𝗦𝗘𝗧𝗨𝗣[.]exe

𝗦𝗘𝗧𝗨𝗣.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 648584ee9fb46fa8ac8d7675d5f96754e7c22afab77106b1e677e6a8e7c22abf
MD5 dd8d9c24c888d2d6d9bf60cf2c3dc37c
SHA1 2bc756da8051ef9aa68827254c19b5b030dbdaa8
SHA512 5b6cd576b92ad14ae329329f984b143825d582491efd399dfc10cde375cdf2b534279a3ae5f607be54f4b45b9838d4bd0ad79425fdb570d4b97b7584c500d062
SSDEEP 24576:u0aSlxppKeteDPYlDLToaJZRKFBi+VR4nCaHDwg77VPWzEFwEF/:uwXzezGLh8fi+QDwg77BW4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

aa:26:10:a6:af:0b:e1:1e:91:b9:27:a3:4b:7f:8c:8f:b3:e1:ae:85:3b:f7:59:aa:a1:18:49:78:96:f9:b0:bf

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Ansgar Becker,O=Ansgar Becker,ST=Nordrhein-Westfalen,C=DE

Chains

Apr 9, 2025

CN=Ansgar Becker,O=Ansgar Becker,ST=Nordrhein-Westfalen,C=DE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Ansgar Becker,O=Ansgar Becker,ST=Nordrhein-Westfalen,C=DE

Serial Number

f9:35:15:6d:ca:90:ff:6f:bc:c5:1a:2c:70:8b:0c:fa

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 10, 2022 - Apr 9, 2025

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

0

Major OS version

5

Entry point

13289

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$TEMP/Gourmet.vob

SHA256 f8f54ce056b92b1fd43c20bbd3677547294f718f79b5a8e70b1f91e77427debc
MD5 3af4460d37a877b09e68f5a0346e9fd2
SHA1 ff3aeffe5de5fed7e556a267ff1b264fecffbea3
SHA512 f56064d99bc47abacad8c2476e617e23cedd2f48a78866101236999dd90ef2b8ee96ea51308af462d3c8179418af3b29d7bb9078f6eac5ee19de03caff3c0614
SSDEEP 1536:MllCGidm7q6rIJ5Bp7iKecp9ARElhepvWvSU2bYltxoarA+CW5:MloHCtGBVinM9LSpOh7rC8
MD5 SHA1 SHA512 SSDEEP

BelievesPacket/Exhibition.vob

SHA256 03d70327155d10348f2636248c454f7706bdd4454d5ef4dab7baf4874edd594b
MD5 ae84c2cd03bb796c64ead930abe76f47
SHA1 3db5a611c25e46064795278c862bc478bd758eed
SHA512 9007d4bef0bd2fa9c4d217d2715204c343041e4ad662aaf67a297b72e6829db0d99f28b787631dd751d9f4ca67066ec4c00be7eb741043dddbc55fbcd4480231
SSDEEP 6144:Y1JvNCC8zXbE0lh5L44252Fd0UFsuEd05y5ARB/yj5sh/gAPadfxq2tqctGuI:Y13CC8Hhql5CGnuEqBhyjyVIwwGuI
MD5 SHA1 SHA512 SSDEEP

Addiction

SHA256 34e5b113af8de5160b43bdb4dc3c7cdf4701ae628d3bd180f73c055bdc7e5c8d
MD5 168a45bb956514b69eac3461ff63eeef
SHA1 e34c19cebf911e62492310f798cef32c3320c1b9
SHA512 dfc0616aa39d90c3e019434551dcd05d91f0fdfcd198a263999ef0729601fab0cb352b97731a5093620aebf48e544c974211242bf3f1b07ed950ec11280b7dbf
SSDEEP 3072:jg5PXPeiR6MKkjGWoUlJUPdgQa8Bp/LxyA3laW2UDQWf05mr:s5vPeDkjGgQaE/loUDtf0u
MD5 SHA1 SHA512 SSDEEP

Bang

SHA256 898adfb58be2846fc800fbbeeab949f45c3a115deb8cdf219b4d993bc3a77b22
MD5 8cc838903792ad87c4b4f6dbb7b88d9a
SHA1 d3d15b1fe5dff1e9d228807d02afa490c62f11d4
SHA512 470f83a42525039db5706d45088ab0ad8dd302f51ccb747de4ff3b9013a4076f3b00c4587133ed9444844cd360543caf067d85a3227c80c17de25e76d52ad616
MD5 SHA1 SHA512

Cameroon

SHA256 e36fdfd19ce1dfe4510a19aedab4fb6b4637cb75a7fa073b25a9a03d808a7bd5
MD5 a4d52256aa14a188e272b3b0a7c11f7c
SHA1 eb461a744f356e9e2e9ffaaf3d08a7b41324077e
SHA512 ad8a4ce7dc2ac16eb6c89e0861dcbd7aa1f8f9a802c4232d1f7fdea05ef63dc5f8254809313da425ca872147e9ecbbd3db7c644be17791b435568af45915ddf1
SSDEEP 1536:HbFuz08QuklMBNIimuzaAwusPdKaj6iTcPAsAhxC:7Fuz08XvBNbjaAtsPh6whxC
MD5 SHA1 SHA512 SSDEEP

Charge

SHA256 f5deb001eb143e4ec91c75ead8879c684770be9c680d7c25a294425d5e7fea26
MD5 0982bccf82ea5aae10ecb26fc7a37779
SHA1 0ae7c87b4e2ea39889cfc54b529d7147a5140f5d
SHA512 b2ee5340dc35aa5afcc8f3be45e7bde1ec15f24b81ecdbeb75b9fd67b6547d133080ae2ea43fb477b2ce0deafb2f812229775e0b7dce776a7bd7def601254382
SSDEEP 3072:nccBiqXvpgF4qv+32eOyKODOSpQSAU4CE0Imbi8s:nccB3gBmmLsiS+SAhClbfs
MD5 SHA1 SHA512 SSDEEP

Dated

SHA256 1c042ef9074e813ddd2c03a272bbd1f72365737e9eccd6d06f0efa21fb0d4427
MD5 6d183c00eabab0b667aef19fcf2aa66b
SHA1 11324bf6fab77c86757e72c586603b2e84f5c25f
SHA512 03e5a20ab91f26972a937da63b3094fdb4689ad02358f8b0ef8fb8e4a9e2cc67922c57bae672362ff5f61fddbd0a029c11451b2b71927735aab46637f8490d91
SSDEEP 3072:qESv+AqVnBypIbv18mLthfhnueoMmOqDoioO5bL9:2vmVnjphfhnvO5bL9
MD5 SHA1 SHA512 SSDEEP

Dynamic

SHA256 0917a4ff975c8402b3e32a8cd575e6a30425ff83443094ff03dd8827cc9b5fd4
MD5 42922167b23ee50be020489e1a39efed
SHA1 c675d7247b02a617c3c28b03ef3f3cdff9f513cb
SHA512 6037220b39b01ce5bb4704f50c60c1820348e8561f619b7e0cd13463ae1023daa093a5533b4a039b6afba317302ea58d7d71bfaa17934d528a8bed4f9eaf845a
SSDEEP 3072:tPnj0nEoXnmowS2u5hVOoQ7t8T6pUkBJR8CThpz:tPj0nEo3tb2j6AUkB0CThpz
MD5 SHA1 SHA512 SSDEEP

Meters

SHA256 1ac9c12e3aa76ec59f33fce49790d23e66b87957c7ceb19a03373115a8fb9364
MD5 a63472cbf83d51272f7c45f9534b63f6
SHA1 d7fbb30f85c8508ece946204f7d19f1a0ce4e307
SHA512 d7856656168907b620833e0007577c3e83f1fe886eb13542b1228bf7d239d0244a2cce996b2eb3f77d2735ddffff5292b00a4b51e8207fd06b999516285a75d5
SSDEEP 384:iO/ChZrzmZGhLdXVaeCVrVEVFJ8ZcGwGBk7/UMQ3rw:iO/ChgZ45VatJVEV3GPkjF
MD5 SHA1 SHA512 SSDEEP

Omega

SHA256 8cd62ee9d5bd6ed08fd32641bb35fa8172d483ea8a06395c782d61c2e3a9ca72
MD5 eb5b05dd16e772b9152c1c58aa61e134
SHA1 919684eb4974812f5a7bc9b6755e6dd05e650a1a
SHA512 6f9d5a304985fe2a7cbea7294605a5f8f504e46e2e79491ccf9297aea972792eb2b82877e0a1e41f44c39c455d4794d4e45d56ee80323f3ec549816776096334
SSDEEP 3072:5PtCZEMnVIPPBxT/sZydTmRxlHS3NxrHSBRtH:HCOMVIPPL/sZ7HS3zcH
MD5 SHA1 SHA512 SSDEEP

Organisms

SHA256 189f3d32cc956bb440f17d6d0ebcacca55ad8ab687421dcaba8ad630e7056fb6
MD5 bfe75eb7ca9cec1466ab83766852bb5f
SHA1 887ac25242779883ef31b47c0f76743f0c7eae29
SHA512 f61c18533829c6618d731844271dbc2174956f6ab008e37907eeaf1478ac8aa68b378e16580d0027bcfc5f72697de2c99f7165e363cf0f9d2866a39677cb4313
SSDEEP 1536:szW9FfTubb1/Dde6YF640L6wy4Za9IN3YRYfv2j62SfuVGHj1vtK7h6R8anHsWco:szW9FfTut/Dde6u640ewy4Za9coRC2jE
MD5 SHA1 SHA512 SSDEEP

Pub

SHA256 f1006ffc379ab29d36b986862dc0a86d6dc58e7bd0900e478754a0aff6ae8268
MD5 b52057cdb81c46bc84d7326983547a88
SHA1 51a5534650a2f23618bb07b3a03db50d9c68acff
SHA512 bc6e5536e13acc676b659f933c4044bce1ad1d82d4a833d9d21d073b944e62b259bb5807a81daf20b59b9cce6a60206d8b69e2e42daa8af41444d707c48d1463
SSDEEP 1536:mgarB/5el3EYrDWyu0uZo2+9BGmdATGODv7xvTphAiN:mgarB/5elDWy4ZNoGmROL7F1GO
MD5 SHA1 SHA512 SSDEEP

DefensiveTin/Ascii.vob

SHA256 c23976502d7f915f4dbeb7ade6eb93ef6dbacb092797710e0ff7219e82660762
MD5 8d483be2144182820a27f84022561866
SHA1 39e772d7149b67df9309102c8428a43d46f3b33c
SHA512 bd26b534a56f4e3e9cc58619b239135eaec105079d08f10c4897344f8d1c2fd100e7ed432703f2b98e2109ca60cb003461d24702efb8196107adc992540effd9
SSDEEP 1536:xy71AppfhH9oqhg3rrHGyB9U50a9GTTvWRtcKdqw/e6H4aqie+QayE:s5wDdoqybjGXsTTvW3uiV79Qaj
MD5 SHA1 SHA512 SSDEEP

PhiReducing/Rider.vob

SHA256 fab3a5732067cb67dbdd3b51923bff15eb518d1bfb1a68154b4412b58b6ff178
MD5 a5f6b55070e61cfbe811ba656880c0d1
SHA1 362ae57f0ae1e8d1354332c1c57c7d79af7f1299
SHA512 9984449b18ae2b08725f447c1aaeb135d922eba0f5db73076c130b6abc18447669c7286e99b2e29b8360028e8af9b162b20cac10a49f1ecb8f96906814239492
SSDEEP 1536:ykREc+Wg+bfu0xy+tUhnPiY8pylbWtrw/soOJdM+echPK:ykecY+py+WZ8IbWY8fZK
MD5 SHA1 SHA512 SSDEEP

VintageNaples/Has.vob

SHA256 d33f50a1802908f96135cd5f36820eef3c62041baf9c3a50e5a7fe25135153ea
MD5 28ecf58ce04dac65e7e5b751a384877e
SHA1 e3b008c985178890b8ec95f35a0c20c41f85ad1e
SHA512 986442a6138013a061312783441b39501f052d4d62864c75c8e363646a172d8d2fdbc03d1e1542d1d84c13e8d35d5ae61977c84a6e7997bf864db0b221b7406f
SSDEEP 384:W4OfkcPS+4pJQ5VFFyk7PqftolxCaVY9KTj6CDmQi4F4HGn:W4ZcP/FVFF7bqfSlFcKTj6CDm64mn
MD5 SHA1 SHA512 SSDEEP

VintageNaples/Tiger.vob

SHA256 831df60864313d2dc6005d90a3d691e53cd20905cdb414cfba9be1a667b962c8
MD5 a3aff6220522b62ecb629783521bbc73
SHA1 0a4cfba2b9ce971eb4d4fef1c8232ad85851e60e
SHA512 431366723351727b48559186483301b8f12cb35490913f32f2871c3e3bc64a10edf3d178c71f8f44bb52921a7749753c92c6e93aa11b63825781a749b61f4bdc
SSDEEP 384:urA7JpbnpMVgA3zm9U4uC0qZW0/pLiZkVifI3V4KxZ4aA0Exc14gZ4KZrvt5:urqJpb3um9TlZpV8kVifI3lfRpYIr/
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

𝗦𝗘𝗧𝗨𝗣.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$TEMP/Gourmet.vob

BelievesPacket/Exhibition.vob

Addiction

Bang

Cameroon

Charge

Dated

Dynamic

Meters

Omega

Organisms

Pub

DefensiveTin/Ascii.vob

PhiReducing/Rider.vob

VintageNaples/Has.vob

VintageNaples/Tiger.vob