blackguard | 2f16279e427a4195d134a8f4eaa2bbdb1187efa912e90947baa157097d89bdf6

resource	yara_rule
static1/unpack001/KTR Bilgisayar Yönetimi/KTR Bilgisayar Yönetimi.exe	agile_net

resource
unpack001/KTR Bilgisayar Yönetimi/KTR Bilgisayar Yönetimi.exe

2f16279e427a4195d134a8f4eaa2bbdb1187efa912e90947baa157097d89bdf6

SHA256 2f16279e427a4195d134a8f4eaa2bbdb1187efa912e90947baa157097d89bdf6
MD5 a514c95f9620f1840d740ef4cb705e46
SHA1 61f35f337c2ada1f109766b5048b1c92edc52d79
SHA512 548de80c34f31b3a5fa94c355813fd544cb67d46f0ab597d03a0a489393e7be64f61bddc95a667ada60c0b72800e10cbf82f379164033604cd8aaef7fe7714b4
SSDEEP 393216:8+BhUITbTGHn+viH3WgHivtW68+RTv07RPBMnkpxDLw:8MZ+nGkWgHicYwPBzM
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Bilgilendirme.txt

SHA256 af1cee99ae92c1d1428226752e154f19bc37dfb30f9f3630ecd75afa0df0d1eb
MD5 09d9022a624c5243ec7ece8d33e82689
SHA1 7f526a16e6dfa6c8bf58e5632294598189895ba0
SHA512 384d16084ef508ea7cb4d29d3621d6366ec8c8880eb8b6df24bdc71d2b0c19601e153c54e03360dd49ebf91b3568b45f18f8faffb4bcff633f6e99c43d340190
MD5 SHA1 SHA512

KTR Bilgisayar Yönetimi/Defender Hakkında.txt

SHA256 22445ebb55ef3d36d7728e124b3e1244b467881af10523f80160c9d91ce43e8b
MD5 443ae1c2cfb60616c2a3765e0f989799
SHA1 ae987be6c3ccf96d952a3bfee72bcc4a4a0ce417
SHA512 46794b7dbe7cf8ca6d12ffbd935d2158849033b9568f305de5237eeeb79f8b2b6ca6178d2bb955c6ffbd2ba9d792bd4d2bf6af22a2c6de5355de6fe798d79dec
MD5 SHA1 SHA512

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (1).jpeg

SHA256 96b6585debe56edca8c9bc58cab7c400fb0e1e112dd3525a888b949a51d01a2a
MD5 09174e27da4a84d79c1ed7b529bb8f5b
SHA1 f0db6d7ea82741282328521889a82cc859175fca
SHA512 32bb2768fd546cb82a91d0acf1e067c9d1899d9dab046724ace13b922a139a2b83e9e1ec9b11400803e07ddc8f1aae59258bd6fd875490aab962d1957edaabd9
SSDEEP 3072:5BfCFlZNGoca1+Cso78SVcN1bKVPOiYEaQMgWdoCsy3XRl+ZkRLBL:4PNGta1Psog7KVmp5QMX/HPWO
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (10).jpeg

SHA256 b037b13d748d490d56867374dd090ff2b9c13561134deb29ac8047e8e909a894
MD5 d9de8d4b185dd03f21303f2905686abd
SHA1 2f7fd7b7bd3e98c962286c4300110f27d24309bb
SHA512 ecf86a919db615edb9466463ae42d7126512b2faf00f6377e4292bdab4c218144f5a3923bee583ed41ff11fdd0c1c7469f4080cced486a952a82225327683663
SSDEEP 24576:G3JKQeKbrDRjee/Tihgk37DrfeY9qoDr4t:G3M1GDRKerihgk3z6Ur8
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (2).jpeg

SHA256 415d0dc17e2c6bb4d7f1ddb5ae91569e83a800f5a8fdaba06d66db5fcb75a541
MD5 1f8abd778df7700aa207979e1b4bff98
SHA1 3e387454701ab29d98dbfd09a0242b4dce96d159
SHA512 9a4fa88837b9529bbb1faa4aa88c06064998efcd4f8c0c826fd6813d60e4799422903b3d65fa0e13f1c45d9e60f9526dce83ffa81e69bb792675aafcb6662ada
SSDEEP 3072:EYhV5iouwalv26GApbUD3IreqmPesgZZyg/1b3w11K+eckfC5eSv1EPJETSx:RhVxalZGApbUjIeve1Dt+wnSvJT8
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (3).jpeg

SHA256 13f605e840578059ec6405c640314b2605397304c0ffbf9891c22e2fd90c0a4b
MD5 4bded524aa057b2a60242c7d0ca88807
SHA1 c381792a9011115a1ffad878afcab6a4e5a88a1b
SHA512 f7dd8738a27f33c8f52c8e866e90a1ceecd124e638a26817aee627d080f3e6af57a98b046c654b2b640b544faf3e8c2e5e2755f61c56e4783129b6f8e90ef701
SSDEEP 3072:/qWeMDWlc4xxoQOKozb2hYDt1IKDv7KI4pQ:/q0DbExoDmYDtiKr7KI4+
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (4).jpeg

SHA256 562c3b6db99c02af3097661304966f6725de8774a400d409f875c8a0837581d4
MD5 828f07b0adf37e92296d2aceba34c872
SHA1 1067335322f05b8bca12dcef988f7d8916c6216d
SHA512 902d81940f88a5bdc53c4d3ffa6e238829fd1bd54cd4ed137491d73996446e76099bbc9ce8ceabcfee97b7c81614973c16ede53ce2fe3c4e4bb0f0e4d7167455
SSDEEP 6144:R+jYjZ4cIlhSDTS46W9cmUZ51K6n9V1R8BFJRGBY4E:RsYjXIWDu463mqg69nRYVG0
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (5).jpeg

SHA256 191238dd8879353843a44a84de5fc06ce5d05b775618930dc07d94e8674c113b
MD5 41cecc4bb242a91537e54667f714275f
SHA1 d74d186a97ca7800cdf434ec46fa2291151761ae
SHA512 a16d9a95298304356436cf3e86b199479d3de6881992ca06f9abb076d65b913a263270fe00d7d180853e197517d446af62c733d3bb9db4b7f9d6964b387bed08
SSDEEP 6144:szpzFoyw1J5Ak/KCP8ik1z41RVYmwhsY+jyYUUxMAEAQxeAMTiqyZegU4ebl0s3:upz41JGmKK8ik1M172iy8MA7Icmqy4h
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (6).jpeg

SHA256 0dc7605752e999ad7d8ca1045fe96414dd4631a255d7e373140ac83c1bf6d8e1
MD5 62be430478c917ea2887e1a5373789ab
SHA1 16ec4ed721e06156d1b89c9618a832ac2a663ffa
SHA512 0feed8aaf5482dd43c5a64e9e079ae5a28e5dc02a14fdd04ab40386b769c8b6a5a5e1d3a292f7e5d4edd164dacf60cd99f6794a3bb7be10054ca4bc48c82b2aa
SSDEEP 3072:gIBWEyRVJhar4Oh01upMn3v2M88pSa8i98/eGvKeglY:5NyRqhU+gvz7pSa0K4
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (7).jpeg

SHA256 264f17616dd32136d1c38d7501e3354ed6cd98906b10be57f69f7e2a8e8ce8a9
MD5 adc3184dfd26b715832f9c7908777195
SHA1 2e6af27ce5e9b2a81317473b74a3d15a5518f0ab
SHA512 cc7f4a2f9a8cef1354c99f02740461b578964957539ecfe5025b0a228b4e987f92de4bac257e322a21456df3ef03dd24f86f3f598f7f3b5af81e2a4abee5c027
SSDEEP 6144:JF1Fjp3mtAB4MF1iffhjFLerBMPLNEYhIoUzozH06Q:Xzt3VWMF1iJQrB1NjN
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (8).jpeg

SHA256 5518ce6c0f7dfe3037edc51ffbbe9fdccebd903ce4ab7d1d6d1ac85b62ad40de
MD5 5d86027653a29fad0758e0fe4b356eb5
SHA1 96dae02ee47de9cd02a4d71a9369212e51824ac0
SHA512 e69c24bdba9d58a1c5e8342c7dbe2c01eb54437d119145fc013ec4fffc1eeb24335477a54f2dffe3252b31e341942278570fec0d53850b3af8d5731a3024d943
SSDEEP 24576:HPK9gNV2K1JySzQLKUaW9EOUIAHZ7vpBnSs8IvlCH+fNYzqHEaLnEK28pcfiBTjK:vM8Tdr33ZxR7T8H+fRkaPwuEP
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Hediye R10 Duvar Kağıdı - kalipsotr (9).jpeg

SHA256 e58831d1a9449eaea28c8bf6bae785b81aab17e8f66b065edd9cbca692997c75
MD5 271dc7f0ced513f6feae8f312338f2b1
SHA1 2bb9f89849a9330acdd51a97d2f6b9b2a21f4210
SHA512 66a311d985630310ecc82a694c010003e2b9a0b9f43ce88fc352bd9e8cd1d32e45b6694e11b4c6b0947f2c507a9e92d68de92a366d2ae090a24119eb6298b8ba
SSDEEP 6144:O/u7ccQZBOgOdGc0y8Ed32ZbFUBEQYTdfpRyhwP:O+SBXeH8u3S+CQShESP
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Hediye/Not.txt

SHA256 94f698196c40aab374d4e7a9e697ab1ceb0a53f11ebcbace67b0839e138c25a9
MD5 96077e161cfb3f8373e5e65d1d7c824d
SHA1 b1a3c446cf7b6d57c7506d2f5a2cbd2191fd2ab2
SHA512 6ad202f834b732a03a5feba40501310d48b9535372467f660568940e951400a467f7871f27beaf504059e8cbdd2b7ef25c53885c05b460e169e53236064b8c0f
MD5 SHA1 SHA512

KTR Bilgisayar Yönetimi/KTR Bilgisayar Yönetimi.exe

SHA256 209f83f34903c8db51f8ea1b54c8f0093b612447d31908bac081372377d89c06
MD5 eb7c879f11b54f291ce0126d62dcf341
SHA1 a14c6530b24916eea2bd2237b790a338df6a7bea
SHA512 c453c588b9f5f522ccc2f42e255f68ff38e984810def9ec4c6ee50b6407ac19df8994698120b3482dd29f3425f0e9d36afe872e0093306c804ee88c4c16ac9ce
SSDEEP 196608:CSQSap4bqiip34pkr2dY/aBcjJOBHOBIQBajMtWvoJiLE1+XgRKz89G/4ZSb0Fu5:wkqiiKpkr2dY/aBcjJOBHOBIQBajMtWb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

903134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

KTR Bilgisayar Yönetimi/Kullanım Kılavuzu.pdf

SHA256 7afbec7252a7203333afbefcfd725d8c25350ab610bb48ba0b0d60c82b5bfc78
MD5 2a826a713da452cab69a017133171670
SHA1 fc22d17ee8843a793571ba23d194efa00db48847
SHA512 4067930355f7535e420a481e8c77c0a8e25892527f953960fbde8f8e3297a37c0cc5e77a277cab1a0f402a77005152aa069c109ec51eb043670772fc2ad9fec6
SSDEEP 12288:uoZT3YcNd6NEJqCtRIqc0kX5ZBWqsI1TIeKeimy7e561CSmrMtWG2DOQlnB:uoZxNd6NEsyyqc0U5ay1TIeKjeeBiMp+
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Teşekkür Ederiz.txt

SHA256 4a76cf62084d2c460d693fe42ebf6503604438838f2849798b000469b64c6220
MD5 57fcc76128d78741056c46e3db4a6e91
SHA1 3b2ef4439061933cc5e7c79f4e535c942881e499
SHA512 c8501c8d658970a11bb8c6d4db809889b8f69af9f155900f656192402db0d2ac0bd4f036c99bdeafbd703692e64ce67e21f7b9845185ce29392ce63595866361
MD5 SHA1 SHA512

KTR Bilgisayar Yönetimi/VirusTotal/VirusTotal.pdf

SHA256 cea8433eb011f56b5c17a5671fda00b95a8fa2ff4c9784b45a83d7bfd321f3bb
MD5 b220c3823391000a26475839eb7a832b
SHA1 e6fe6bffeb5ff209ee219bde2e870599e2fc0b6b
SHA512 f08bcf95c6ef4ff8d5d2af5208a26727a8f0e41b9d6fb1034a812757b999e406a60b0f366e03aa958f12a22111e407c49d38f466cf7ec7233afdfa8341ef5d86
SSDEEP 1536:HBb+nqKSDZTpShNpsFK6ZnjaTzHvSpFVTNi6neqtR+IIpjto/ZH:hSmDSdssUjaTzHSD1VHgjOp
MD5 SHA1 SHA512 SSDEEP

Extracted URLs

file https://blog.virustotal.com/
file https://developers.virustotal.com/reference/overview
file https://developers.virustotal.com/v2.0/reference
file https://developers.virustotal.com/v3.0/reference
file https://docs.virustotal.com/docs/
file https://docs.virustotal.com/docs/api-scripts-and-client-libraries
file https://docs.virustotal.com/docs/browser-extensions
file https://docs.virustotal.com/docs/comments
file https://docs.virustotal.com/docs/community
file https://docs.virustotal.com/docs/contributors
file https://docs.virustotal.com/docs/desktop-apps
file https://docs.virustotal.com/docs/how-it-works
file https://docs.virustotal.com/docs/mobile-apps
file https://docs.virustotal.com/docs/privacy-policy
file https://docs.virustotal.com/docs/results-reports
file https://docs.virustotal.com/docs/searching
file https://docs.virustotal.com/docs/terms-of-service
file https://docs.virustotal.com/docs/tools-overview
file https://docs.virustotal.com/docs/whats-vthunting
file https://releases.virustotal.com/
file https://www.virustotal.com/getstarted/
file https://www.virustotal.com/gui/community-buzz
file https://www.virustotal.com/gui/contact-us
file https://www.virustotal.com/gui/contact-us/premium-services
file https://www.virustotal.com/gui/contact-us/technical-support
file https://www.virustotal.com/gui/file/80116b9c6705b19dbc6b95a576427e4df2b544fb2008ef87f84036ab13b5dccf/behavior
file https://www.virustotal.com/gui/file/80116b9c6705b19dbc6b95a576427e4df2b544fb2008ef87f84036ab13b5dccf/community
file https://www.virustotal.com/gui/file/80116b9c6705b19dbc6b95a576427e4df2b544fb2008ef87f84036ab13b5dccf/details
file https://www.virustotal.com/gui/file/80116b9c6705b19dbc6b95a576427e4df2b544fb2008ef87f84036ab13b5dccf/detection
file https://www.virustotal.com/gui/file/80116b9c6705b19dbc6b95a576427e4df2b544fb2008ef87f84036ab13b5dccf/relations
file https://www.virustotal.com/gui/file/80116b9c6705b19dbc6b95a576427e4df2b544fb2008ef87f84036ab13b5dccf/telemetry
file https://www.virustotal.com/gui/graph-overview
file https://www.virustotal.com/gui/home
file https://www.virustotal.com/gui/hunting-overview
file https://www.virustotal.com/gui/intelligence-overview
file https://www.virustotal.com/gui/join-us
file https://www.virustotal.com/gui/search/engines%253Atrojan
file https://www.virustotal.com/gui/search/engines:trojan
file https://www.virustotal.com/gui/search/entity%253Afile%2520tag%253Apeexe
file https://www.virustotal.com/gui/services-overview
file https://www.virustotal.com/gui/top-users
file https://www.virustotal.com/sign-in
Show all

KTR Bilgisayar Yönetimi/VirusTotal/VirusTotal.txt

SHA256 7b60091c8f2323f0de25f897fa66a5e30745cf5fd4fa0420afa6a3ca7b036800
MD5 14617ad02aa4fbdfa6e034a4eb1c70f4
SHA1 37ca62a030fbdac4742216b195eda64d0add7c92
SHA512 9f44ad20eb04202f6fca7482cf69d41877c117db9d5eb981c0e53b6305b931ae6382fcf877c0ee4539bab0b61a02870bbf9c67d88b3bb51020b97887cf3138ca
MD5 SHA1 SHA512

KTR Bilgisayar Yönetimi/Yazılım Tanıtımı/Yazılım Tanıtımı.mp4

SHA256 6110c3c2c133bdc61eafe34955e2bb60bb5122f2db49eebbba5b27ad25038541
MD5 3cc13abbf685100fc17da9e3a4592b0b
SHA1 a429bd1554624f604a4c64172b3d1fb6782a6e22
SHA512 0ff4d3fde245554b3b0be78dfc710537198f5588fc8afb42da99b2b091fca8986b083ea19c117af374e76086763c0e0c67f0ba7ec18bf44e1c78b6256e797ed4
SSDEEP 196608:SrYfPnX7kWMMd9ua60rAkCrz9DxiLtjaB:kYnnLFLub0rGH9DQ0B
MD5 SHA1 SHA512 SSDEEP

KTR Bilgisayar Yönetimi/Yazılım Tanıtımı/Yazılım Tanıtımı.png

SHA256 853e420ab9543248cb75c6a2a278598e8f11d56462ff801da71ac03dac80d6c6
MD5 ed900826e60dee05f107a0c4d5b8a47a
SHA1 8025ca241becb5579e1da12ffab6e6896347172d
SHA512 359aec25131ff99ea4bc7c0e344d2d2d0902fcc6fb45468e6619ceb83294d16dcfbf2add430e6e72a12cbac833c2ab7951e92f78d98185588da56f22ceaa53a1
SSDEEP 12288:ACSBYu0fAUDIXRm+KG71PlmxnxaE7W3DF4kSTluzELSG8Z851C:CB/0fAUDIXUBKDiW32x4ELh8251C
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer