Offer-7839373637-8839373-Quote8992832____________________________________.lha.rar
- SHA256 074c9862124fdbf3ee29c3e1f3e5c05f88dfb2ddc741269ebc4c36592dcd98eb
Static task
static1
Behavioral task
behavioral1
Sample
Offer-7839373637-8839373-Quote8992832.exe
Resource
win7-20240903-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Offer-7839373637-8839373-Quote8992832.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
19 signatures
150 seconds
Behavioral task
behavioral3
Sample
Saganashes.ps1
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
Saganashes.ps1
Resource
win10v2004-20241007-en
windows10-2004-x64
12 signatures
150 seconds
General
- Target Offer-7839373637-8839373-Quote8992832____________________________________.lha.rar
- Size 737KB
- Sample241106-rtlk4a1ley
- SHA256 074c9862124fdbf3ee29c3e1f3e5c05f88dfb2ddc741269ebc4c36592dcd98eb
- MD5 e5af89cc33334f578ea074755488a0dc
- SHA1 78b4a45c890bb21b1e5c16d84320c55d2da266f6
- SHA512 92572cdc47021326a6c8e6153be2c02ad4f3019e13bae921835f7fdf20e84739c5d483d398af38e8e7d3bc0f0fdac6ae61b60502c31e1e2ea27c2264c85fdc1f
- SSDEEP 12288:kJHnDWqPfnRKqZlrnTshj4Ja140hfuXjSInrsF4RenrIjJe+SnU6:kFnJRXZlrnYhcJx0hSjXngTrEebU6
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
Offer-7839373637-8839373-Quote8992832____________________________________.lha.rar.rar 737KB
-
Offer-7839373637-8839373-Quote8992832.exe.exe 767KB
-
Placid.Sel307KB
-
Rendets.spa394KB
-
Saganashes.Com.ps1 51KB
-
Samfundsforsknings.kom250KB
-
Tingsted.toe327KB
-
diskrimineredes.lge460KB
-
kopierende.six412KB
-
sejrvinding.ten456KB
-
stillingsgruppernes.txt358B
Offer-7839373637-8839373-Quote8992832.exe
- IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
- SHA256 b23119bb95d44f50e52555f51c9931389d3d559b9f74e34041e9fa6bc2b7f481
- MD5 21a5378b2c78f66fff23ec764cba65f2
- SHA1 94e2921a8a2e47611c936235b5ba03feecf00fff
- SHA512 885aaec0dea4fbf8d46da71bb34f776a8f212e99bf7da7082ef312a1936d46d5b59327c5650a50582df474cae7174dfafe3fa606876d218501f02cd3a25e05d0
- SSDEEP 12288:bMwhYlU9blucsKZ1XjfCTD/qp0xmk9qPARcQFY9fcNLqH66cOsFoTvGU5ZqLm:bMwhY+9blYKPGZx0PARxFWfcFqal/F4X
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b1:11:5b:7d:7d:ec:b3:33:ea:a5:55:4b:3c:d9:b7:da:17:b3:18:6e:bb:4b:db:97:73:3e:28:59:09:d7:18:ce
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vernier,O=Vernier,L=Meißen,C=DE
Chains
Nov 5, 2024
Subject
CN=Vernier,O=Vernier,L=Meißen,C=DE
Serial Number
48:dc:6b:f3:dd:49:70:f8:0d:6b:31:dc:60:d7:c4:f3:60:e7:a8:b7
Issuer
CN=Vernier,O=Vernier,L=Meißen,C=DE
Timespan
Sep 16, 2024 - Sep 16, 2027
Minor OS version
0
Major OS version
4
Entry point
13455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW
shell32
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
user32
GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
SetWindowPos
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu
gdi32
SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
kernel32
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersion
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
ExitProcess
CopyFileW
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Placid.Sel
- SHA256 ca6d0e27587fce2950cba487f154c9c47e2c668dbeee96328eb439a08febf664
- MD5 1bed7803db687e44713436a3b1bfa9e7
- SHA1 4b3780aac93d35e522adce172a3d2d84c8d471f4
- SHA512 dece7d3399b5fb0fca591eb8588cb1a3bd340019db3e376cd321bbfe6993c330af7171602758a20b268bb8572688d1270fe8b2f3f09fc22f72715868d237528a
- SSDEEP 6144:/ZWwYR+TeMEBrqNMHeVyY1oMxAzPjX/mJeC+1V/t:RWtQkrUMUy+xWjPGn+X/t
- MD5 SHA1 SHA512 SSDEEP
Rendets.spa
- SHA256 44510d340bbc5f63ca2c8f10b633eb4b9f3161ba993ec6eedd188a91e0ea29cb
- MD5 f49b14a84935d3315799294d72c27588
- SHA1 411a1e045e36804334e50f675497476cf8728cd8
- SHA512 780d317e31110e85d460c365ef038399ed92f634ad302d76b943ba0c8d097e67fa2ee70ca378cbeb049c504eb6fdc7ce9322dfc8c2ea407290f2ffacb12ce337
- SSDEEP 768:ngExa6RvNCt8aP8GGNei5Vd9o+8KDMxbjI/yE7y+Vket67Jono3OrP7Ig7fTfPeK:ds7wdj5Jy+66msQXbTYmyIvI
- MD5 SHA1 SHA512 SSDEEP
Saganashes.Com
- SHA256 8e626d6dc0bb24ed272eaec732b70f81e306c38eba28df9e96ce78d61a75e455
- MD5 86971efe48eae4401b734e86152c12aa
- SHA1 93376b7df5fa9f5d363e263dd898b86e42e40ec0
- SHA512 a04489dfa81e2fe20f1a8f07c562ed4a05f85b74d5745d6cb712252a46f997a7de6c9f11c3fa902c7c7b03f6ff8596e89e064c251b6a348dfb0d3b7ff6a02455
- SSDEEP 768:AN4iitGvtxOdn/KpRVkmzfjoAPPSQJorIsqd1d4FdJF9wBYExO4u5lwSnuzC:C6o7kn/KdHdf2rtC1d42BYExOT5lwQ
- MD5 SHA1 SHA512 SSDEEP
Samfundsforsknings.kom
- SHA256 e2d13df2a397c7e02162dbcf1ef3859bee27b1621366668c3fd2624c73983da5
- MD5 3f193071e013baaba98787e052095e44
- SHA1 db5055dd04790a8d38b387230a3f27675445e03e
- SHA512 ca2f024814a28b9dd1f579f3e102b239c1e8031474626d596885a11ebb90064246e61e2244c8fc98953ed88b96db377cdb0ebcfed1854c6a2f1ca829d2bd618c
- SSDEEP 768:C+J9SaJTz04AB+4nKVcdCo8eI12bxBk3caEXPBHgU5jU+rJRyi6VGM2+bhkJlz61:CDDV4U6+Ix1xQFBdQB9A2z0vCd
- MD5 SHA1 SHA512 SSDEEP
Tingsted.toe
- SHA256 164c9c64abf8ff20948865d0813887c14e0869a0d157618dcdc39d771c68409e
- MD5 81f48e5bba988b09927c5978d2f503dc
- SHA1 e69aff64bd0afdb25a086a20b30ccb50260646eb
- SHA512 7fc1997913e45888c57384a496ed6d04e3f6b34f9114cc41e393802081f56ac89dc67affa452aa742224b59efe0b4f4296b3f03f0ca53019a59d8369f6597f57
- SSDEEP 768:2XMiZ8QBBiPGMUc7n6oYIjKzLzGeBYRa5goSQKiCGLyiZR+uLaHUcz/funuGTt/E:oZkT6A//mId4m3GoVJs2Uo
- MD5 SHA1 SHA512 SSDEEP
diskrimineredes.lge
- SHA256 71c4ec4f1e49ee16b34837595a849d1105a673971ff6c896f70cc616476a066e
- MD5 9bc28d4cd4ff5fce5b787f203e07cb2e
- SHA1 9903cc19b0a00fb0140b308b9b8a59914bb11610
- SHA512 2d54c2536719b4ad1548e5bfd413d9facac2abc88f093d15ae4ad94235067ba1482e7b6126ba6bc8512c43d95ad77b3409d18e25c63f7811c20cf492ece14f88
- SSDEEP 1536:LPsqM6LpoQgKvVHCSSJMrI72Jd5qVI9Ry3MCZIW:L0qLLpoXKvFfwW63rv
- MD5 SHA1 SHA512 SSDEEP
kopierende.six
- SHA256 ed8f9d192fead1a74a737302a23093ed0aa41683db04a4f1d5ad6ae495bb3878
- MD5 ebe5427bd07c76b0b91cb5b0142b4620
- SHA1 d7c6c283d0a0e6eb0dd32daf8dfc14b1c2fc78e1
- SHA512 95286ee142be691f8185834a179818b10d16a9d35ebb75ce663856f3f4a0927d3a6d44c272d590c0e606c0d8d30a9b569978ace7faebf6d95d69a7703a800950
- SSDEEP 768:luaYVpTHH6DSg4Zs/uXPFpxnRatZnI2shvGgL552nLYtfEmiqQtP56bP8MDU4YIj:lOc/4ZJwgECUVcYW3R0AmggVvCzNUZK
- MD5 SHA1 SHA512 SSDEEP
sejrvinding.ten
- SHA256 d68752bf5834410ad6d6490a1161f0f28049e2f3caa008f21517b029cb37dd97
- MD5 1c8433504309e2e0f963307867105afa
- SHA1 fd2a2b738a055809291b91fd72bc655da2235923
- SHA512 3ee0941f3c85866047a52637d202941e0d075d897ae1c21ee6a19fae27ea811fb8a9bc521e3c611f86f13c2fa599b2bfd4b869bffc5d9987e41b174644e7592b
- SSDEEP 768:AJ+eZ2F3cPLgOVQcyPs7LdOS3iSUgjMIpklgIfkXrVPY9GLJCzj54wswsg5k5gxh:mPNjcMXJQ6XkN1L77wZTwg9OL/KS
- MD5 SHA1 SHA512 SSDEEP
stillingsgruppernes.txt
- SHA256 2d53502542c7fcdf0895f8d47bd7e3d7155110373286faf6a25798b5b6547548
- MD5 9da94026648c2042e0f6de8c1c01a5d0
- SHA1 2b7ea0f4814000aab66fd2b007e757b0fdfc2591
- SHA512 a99113e1c4654d44a4b32d7f9d279df946dcdd8c42e1f4a2db20e72587395ed69e5758957b95267f504fd679f8626e1d46a41040394ec8a86b2c82ebfa131b20
- MD5 SHA1 SHA512