SecuriteInfo[.]com[.]FileRepMalware[.]12793[.]28433[.]exe

SecuriteInfo.com.FileRepMalware.12793.28433.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 2263f87e66243b4f0d6b1bb79e0638c6556b5d89a2506ad9db5c30cc02bbdcc3
MD5 84e09bf944042fbd418724cddb729516
SHA1 8d908f01be478390e49bfe51fbca4959af157e1f
SHA512 803912c31ef4e413d7b251fc400950aca18ae522ac5a0b87d51a459182b112edbcad78b506a8cbe7c12eb18b5a4c2825b139107edb7bd2dda6bd18fe43421e78
SSDEEP 12288:UElGNmPCeBgjfiWxnlApvOvcrG7fhbL7TWxv69jIQS6lpOYCUjJ+i:5lGUPBBDulAxOErGLN7avBQTlpvCU3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a8:fd:ae:8b:db:97:02:e5:05:63:e1:4e:7b:45:9b:54:62:af:ed:17:2c:ea:57:b2:d5:2b:62:97:dd:83:af:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Quadrantid Beslutsomste Troskyldigere\ ,O=Bizardite,L=Lustar,ST=Occitanie,C=FR

Chains

Sep 30, 2024

Minor OS version

0

Major OS version

4

Entry point

13117

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PROGRAMFILES/Eveline27/Skeletonlike.pas

SHA256 8289effe39fd7a273415735aaf3dda665c94473b7c8b698a088886ac52b4ec72
MD5 255119688c7065754a83c8ab994df0e0
SHA1 60d2f2b79e0ff83f5a44edec89b296f989eff2bb
SHA512 0d956e851a7ddc97906b79d82c412cf1d49d7954244bf0d2a780857c1e15be0533862d9b88ce77c9f9dab289d6bb1eb5528ff53dc780110fc788dc2eff4e5f04
SSDEEP 768:DZrQsb0w6o1/lJcZrtDBSarR6wYFwZ89D6YVs9XFnmSFHt0NfAP3muh1oKV49qtH:msb0wVlOZrWc690l5pFmovhLL31d
MD5 SHA1 SHA512 SSDEEP

$PROGRAMFILES/Eveline27/Skillemnters.Bel

SHA256 7dd49bad8787a69b6afc1ac6db875cb9c0da93990d6251f45b4ff6e88fdebb6f
MD5 6786d85d171f0a5872e24f5ae5d403a1
SHA1 8dd2a7e274f4ab1b278350f373abeb6ac540db6b
SHA512 02c69c706292c0e098e09e8c9b975fc746145b3edc0330bfc0656512b250016aac0deb49501416dab6cd0b79e927cd36fd0699a48ab90f67221097f7c38e86e1
SSDEEP 6144:Ux/SsMS3fb9lLuxAlPNuNfpM13b/VoWDzQzF03fFuTHpNr+agwq+bBi4v:y9lKrdpGL/OWDczF03fFuVd+agwq+n
MD5 SHA1 SHA512 SSDEEP

$PROGRAMFILES/Eveline27/quadrifoil.tap

SHA256 91c0b19cc1a646e9f22a0c73efa9ddf4b1c0b1dcd18d59960cf41af9852050f7
MD5 8836f785c1eb3f273c58cbf8c32d1d09
SHA1 2bc2da2e22a104f0ff30e1dd2a62e72246419608
SHA512 2b78178d33f87e81fcae76ce176c23c89ad78fc77012264d27a292365f183cedb6008a480e33cb151f57e61c17969ef49be87122dc694481653e70102714ea0a
SSDEEP 768:p4+c29AI3CPQXNEXt6QsTC3tMB/e0Vg+tlTf/Twl/1f1FNCnu2OaFf7YTYxX4taF:pdfAkTprVQp9SVFjOqvpmwN
MD5 SHA1 SHA512 SSDEEP

Ekspertenhed/plyndrer/starveacre.sne

SHA256 e9ec9e640de93a4632e48d142341dc8b4231dfe02d929d59394dd70cee2d778e
MD5 f26a9f263418dbf8c63a41c64b26f803
SHA1 5496dbd5b53ae6367f95b7ec436f6e2d8c5c6f92
SHA512 f1cd232cafcd9715deba82faef429db70a7ee15f4cb8e7b50ed434f22e957527279e45a4fa56cf41fab3e27253dbad447585669611ba73896d928ef61966aa3f
SSDEEP 1536:wPV4wdGoWBcvE3GXTAIjC+1saIdSyuPX:wPV4lBc83GjrG+5MSbP
MD5 SHA1 SHA512 SSDEEP

Ekspertenhed/plyndrer/ukrudtsplanten.txt

SHA256 2a92f24a2ea3fe5966b686013d0ae786fb9bd20f9b7c2bf15e38047de4cdeedc
MD5 55072e0e039d598fd4ec334e0e356295
SHA1 142d468592e2deb6e0759c8072d06d481412f426
SHA512 e163ddd94cc05f21a934daffa4b5c4b65eab85db5560548a2dba8671e7e10e0682e8c2688c63905bd9789e32af22cbe737439701898cb824a73879c996ec9b5f
MD5 SHA1 SHA512

Ekspertenhed/skyrens.laa

SHA256 9c1a6d51917cb5850a0b008efe6fdd0d883f6981c96af7bd774ed43236c5aca0
MD5 cb47d5ed57b3ff72e3fb8a8a4818434c
SHA1 ff87f921390b2654206305cdf96403d951cbc01e
SHA512 9e6c77bd3572f3c05fc404ef12669f07496fc4b5f1bf2a586f8330e29097b4089c2a405fa632de1ff808ec1011987077e302691d43603876b4ff436ef69532fa
SSDEEP 768:NXg64WlRZ/+czu/YTBAfwTrBJ3nZ0eDhExv1zmXMc73OscbyFqgq7mOvPrL8gkAm:RYWpYrdAKZfSuf54YzNLs4iXv
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer