28c1582f21d12822446d835ba2043a858f21cd569b163022e345308cc5b6552f.rar
- SHA256 28c1582f21d12822446d835ba2043a858f21cd569b163022e345308cc5b6552f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BANK SLIP_TT COPY_23340636300773456864-2-20-2024_pdf.exe
Resource
win7-20240903-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
BANK SLIP_TT COPY_23340636300773456864-2-20-2024_pdf.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20250217-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target 28c1582f21d12822446d835ba2043a858f21cd569b163022e345308cc5b6552f.rar
- Size 603KB
- Sample250228-cqabbsxtcs
- SHA256 28c1582f21d12822446d835ba2043a858f21cd569b163022e345308cc5b6552f
- MD5 add1d375f4e2d9a5e910e80e3132475f
- SHA1 63d0193de8bac72bec1df12864aca8b49b2f2e9f
- SHA512 b1c11cc6f567c30a8d5a0414f66ada3d5136bda305b41565ac22339d2189428b653bed916dafd1648b39c2524f9d200fa01ae2614d9dc5ee256eb53990d57b79
- SSDEEP 12288:JK12P/55hlNu67lG8Rlg3I8UKmQrlVlPR+IlbXOoUctIQdb9gRS:E125blgUk8M1U+rlV1hpXNUCZ3
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/BANK SLIP_TT COPY_23340636300773456864-2-20-2024_pdf.com unpack002/$PLUGINSDIR/System.dll
File Explorer
-
28c1582f21d12822446d835ba2043a858f21cd569b163022e345308cc5b6552f.rar.rar 603KB
-
BANK SLIP_TT COPY_23340636300773456864-2-20-2024_pdf.com.exe 823KB
-
$PLUGINSDIR/System.dll.dll 11KB
-
Svinebst.Cho92318KB
-
Unhitched/Aktiveringsposter.txt521B
-
Unhitched/Skrdderere/Bafflingly51.txt439B
-
Unhitched/Skrdderere/Cresting.Ven221KB
-
Unhitched/Skrdderere/Monaxonic.ini482B
-
Unhitched/Skrdderere/Senatsmders220.jpg.jpg 24KB
-
Unhitched/Skrdderere/brevvgts.txt515B
-
Unhitched/Skrdderere/faserumsudforskningsalgoritmernes.txt282B
-
Unhitched/Skrdderere/lanius.bak158KB
-
Unhitched/Skrdderere/lystfartj.ini314B
-
Unhitched/Skrdderere/officialty.for276KB
-
Unhitched/Skrdderere/offtake.jpg.jpg 7KB
-
Unhitched/Skrdderere/sopransaxer.jpg.jpg 2KB
-
Unhitched/Skrdderere/spiritmonger.txt505B
-
Unhitched/Skrdderere/svinendes.ini560B
-
Unhitched/Skrdderere/tactilogical.ini321B
-
Unhitched/Skrdderere/udflytteren.str260KB
BANK SLIP_TT COPY_23340636300773456864-2-20-2024_pdf.com
- IMPHASH e221f4f7d36469d53810a4b5f9fc8966
- SHA256 68c8ef0e9b37380e0111fc58705884d4f5aa491e25270a2608aaf4568fa98b1f
- MD5 5c828d093e5e944176ad0ec6962e0bcb
- SHA1 e92496a462ca1eb63938e49b434699a6bafbf043
- SHA512 ec303589511bd8a916655c7b84ae83a2575c169733fc43475c27a6b79b4afd2f36999011d7048cefe7eb291bc0af05d66284679664b75434c2a0385657f8cfa2
- SSDEEP 24576:fXrqImBCUkwIzhdQYEynSzMB2nUmVLj3pboR9Kbl13:fWIS5YXSU5kj5bow5F
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13146
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathW
SetFileTime
CloseHandle
GetShortPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
GetFullPathNameW
CreateDirectoryW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
SetFileAttributesW
ExpandEnvironmentStringsW
SetErrorMode
LoadLibraryW
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
lstrcpyA
lstrcpyW
lstrcatW
GetSystemDirectoryW
GetVersion
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleHandleW
lstrcmpiW
lstrcmpW
WaitForSingleObject
GlobalFree
GlobalAlloc
LoadLibraryExW
GetExitCodeProcess
FreeLibrary
WritePrivateProfileStringW
GetCommandLineW
GetTempPathW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
WriteFile
lstrlenA
WideCharToMultiByte
user32
EndDialog
ScreenToClient
GetWindowRect
RegisterClassW
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
wsprintfW
CreateWindowExW
SystemParametersInfoW
AppendMenuW
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
GetDC
SetWindowLongW
LoadImageW
SendMessageTimeoutW
FindWindowExW
EmptyClipboard
OpenClipboard
TrackPopupMenu
EndPaint
ShowWindow
GetDlgItem
IsWindow
SetForegroundWindow
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
advapi32
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
267KB
Virtual Size
266KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=166, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/System.dll
- IMPHASH fc0224e99e736751432961db63a41b76
- SHA256 4ff9b2678d698677c5d9732678f9cf53f17290e09d053691aac4cc6e6f595cbe
- MD5 3e6bf00b3ac976122f982ae2aadb1c51
- SHA1 caab188f7fdc84d3fdcb2922edeeb5ed576bd31d
- SHA512 1286f05e6a7e6b691f6e479638e7179897598e171b52eb3a3dc0e830415251069d29416b6d1ffc6d7dce8da5625e1479be06db9b7179e7776659c5c1ad6aa706
- SSDEEP 192:eP24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlbSl:T8QIl975eXqlWBrz7YLOlb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10183
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
851B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
610B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Svinebst.Cho92
- SHA256 e58f5ed2709492ec89fe283115a8b376ff1c8a76e8018da52496baca6547205e
- MD5 e382e4c73ca0792b35a70efc222abee2
- SHA1 20410af5e1ff4fd72ee709aabcb947e6aeeccf22
- SHA512 9d39180a1ba57fbd4a421dce4e7f394e4405607995dd8e63781e1f9acac1efba2acf01436bc4d28bc91f1d5a68342f8f148e306148d6008cda73b01a82d0321d
- SSDEEP 6144:r4H6J/o0uztvvPzbawabyYccIAr2JwphttR:MG/latLMbyuT2QttR
- MD5 SHA1 SHA512 SSDEEP
Unhitched/Aktiveringsposter.txt
- SHA256 454a56b9cac7691002cc01d1f6fa288d1b9f72e4d2045cd363308887f03dadbc
- MD5 c55550ebdd7bfbc247c8c2388f1d5256
- SHA1 5d1be452d199311cd38de2f9ad6715d2bda55ddb
- SHA512 35eed9d6bf2c5646011f971c5cda7b238ddb8771f1c221caf511be3d36f84c965421b9dfb16225cdd6e86d1d7432f2309ca77eff73d9a6a6d68047175783a6e0
- MD5 SHA1 SHA512
Unhitched/Skrdderere/Bafflingly51.txt
- SHA256 9a99407b2c741cf4e6713db45fb472bb3f88fcb434e2a37df79d82dd4305d071
- MD5 4d6d43248d70a265787220b52b51d51f
- SHA1 61533851b86f66f3404993e87e38957a6c068fcb
- SHA512 ef9a74cfa8ac4272c37353095ad43bdf8d173e59e84f6dc9f4890a7495c78b1031082925004788677184b148b955a9bf2cf4c19f56dd58b0790a4d0f4a09e6d6
- MD5 SHA1 SHA512
Unhitched/Skrdderere/Cresting.Ven
- SHA256 8ff370e08d2b433cf92c60f9520c589b8d99abd53e8904d2bbfc213b6d4e332c
- MD5 e384e33cf0edf799dd548874b51b9c90
- SHA1 748b8f11dd07180423030bbb29ef71d4c2276712
- SHA512 84d432e1e2be19837527134959ea9400b70e1ee37b3b39d2346c36079dd649acb83665df62a0ed5cd7ecf127eb11c080c54d4f180866396c53fc3dbc769d2a26
- SSDEEP 3072:WdKnNNpaDEgTSzqvCWOsuJELRkpTp7N5E+Fk1ymdu9vC:UytgTSzCCau+LR82+999vC
- MD5 SHA1 SHA512 SSDEEP
Unhitched/Skrdderere/Monaxonic.ini
- SHA256 b02da10b728d8f6448cd1fe4cb34a0cd1f63d3dd8eae80508fbe7ea255e909ad
- MD5 c1950a78fe20de73cfda84ffd1ef259e
- SHA1 de82f3c3a40264b6f6362e980e24d8c4fefffca7
- SHA512 52770720f3f12c67bec4495737f98da719cdb6725b5ff9b46ffd4b0a492f7af64e53e3b4d837ddcce32ebda22a6fb9c2dfe8fd319c4c4723ee91ceae8d205ce3
- MD5 SHA1 SHA512
Unhitched/Skrdderere/Senatsmders220.jpg
- SHA256 9b04c69303f38509f6e88bf259fdfe1e5185bbe21c028a5c49e02b1a98cd5b8e
- MD5 2427d3684001d3daa31cda5eac5b556a
- SHA1 e32205521efed4fe9c0f780c59db6cfc9b42ff81
- SHA512 393a064d0f255dc33afb0fd0db409fd6f58e9ec02740e71e490f36e5f696be166594ea382bde5da7cd64a4439fdd814828497729975b5020ffadd2bcb57ac3cb
- SSDEEP 384:Face1cXaN1MvkyYAhj+VWDMcjUIUk4cPZhG8uCO5WKWY3EmIxrIP5CPQbFZeebTW:Eh1N1Msynhi3IUkZjG8uCCEpxEwqRX2
- MD5 SHA1 SHA512 SSDEEP
Unhitched/Skrdderere/brevvgts.txt
- SHA256 c901112656834fbf24f4d17d4a98a42d121025c45658bb931db33014e65bbb26
- MD5 be408a745ffca35e5e36fe521d1fd28a
- SHA1 5f266a31cf4c8885a89be91ee40e644e01b0faaf
- SHA512 c47d8db892adf009ee8cba27f85cb4da121b9a05b4186ab5480e7dbc96d3c0215accfd69df3636dc501c49cb42109246bba105315620e1f1fad73dff80200a20
- MD5 SHA1 SHA512
Unhitched/Skrdderere/faserumsudforskningsalgoritmernes.txt
- SHA256 2c0030c3f722f7275bdae110054e48a919b8443a049517276d0e20dd8108b43e
- MD5 9fccd7199cf9d4b4e4ef797552519c85
- SHA1 e88bbea33972642762e27caefc90336208e97513
- SHA512 110ad139f99f980edb2dd2886e561cfa0565b1b6cc97662fc0639590daf20b40ff5bbe848aa651c1f2e2f1f068c99bfd454262229a47c7d9ed314f7ef5dd463f
- MD5 SHA1 SHA512
Unhitched/Skrdderere/lanius.bak
- SHA256 0dcf37bb9b3218a4cf62d799190df4dd06d2b540c0a07fe5cba10bf2ab8aaec9
- MD5 7d8ed85f991c3dc063e673ccf9f3487e
- SHA1 7344614e0be2f304b2c8421a0551cf6e11a37ba2
- SHA512 a6eeacb978c8ef7b3780cff0bf10bf20e321a43a23846507b31b64e281b0c334a64351ea82405e7375607b7d1044de439e5524ed4282188bfe1bd8a97f1a210f
- SSDEEP 3072:Scodvwxgo+oRW5n2UO3ETkUtOfoTR3oeL2cb6gjpm:ScodvwxDxRW52UMETkUtOfoTR3ok2cbK
- MD5 SHA1 SHA512 SSDEEP
Unhitched/Skrdderere/lystfartj.ini
- SHA256 83c4e90791bdc3f223ecfc1f81e11c86b207e32fa0deffebb225fd6acb0e8a41
- MD5 c861a83affe141d9cd74d2a70af7bb5a
- SHA1 e3b1159e20078513ac6e6f8877468fbd4b38b96b
- SHA512 4e63210d1e5343a8808438b6008cc6155f0d39d66739f38c7452a40ae1112ee7f50dc15a2d6528199380ed5765d8d153f796e2ba25ddb29f74faf8279aadfcf3
- MD5 SHA1 SHA512
Unhitched/Skrdderere/officialty.for
- SHA256 830ea545cd1ac7de76ff5446395e7631395a451ac44e9cca9e0e51961031ed33
- MD5 c329b28aabc2fd2602917d94d1ecc6ba
- SHA1 bacf519c8ec84678d65f6e4b3b1f35c778358105
- SHA512 de0ed791c81dacb4ae012960909174e1c0ebf89e29c83fc150e316f6de02d9a2b618858f4ac4caf1a61d7a1f11882449dc56e464ec643d7cb2c48db492091d2a
- SSDEEP 1536:rzCf17rQ9d9Qe/pePwZ0KR+oj/T06Ex9a/FIEK+MB/XUTXh8Xmc+B9SvXU0oUtA3:gyVZG/a
- MD5 SHA1 SHA512 SSDEEP
Unhitched/Skrdderere/offtake.jpg
- SHA256 cbe96664fc36350e4bd6149dd759f2210cec7b38db1054d10840f04bee7b77f8
- MD5 8213448a6dd0e3349a4ce4bcb90ef73a
- SHA1 c3388f7f3beb62a3664420f452050c831c155879
- SHA512 b6807857d0a31305fdc9d20485b66d172de99492acdd54ee900e7408a57b2c1e5302a19e4e3691eac2c85342ad676e98930246a0484a85c9de42813c64ab84f3
- SSDEEP 192:LTPJJ59bzX0Ut7nHONrILuDHx7hZMtqKS1p7UTeEq/TGX:vr/THOWE78+rU5
- MD5 SHA1 SHA512 SSDEEP
Unhitched/Skrdderere/sopransaxer.jpg
- SHA256 44cceec1c07da197a4ccb86ec6d5a5053afbd5faade26d71928999f1f6339763
- MD5 24e63f1c13f2199f4ec6004c35d470d6
- SHA1 42279a8cdc5dc079a99f7ecc84d614e52a1ddcd4
- SHA512 3ef7fd2640cde88e8fab8da2550028feb825fe1fa47c3f4f67a85690736473e6c3f44f99c265e4347e2f538cce4bddd828b88606851d2ac92ed5e9a71e58c7e4
- MD5 SHA1 SHA512
Unhitched/Skrdderere/spiritmonger.txt
- SHA256 cfe77bacf1c245f367bf8e6cc8db08f657935fc0a59b6e25086c5972e26d1852
- MD5 636e50cfdf4876fd9f6a596f2a6a6d5a
- SHA1 5c2a128e31c054fa76ac0cc11ddffe12a717cf01
- SHA512 bcad25a200af7a0b155c58056298d97d558033b6c74553bb15cfe581130ff98ce2fb7de236febd97849cf452924acad4695a2def5db8951d7820cdb7de3b5893
- MD5 SHA1 SHA512
Unhitched/Skrdderere/svinendes.ini
- SHA256 e9cea994b863dda5ad765ae8a578cf3ac338acc124a38e8ab85d9173f76ea14a
- MD5 6c2a4559c6458af3a5259af8c86f9f8a
- SHA1 119916e4475c635789bc3ca251a0a5989e6d852c
- SHA512 f73a37c79d890b05c0f7cdfd688dc09218a3a8c59f321958cc9b8f807cdca3ff83fe12f379492fd33c82938a0f7b6d76370f8a3dd54446cba995ab26eb07f9cf
- MD5 SHA1 SHA512
Unhitched/Skrdderere/tactilogical.ini
- SHA256 e236921c7475711bfbe1a321784f6971663ac049d75b3b16cba1f1a3e8aa158f
- MD5 f152c23467e003a0d968e9028d1a3836
- SHA1 c789e38931be662faadff67d23c21ce34cf4692a
- SHA512 bdd5c3f90f47aa01ad6bc8210db31c0d3661b66bc268793febb5d139d7b9017204bde9eda859ede52faaa92c78d913d709601995e41f9a80767b762e587c7aaf
- MD5 SHA1 SHA512
Unhitched/Skrdderere/udflytteren.str
- SHA256 9a18b3c47885ce3711f044cd7f200515906a8e79310f6e04e01f863bac2e6b55
- MD5 9065f1f7f295623d28764a6bbf9f3de6
- SHA1 4898b4bbd08d469f52548eeb80e8d53e747cc4a3
- SHA512 2d05fc74b01af6825aea40a90e8240ed5276ceb48f19d714ec4bab81a2a217e81c53c7334fa7823f6994dc4dd32b8674a0f83d9224a3a24be2d3c2519a0ea370
- SSDEEP 6144:5AjYpx6yki+AZKoVnAx+HcnVCzPzfpHMNzh9c67AOqS34f74j0E6Q6:JN+Q
- MD5 SHA1 SHA512 SSDEEP