Swift Copy[.]bat[.]exe

resource
Swift Copy.bat.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Swift Copy.bat.exe

IMPHASH 671f2a1f8aee14d336bab98fea93d734
SHA256 59b03fee31c5c62caac3b05827d210553ce84a6e7c5ae43cb7d34f8242d9bae6
MD5 411ad554068219f2ed0ce5e74f02d542
SHA1 917cc7780771e518c544338e24204471c54ec5fa
SHA512 6dbd1cffd8e580bb8737e00e6c85a63d8092edb2db2028d671241fc1223e58d254a13adfe1ee05574a98be8ec471566bba7d73e2d73d30ba1805d35615c3e090
SSDEEP 24576:i/Vwqfj3y6EQ4Dsv+G/9nRn0fyVPiDrNEtEBkvUEZmWwH+EP0R/tF25taZScLvci:0Vwqfj3y6EQ4Dsv+G/910fyVPiDrNEt1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13205

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueA RegEnumKeyA RegQueryValueExA RegSetValueExA RegCloseKey RegDeleteValueA RegDeleteKeyA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegOpenKeyExA RegCreateKeyExA

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA ShellExecuteExA

ole32

OleUninitialize OleInitialize IIDFromString CoCreateInstance CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

SetDlgItemTextA GetSystemMetrics CreatePopupMenu AppendMenuA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcA GetMessagePos CheckDlgButton LoadCursorA SetCursor GetSysColor SetWindowPos GetWindowLongA IsWindowEnabled SetClassLongA GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetDlgItemTextA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint MessageBoxIndirectA CharPrevA PeekMessageA GetClassInfoA DispatchMessageA TrackPopupMenu

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor

kernel32

CreateFileA GetTempFileNameA ReadFile RemoveDirectoryA CreateProcessA CreateDirectoryA GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceA lstrcpynA SetErrorMode GetVersionExA lstrlenA GetCommandLineA GetTempPathA GetWindowsDirectoryA WriteFile ExitProcess CopyFileA GetCurrentProcess GetModuleFileNameA GetFileSize GetTickCount Sleep SetFileAttributesA GetFileAttributesA SetCurrentDirectoryA MoveFileA GetFullPathNameA GetShortPathNameA SearchPathA CompareFileTime SetFileTime CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc GetModuleHandleA LoadLibraryExA FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA MulDiv lstrcpyA MoveFileExA lstrcatA WideCharToMultiByte GetSystemDirectoryA GetProcAddress GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableA

Alkoholers.Ret

SHA256 01fbdf4dbc1f68eb63e7ddbd2f38ce32878575030857fc1fbdf6701072b540a9
MD5 71fc777fd0d8b08ed6a1b1989cc95318
SHA1 2d2f221507791b9765104d8c2e4f5a2b11cabe32
SHA512 a837f6e3c95c19021ff908bc584ec9aa9d9503758ba9cea261d9ac75125520801bf73845b0a3434ec55afd818cf68bed560e9238ffc1e05ea9c5cd192c337f61
SSDEEP 6144:Ns4qZF5P2bOn+QEjDxbKw5NQhT79c3YMCUIFaoXOnI1iah:NQxeq+rDx8lc3AfFajngi+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Enswathe40.odo

SHA256 cb7baf36f88056c3cbc9a9ed69f12ad35e70847aae421cf48d213358f620484a
MD5 b24d9c41ef89bcbfcb50778cd7eb9ac9
SHA1 d9eca360f9e2e1c221ab958a104aee8160c38253
SHA512 4e0d56a4bda0ce4a5dc59c7ac8cd8184187e5fdfdb7898329808002f678044b3267f27c9bfe4ef99a1df5abe5da46209b652b21509830e66c4743ac0135b5c53
SSDEEP 1536:fv1ODEj9XncW90/EiI8OKq+G/f9qrsvLay2yNreLBoHc:Nj9X9WI8SNaq8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Kuglerammers.vig

SHA256 2c0cd4efb9faf6e7b3565d957260d7c2c10fe99d0402da1678d2e7cae3c82647
MD5 e97cffb91d2c4c196f7f5bd797749fef
SHA1 2c6e337fedca21e9710a108bc0b5e55885408ed0
SHA512 2ba4b397f92e8e848b1f788ece2cf2ea3ba43dd1951ab8de5ee75a187af591c42f2fb13426a7ec5fd1aa53d8f1b61ec4c8aa32e315302fb8417f793efbf7efca
SSDEEP 1536:BzYFF3saF5gbXha6lld5mhiAtaee25pQd:tYFGA5gbXh1d5mUAtaKC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Overkeenly.Aut

SHA256 76a1f9a4593917cdb08c30b9a444a43a7100fb1332aab4d7a4e335819eeeae55
MD5 e1aaf4db5b49f5077aa39b8e8ca91243
SHA1 f1d68c2d223d1112f80b798a131da9e91c826bce
SHA512 80d95f4062e06d0706c070b1071d9ba8ca3fa824532dbd3978cd95405502d48cf81dd2e5c6c329a90ebe8793e2065f22cb5502c510076ca626f6e92f0ba8608a
SSDEEP 1536:EBuR7slSxKxB6bwQZdh+1vnpTWOogw5C2YwBLNHh:EBuRoiKx0bvdsllCDBL/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Tilskudsaaret105.non

SHA256 700f1367f9669dbcfab9515be5ef38c802ab360befb1730b14c43f5826af60da
MD5 076290d4672f30d55a7f09f19323049d
SHA1 e8fbeacfeece19825cb88069831faa2b30510ea5
SHA512 68f222c28323bc07e7e33d1e6d994e73809f50e813cf62daf27ea109fefcf9e3867b74a36979fd3c98e760235af8568d4359d5876692b22fb7a7d90186ca338e
SSDEEP 768:A2kNp4cTkVuhaV+xRmwk6Iafy+8Z8puLtXNxFmCq804qpPE+tKDZ7qTnWWayBOVP:Yzou4W8Z8sc4oZk+8dQW3wNC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

erstatningssags.lnn

SHA256 0d6f7fdbdcb5160704f4570c95f740b86f50f2d4f2f8fdaef3460e1fe1503f68
MD5 95f4c5b4ffe00f185515de070a98e482
SHA1 ba75e6018b26132987b33d48c7c6d7d86e71db19
SHA512 0da008ec3b1df2ce0071b9122b7bccfb48061c06618037fac4865b5c0b3c6376d2f5ffe8df28fec08cd74ef695fb73876e4f0350b8924c52e129262bfddef5a3
SSDEEP 768:gJjZm+wAccCCxdoFaOReFkRq0QBB9bp6kr8bOQi8MwvzDGGSJnAgvM/iSnwuuX3f:TOXlYHW3noaLaiJS7vlom4QEhJL8ox
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

isospin.cap

SHA256 c6f963bed0cc478af2f485381a0a8a8b0aa57a6df7462eb00a78fe005487a8a6
MD5 a61e253004c074f9a942a25efe2aff62
SHA1 76ddc0ff8c377fb58abc14cefb2674400df934dd
SHA512 3731d17ed4887229aabdeb56b3b1db5c483953c55c22202e432b8100c928e1f6b79f71ab6840ec72fe68e38e487f2f37a4da0ccbff96a7d465aae7cae16a24ea
SSDEEP 768:2anAdxHmmkD+9XF45/SCAwG1nKlTd0uC7PDL07196Edmj8s2NeHTTu9k12OUNneN:vWyEwF6D5PAogER
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

javelin.lan

SHA256 f2de8e741674756765cd24f7dc7331f5789fabfdda0da9a6cf992cf82ed1e364
MD5 6cc7d8201dd19ea61b2bc90a8e697bc3
SHA1 436f88e90a8d32a560a8f83832d008c424ce5caa
SHA512 686985f3d642704475cc273fc2fcb5f317fc75a54bb0e31753d27553056518fd33e016710e65b28ef3d2af026c8f3d19fcc876700a814a4f4c820f465f93b329
SSDEEP 768:ZcvfJBzkfK6Qe0VPhiivMyPZU8yMzJ0bTOVSiOsc92C4QaggyDurObQ20+wyckLZ:ch6EBcqS1G9r8kGXr5UCdOxV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

unshaped.txt

SHA256 9832bbc2d5af670c9561bdf25a64db77c6e6d60a240adbb0a36269720a59f1cc
MD5 a0817be5ed5e0e7da50987efad1f1b1b
SHA1 3f6ed1459793904055ea89f07f292c3f008f458a
SHA512 354c57576319e6ecbfe22dd64b163a871257c29ce7d22080dca140bec4a9008da085cf55938b0ec47e6de3ccd704512e86fcf453b50f8964500bed0e45d0f787
MD5 SHA1 SHA512

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer