Snvlerier[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Snvlerier.exe
Size 1.2MB
Sample241014-gghcssvdpq
SHA256 6e0230eac8eeadd5214b6d83cc2f470933bee1c4261a607e182a093af14b62cb
MD5 9970463edf086976996f0bc196fcfc60
SHA1 22f3132f1456dba3bcc7096d2c10c5635ee08828
SHA512 bed16bf0f2ad277ac3cf34937e128efbd861472f99c0d1cb36f1bb89f7a5dab64174bc113c707ceee52a2bc39d2546610015edb54c18a076a297ce5ec7d7c7d9
SSDEEP 24576:voqqHmQ2mlK1Vq4XYV+EYBU0pD1VHTkXQk9duRUrO0SmJ7GtHufK70y:voZmQ7KVVXzEYBUspQQEuROO0Douf+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Snvlerier.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

Snvlerier.exe

.exe 1.2MB
Ausubo.kno

293KB
Bygningselementer19.dok

433KB
Eftermles.Tra

.ps1 52KB
frihedsgodes.sto

478KB
jaevndoegn.ski

139KB
prevailingness.txt

350B

Snvlerier.exe

IMPHASH e990dd07e89d04c53e337ab9b3f5e0cc
SHA256 6e0230eac8eeadd5214b6d83cc2f470933bee1c4261a607e182a093af14b62cb
MD5 9970463edf086976996f0bc196fcfc60
SHA1 22f3132f1456dba3bcc7096d2c10c5635ee08828
SHA512 bed16bf0f2ad277ac3cf34937e128efbd861472f99c0d1cb36f1bb89f7a5dab64174bc113c707ceee52a2bc39d2546610015edb54c18a076a297ce5ec7d7c7d9
SSDEEP 24576:voqqHmQ2mlK1Vq4XYV+EYBU0pD1VHTkXQk9duRUrO0SmJ7GtHufK70y:voZmQ7KVVXzEYBUspQQEuROO0Douf+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12877

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA CompareFileTime SearchPathA GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA SetFileAttributesA lstrcmpiA GetCommandLineA SetErrorMode LoadLibraryA lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrcpyA lstrcatA GetSystemDirectoryA GetVersion GetProcAddress WaitForSingleObject SetFileTime CloseHandle GlobalFree lstrcmpA ExpandEnvironmentStringsA GetExitCodeProcess GlobalAlloc GetModuleHandleA LoadLibraryExA GetTempPathA GetWindowsDirectoryA FreeLibrary FindFirstFileA FindNextFileA DeleteFileA SetFilePointer ReadFile FindClose GetPrivateProfileStringA WritePrivateProfileStringA MulDiv WriteFile MultiByteToWideChar

user32

CreateWindowExA EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard GetDC SystemParametersInfoA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer GetDlgItem wsprintfA SetForegroundWindow ShowWindow IsWindow LoadImageA SetWindowLongA SetClipboardData EmptyClipboard OpenClipboard EndPaint PostQuitMessage FindWindowExA SendMessageTimeoutA SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

Snvlerier.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

Ausubo.kno

Bygningselementer19.dok

Eftermles.Tra

frihedsgodes.sto

jaevndoegn.ski

prevailingness.txt