.pen
  • Sinkiuse/Guldje.uns
  • Sinkiuse/Heltalsintervallet.axe
  • Sinkiuse/Indseende.osi
  • Sinkiuse/Indsejlingens35.mul
  • Sinkiuse/Infantilisme.bal
  • Sinkiuse/Ipecac123.ukr
  • Sinkiuse/Judice.mol
  • Sinkiuse/Karaten74.par
  • Sinkiuse/Knockoutedes.amm
  • Sinkiuse/Krokade.swa
  • Sinkiuse/Nonregistered.hen
  • Sinkiuse/Pacificeringens.non
  • Sinkiuse/Parablepsy4.bes
  • Sinkiuse/Pisks32.cen
  • Sinkiuse/Quipsome.res
  • Sinkiuse/Salinosulphureous0.pra
  • Sinkiuse/Semilimber.cin
  • Tagrrs/bevatrons.bra
  • Tagrrs/bodywood.sem
  • Tagrrs/butikslukninger.kol
  • Tagrrs/carbines.lyd
  • Tagrrs/cize.con
  • Tagrrs/cordon.ove
  • Tagrrs/creamers.ver
  • Tagrrs/dagbladsartikelen.lum
  • Tagrrs/danni.arb
  • Tagrrs/differentiator.dys
  • Tagrrs/discussable.fol
  • Tagrrs/dyrplageri.cav
  • Tagrrs/evakueringsvelses.fll
  • Tagrrs/fejlgreb.rib
  • Tagrrs/fremtids.und
  • Tagrrs/fulwa.bre
  • Tagrrs/galilers.hen
  • Tagrrs/gravimeter.gen
  • Tagrrs/hangared.lem
  • Tagrrs/heterogone.dur
  • Tagrrs/hjemmesidens.non
  • Tagrrs/impropriator.kno
  • Tagrrs/javaner.aer
  • Tagrrs/kitinskallernes.und
  • Tagrrs/kontrolfunktions.tll
  • Tagrrs/kulaite.fin
  • Tagrrs/lamelbunden.ane
  • Tagrrs/lejesvendenes.amy
  • Tagrrs/lnslaver.fam
  • Tagrrs/lsts.ecl
  • Tagrrs/microthyriaceae.ste
  • Tagrrs/miscorrection.tem
  • Tagrrs/noneccentric.far
  • Tagrrs/nongravitation.sta
  • Tagrrs/nonroyalist.raa
  • Tagrrs/nordligt.wal
  • Tagrrs/ock.kng
  • Tagrrs/unfeared/omsejlings.gou
  • Tagrrs/unfeared/oprullende.per
  • Tagrrs/unfeared/ovalbumin.gan
  • Tagrrs/unfeared/overtalelsesevnernes.akt
  • Tagrrs/unfeared/parallelisms.phi
  • Tagrrs/unfeared/picot.ins
  • Tagrrs/unfeared/platitudinarian.trk
  • Tagrrs/unfeared/polyamylose.hcb
  • Tagrrs/unfeared/preimperial.cit
  • Tagrrs/unfeared/preseal.cei
  • Tagrrs/unfeared/procesrets.for
  • Tagrrs/unfeared/protevangel.ndt
  • Tagrrs/unfeared/realiseringernes.skr
  • Tagrrs/unfeared/regnskabsloves.for
  • Tagrrs/unfeared/republikkens.pla
  • playa/Chincona225.haa