Conferma di pagamento[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

resource
Conferma di pagamento.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Conferma di pagamento.exe

IMPHASH 3abe302b6d9a1256e6a915429af4ffd2
SHA256 cd136f5f464244be32e5443c06dda5e78f0b6c49ef566232ce680f4402429cb8
MD5 a958e7535e035e1963c7586dab036853
SHA1 f51a515beb1c4f6bbde6f2a60d62fa5df7b498ad
SHA512 f26a996dbb8fa967817e7f826a188890a44be582b86c5dcb031c58c29b3695627b36453113dd7a3b4cf75b6132964b67f7cd0848031961b222a2ce0a87cd04cf
SSDEEP 12288:MagM77ZqgnvYFX698r3+wU2GMku9M+ZamHPKMnfDU9sB5PSi96Pd2o0VY8RNzkXK:W87ZaLUepL8bMfDUOBNSivHGw4X7y3l
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

d1:23:84:4b:85:9f:42:09:fb:7c:3e:7c:74:c0:c4:28:9b:82:21:e2:3a:39:7a:e1:fb:48:c5:c1:3a:38:f9:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Monadnock,OU=Inflammatorily Skurvs\ ,O=Monadnock,C=FR

Chains

Oct 17, 2025

Minor OS version

0

Major OS version

4

Entry point

12758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA Sleep GetTickCount GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GetWindowsDirectoryA SetCurrentDirectoryA GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA ReadFile WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress GetExitCodeProcess WaitForSingleObject CompareFileTime SetFileAttributesA GetFileAttributesA GetShortPathNameA MoveFileA GetFullPathNameA SetFileTime SearchPathA CloseHandle lstrcmpiA CreateThread GlobalLock lstrcmpA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GlobalAlloc GlobalFree ExpandEnvironmentStringsA

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA

advapi32

AdjustTokenPrivileges RegCreateKeyExA RegOpenKeyExA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA RegEnumValueA RegDeleteKeyA RegDeleteValueA RegCloseKey RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH 8c8a576201f68de1a3f26fc723b9f30f
SHA256 a0cac4cf4852895619bc7743ebeb89f9e4927ccdb9e66b1bcd92a4136d0f9c77
MD5 b0c77267f13b2f87c084fd86ef51ccfc
SHA1 f7543f9e9b4f04386dfbf33c38cbed1bf205afb3
SHA512 f2b57a2eea00f52a3c7080f4b5f2bb85a7a9b9f16d12da8f8ff673824556c62a0f742b72be0fd82a2612a4b6dbd7e0fdc27065212da703c2f7e28d199696f66e
SSDEEP 192:4PtkiQJr7jHYT87RfwXQ6YSYtOuVDi7IsFW14Ll8CO:H78TQIgGCDp14LGC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10469

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH ddbd50fe6279559edf7d1f1d89b42c2c
SHA256 062c75ad650548750564ffd7aef8cd553773b5c26cae7f25a5749b13165194e3
MD5 eac1c3707970fe7c71b2d760c34763fa
SHA1 f275e659ad7798994361f6ccb1481050aba30ff8
SHA512 3415bd555cf47407c0ae62be0dbcba7173d2b33a371bf083ce908fc901811adb888b7787d11eb9d99a1a739cbd9d1c66e565db6cd678bdadaf753fbda14ffd09
SSDEEP 96:oXHqZ4zC5RH3cXX1LlYlRowycxM2DjDf3GEst+Nt+jvDYx4AqndYHnxss:oXHq+CP3uKrpyREs06YxcdGn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7429

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Affix.jpg

SHA256 41abcd77446673c7979cee75602dc0f24e798585302ff2ef30c7fac25e8b4276
MD5 97c1717a50f87439365843601b55aadb
SHA1 5da128ee87e357df2d37a3ab24ca9e161088723f
SHA512 d0116edc62da28788d208757341120c81373f368b7632f3be2dc3aa5a9494f49f5611a2f9c600e2a0cc4fd2b626d52d80e4baf69430043c2c46a753d1944ec0a
SSDEEP 192:Lmp7DTq6X4eFU5NLFzY3ezdsubVqtngFjG9:yhAtm34qVP9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Diskenspringernes.Lil

SHA256 562406ddccc11411f4a1bd08dc1b06877034e17c0f52564a1b4ebe3edb0d6ad5
MD5 710258306cd7c47953cd1cdcc6a7f600
SHA1 f8ec91c032868062ee16510c2422adf43eafcf5c
SHA512 30252ee0fd8e759845546ff56708902438636f254a0664ee69e1e4b10986cd83af22fa880b0310e7f689bac2796a6aa81ef0dd9d9103dadc48d0e2f61ecb2ed3
SSDEEP 1536:IOXU4Y1Bhenhn8135FCIallDdDRxjnhEpUkx+6N1Po1dr8ytNOGWW0DawaEz/reL:FE4Y1Bhenhn8135FCIallDdDRxjnhEpy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Antiburgher.bul

SHA256 20928b96734cdf3e9a6343401593d1bdeb6bd8696f2886a8d242da938d593e2f
MD5 31491d26347d85bb2177354cea2c4420
SHA1 da032a927198d81c7689105300f684af8c63d99d
SHA512 4d1f35039c222da4bddd66d4ff95254b81927f5d966ac29e89b67915fa3033740ccdbb27f9d9a3c234abad5ad960ed56b41f748dec1de4891d499327f2316e13
SSDEEP 768:8KFnoqXDnYkmGS4kmW0cDnP1ZETO57ZsVFiQ:loqTYTYW0unNZh9OiQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Bygningsfejlenes222.dis

SHA256 60aad2206518883297c17afb6ab8bd3b531a6e98425ef516e2a934564ab9b965
MD5 2ca1d8b698209b2b5b68f2f1406f81e4
SHA1 d16ca0e444c89c0315b9f55d6ac2c9f9a8a51a3d
SHA512 60438846ee28c5e692654e755cfec239f1566c3f1bddf9de47a8b465a86cf9ac4236f0c3c4229de099fb22007a3dbf3ae5de199d64bb5053ced1fdcb108635a2
SSDEEP 1536:rIISFz9Qa1+sJhhmqybXOPlekp6D1moiS:EISFz9Qa1+sJhhmpbXOPlekp6D1moiS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Eneboerne.kan

SHA256 b3c87b887e06afdc8dadeb7ae47ec290d86a7e76f0b588a52381f0fdaf62e8f7
MD5 ab6fc04c0546adc796092dd5e81bda6b
SHA1 11e67b68154df9259401132b60c8d3139d1b4fb7
SHA512 d5cee0eae5151eff0c671e05cd993ea977dabe467de46d1cefa2ba73f04f80c88de115a5c057fff4f0afb12faa5a9fd7bc4218122409485671092cc8ae3bfff0
SSDEEP 768:qBLZkigtJ1tKP7L3/CMIpMf3LUyGTRFAbkuFRc6TyzV3E9R8Dy4n+7QG36FI:qUJ1tKPPCrpMTUyiAPM3DDG36FI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Engross.jpg

SHA256 b6a2945153eb157bafa9e601115e4edcdc981140da3431e36fb25c754ea22484
MD5 469557ade176f9767ab85c1659d39ec9
SHA1 252c2e23825e18353b5a96fa1d97bc6dd0668ebf
SHA512 ca3def2c81609dc1546523d61378552603dc16f38fbebf6b6dee1e995e2d31362895ffc37666a527196552d13675ac47e70a82ceb2d186de06b9544ad36873a0
SSDEEP 768:vbmRuU+bbr9zFw3RDxQvF81impmelS7he1Ks9lb1v+EPS2rSZcX3+CocZ7M8eVj:vbDXr9JaRDxsAim3ly1s9h1v+EvrSGHi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Gummistvlens.dem

SHA256 3344be514f7d579beb49d7a28e7b67ffda7b2193839c5dcb9cee2dca922bec8a
MD5 2778957b1c02b6fcd86e1518984661e3
SHA1 8c93866db08b0dfa6f00e991af435a280ef33a96
SHA512 e4f2537aa4ac58a891eb23c32b7b056cf63232ea56ced9ed1c4bfec6f86abb55a920258132daa4911bc92b1969500d2b6f17fe3d86ea8e70d68259e8a1bed547
SSDEEP 96:YwFvXySDNYDZjZBt+R2hN0eiQqART5jMtsrlLBusKcJUbESA45YBblMAIsasepkO:Yo6cc7t+RCiwVdBu1a7gJcc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Gynther.suc

SHA256 3d209071900ec82acab322f533737794abc0e88069da40d9d1a163fc5d60e03c
MD5 ab0a60855ac976bafaa21eb385794bb8
SHA1 8fba4955113167568b944fbe4ae7671d610df48c
SHA512 78e08e3e9fa2bf385c301948b2f5c9654155568169bebd56c5fb0f69df6fb9f716632aad3c64b06bdb74ffbbd11d3b85fa0f122361815db721f64875e7cfefaa
SSDEEP 192:sWp3FeMDYyxfTQZLA8323D8rwphm6QTLtW1dG5Y2UZES3ON9aI+OkSfqd4sofFw:sW5FeMD/Mm9hgT4G4+LaPOkaVC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Julemesses.jpg

SHA256 6256764a5b44247e434a684d72422bbd37a6600d709b3baac4a163ff006ed031
MD5 68ec3cf252a28c565b9a45983bbbacb9
SHA1 7b41346a90b0bb937ac8d9faddb660a9c95123b1
SHA512 5c98a44bad98396fd23a9bf8723f5f0a039bfca6019a90908e8f39646dff547d35a82a1d2f1b4d4e8bec7c7039041451a91b88072922f4404d982e511c48f904
MD5 SHA1 SHA512

NSIS installer

installer

Maarups/Marian.ton

SHA256 864b4d5c81018e2dbdacd9f8e15fb5b3030d71639d4eb5f0b3780c8040b27466
MD5 7e12de1988e97f7bdb933f05417d1c61
SHA1 fdab42dbf1c97396f69f4047aef3ab0e0384392d
SHA512 f3aedfe84c3b8c87d4fde77ac63913ff036b143ad184b0849aa4e17662522ce015196b6c6195aab1540e6edfe38d9320110da2770b084478ffbabefc928b8d33
SSDEEP 384:IuV2pyrFSOAHVDanzVkABdqc40CA0bV3jBreKHle:pVMyrBUy2ABdqc4LV3jLHle
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Meteorises.fel

SHA256 f3dd9831d34bd5c6ef95d233e2f12c6a62d6d03d94423b7b0e166020b320a9d6
MD5 c2ee79435aa48322c5811861ecb3c8a0
SHA1 b4bc2f0fe24f5c43dd4fc3df0b2b7d32a7bc28f7
SHA512 f013f59d1ed2084921ceaa853f2d46346e8f94974f9c99cb661ef948bbdc0e59ff0c133a85fd4968bf379869fc0d134b90286560dfe1cd22d0eba884cc6ac7c2
SSDEEP 768:Gun/oBlSMdWCoty5QBO/XJa2M9RHsQvy0SOrx:3n/eGrB6XQH8011
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Orpheist.mas

SHA256 379748c63386e00e519924f909f3de0862fb2511e0af9bfc6ca8a6fc204a08bc
MD5 488e04fce34e02af6a425b2d7a419064
SHA1 e4b7b44a2c676743b8110568efcce4362a1c9bb9
SHA512 7ee6d5cb8605addf2830078ff137602ba81102f07bd8fb445e9454101eb989586545185a43222f0f63bbe2472be2b2e6e424ebf3041fe82df78a6571177a5919
SSDEEP 192:Is4sbKRZSoTC9fB1zvSZvboc92K9j18N2S9nsMK:p0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Overstrmmedes.jen

SHA256 796421d2e58fdb1b902328352aae8a6147caa9e0fd3e974df4f0c96eeb277196
MD5 34ca588d8d135a19958ea451efe8c99f
SHA1 743d104da417b372ef53c31832568bccc0ae8263
SHA512 a15dfcd6e9e1a74d07cc3d31930cf7646acead9cdea698ed953f9c8c5cef82624d559941bcad00a442b55b4f896711c0a950ee89e37def12bad389c88cff2c80
SSDEEP 192:kGcwjTSPseKk/bs9oJhXHNgx+YFyH+EYLRKVZrv8WLz290rja1vX9p6BsWlBnHav:tYX7ORPSLWL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Skibsproviantering.coi

SHA256 bc1984fc8b10758918f34918dd67ffb10c488f07940139b79bc045688d10731f
MD5 1614a0900a197a55232da45a1868dc63
SHA1 4a5af143bbb6dc3860b4be6bd785c0dd0d3b76b6
SHA512 787691df3ecf63a1f3100685edafb63a89c26266a7c2a6699fb1f98e0ce3d64ac4f59cedaec97196a4feba835011bef26d944eb1706d6b5cabfb1b18abea9e33
SSDEEP 768:2dFAd6tmnpsd8HlrF80kYzcbIpROntXzD9U3SGb:d9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Subcompleteness181.fil

SHA256 a4618924fe2afbb004a83c07bc5e25a92222a012832aac92cf603d07a4fc6430
MD5 cc2deebfe072f25d0303764039a08392
SHA1 0d22e2caeb78d4fab47f4d4c3005c07185879ffb
SHA512 6846223430c6ca47575bceaa7f4918b274592243c80beac7c14dd98ad86cabf67d53f36e7ad86fb8b67e93767dc075fd694577cbcb308912f8f47a4b182bbf5a
SSDEEP 48:xPJ5GEbGv2FJlxACfh/2rGQ29JhmxhtK1GxGdIc9XW:xRxKvOJlx3fc++KAxG2YW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/Udbuds171.bil

SHA256 197c719ddcdbe91dccb039f6e9b13a9d667790880155f47280ccf2c3a499e9ba
MD5 1683c7af4b348ea109c296702ada324c
SHA1 a29fbfb164de62f89c79cf15833b9ade52847564
SHA512 828716b68b280dcaccf96e4f679a401b5f86142d773ab6e677f6e9a9155b07bcc703e1d259b43c0922a2b20c85f2bfab2db7ad24fe50f07884740366ea0a1739
SSDEEP 768:X/iNFSZ4hOuTKVxnrAlxXs29IC+EJ05lBvYG5KjzxZnBFuA/s9:XqNFJnTKHrATsXCHwv/Ez7z38
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/antagelig.txt

SHA256 3c54cd2b638fa3ac535554e6e982c56259701febcdd57187a5a9aac551c8e452
MD5 ac9e63201f044e383d1b1dd19042633b
SHA1 4ae5deacf1e50cc9dd4990434b7947a3c7426651
SHA512 42cf975187669ada0a02fbc247741d9dcf0125cd4adaccd7ee9888b18d8814f0dc5513beae753b16af6d1ee3adc04b37d98a5a08e45c1b9e0943a96d2a096bdf
MD5 SHA1 SHA512

NSIS installer

installer

Maarups/halvbror/Eldmother/superfervently.txt

SHA256 e47a949ece70cf818ff172c7a8bf44f440b314d4e88e541d8a7f88a1785bdc6d
MD5 40f3f1bd898d4da36734d902d2724637
SHA1 8e968be76c8fdca695f32cfd142b1eb047d5bd94
SHA512 f01d2db0c5f5affa0758877301d6927c1bb6ca393ffd8bb4d14cf9ed0a4eb08a39b39448f1bed2896093c7622bae6d8da5d02316f483cdebc5f97a9b21da2b7d
MD5 SHA1 SHA512

NSIS installer

installer

Maarups/halvbror/Eldmother/udsagnsordets.pig

SHA256 5d0ab132198cc7fe1a160acf00f8c360d4e6f123876d105f8d067fcd6d45fec2
MD5 8636f2f9db957ffcde20c97e99b70697
SHA1 f8682dca3000ff09b21fa2cfab4f0dceadf61437
SHA512 ccfb17ee3497ddf89e173f000a8f83524fce41f8604b22880054d797236c33c8bbd6cd657406733afa028ba1b7b9bfb08d0e857f6605cd78955593ec8dad3062
SSDEEP 768:bMfpaV+Ada/3Pc+LXDzMGhxZVcLrZGU/lavKv4fpO0hKpG3RJ2KndqT6A48wIY:YfEj8xLX/vncXDd508iRXUux8wIY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/halvbror/Eldmother/upbuoying.skr

SHA256 8260cb35e8cec20a5b36671df8f55fd75bc1f4c8073f79bcbceed046d2d10bc3
MD5 45a9c6c0e66c4882a0b3159477689c57
SHA1 6eee7a4c57160c90481305dd66991f6fb29d824c
SHA512 c9d62cfb344a8fbdc44461eb367ec8316b988befb060e32b89ffdc064501d152f933155fe2b1a33abf44f1969a5b8fe5734ae15825a26dd5d9f1df60d6b48f73
SSDEEP 6144:N4kGdIDSJvJY9GKhXjMXPfTutJTM+9c4hOLewn4P5u:o
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/halvbror/spaniards.syn

SHA256 9e0191c963b69f7483e8474e09475985de462a38c7824db10a1faa69e99f7885
MD5 1628371abb293b9e2336a596bf77e36f
SHA1 2abe03561acda22f38b2cb30d18d857413a0fa5e
SHA512 2ab0ef802be8c14b4c96e57b4692cbb031d5e927ec37200b052e4a8cc486168cae7f0ae1df936e5892b53b2d94e104f7b05c17f6d899622bc43f35e01eed3102
SSDEEP 96:ftPmht7BuZUvVM86L0LDDgMotGRSEy482eTmn28AxMj0bgt9e4TUsEhoXJhVE9cR:Y99pRSEP28A6EMUTSeG0f51Q+3fzdqj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/kokumingun.pig

SHA256 6b38538deed866df36c8bfc6775064587b284ee273cfe78a46c9feaa75f59196
MD5 288ca45a16e9735f5b6770e896c3c8ec
SHA1 3fb97f1e04967c95282e83998311c7ab6f15c2b6
SHA512 65113e7595058bbfefaa2a19526e507715f7ebbd71c0dbcf9c6cab9c1628f939145acbccc1d477f5082df1bd83d2b0798485f1627eb153b87393f9fa68aca0b7
SSDEEP 192:0jq76IoFIFIGGZFzB7IBv3sivqfLSbCdrEJcUb77Ec4EahCtt/O5uuan/8c1L24u:0AEohjs3wzbilfJTg7Y8vug+5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/nasalward.kvo

SHA256 14a355b81f1ecf3d5249d04b444baae0d7e67fa0785778aeda6bf14836a065fa
MD5 7937243e31f9ec29793e25dce5b3a4e5
SHA1 250b4e8cbfee2b6840b220819efff9feffd90aaf
SHA512 3c093a5ebeca30c212fb2907ec5eeca51ec257f6faa7aff9ebb4dc1dfd134fc8588a6508c9cc5b2f40366d0b68cd0c3731ddb342c1116af9c3a046670ee1cc2e
SSDEEP 3072:e3Xg8XhNKU2hHu83l5Xx5vsPiaiFDLjkECGbaE:R
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/optraadt.nae

SHA256 854bb8542669c718cd53c4afa53a2b1137e1fdb1a83d6636d2424930fbb57bce
MD5 f8791954fc97de62d38d72680cd2c485
SHA1 3d11462db36b1aa463621dedf1ccbb66b5d4ad68
SHA512 78d0c92663fb77c22f686a9822bc472cf210009ff47be799d63f6fa277c35b98060c3ed817ffb59504ece6643b6433072f1c23ad6f624a75cd9a7d85c2cb93c4
SSDEEP 384:0YzsKtq45dyf6GEJMf/yMVzcIYWYVLN5RRdjlAxODnYStOjKe0n5e1KfdSC5EZVO:0eqreUzcIYWSNBAxyzA/0g1IuGdE5fJy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/overroyal.pin

SHA256 1656d1445e657e8ab3ad307b141b94223a2dce879dfaf6854e051ea8b6a56012
MD5 e005ead460e9543f70c31c5646c72b54
SHA1 56c13bd547bc5bc7d677c6b515726cc6c7adc435
SHA512 3613e0dcb9d0a40e0dc3fbaaa6aceff3427348d791762a76b5ba38f433d02c61c31b8763bd1eb6bf1e51ff85fb616abec985e10135d440bd995d24a7038c7434
SSDEEP 384:lzLBEYgoHFNu0/Irc6ev9L5tRtPj4d/ikt:s/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/pukatea.art

SHA256 736f6a9d0e1412d6e4f2b48c11e7f861ac8ed3a63103e6061363b5ac53dc8830
MD5 5d14f8e76d35a043acc720fd5c3ab4ad
SHA1 64b69fa40474e0aaa134e356558c317679783118
SHA512 292cc8984025be96f65f94e5d312b32dc01826e791ea878f6ceaf3e75269a06c7f775d59e2fb105d2f0b1ef3ca08efa86e0273ca74588ba0e6f0f6386fde818d
SSDEEP 192:k68UPk1sJ0sg2PrrNs3dl892vrWWtUj1Q8dKMHJYObFoKYOw:vfkKRg2/il8926Wi1FHJYObuK+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/redoblet.brn

SHA256 8e458828bc06869bea058f2fb847984e7e813db8febdae91d55e17f361d6b30f
MD5 0605eedbb301e0a5ec3d538e4e292bfc
SHA1 7d56e3904e6a40b7825be0552e006052c6ec9689
SHA512 481d4f5fc2cb584f345207d6adaa39844b50b5a9c79819719d46a66efb323aba8f2d2b69d64b527e4e9b434c8c246b3d998bfd35c6ca2b9c965e5e9d0e2d93c0
SSDEEP 768:2nCG8I1iNxE39mrlEmpHfIj+O9vrHzZEPUukQeL+ng0CgT1wa8SEDROMD:2CG8QiN42lE6UHzZE8lCg0j1waNYbD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/rhynchocephalia.eas

SHA256 1a43a56da27c769e9a589606bd9e9c5c364791de7dc8d87645f31f09bcc1fd17
MD5 f0437caa4dacb0d7185ce743825d39af
SHA1 39fb49b5177aaa1ed4f5f98332459617a922b772
SHA512 9b8f3d13bd8887a511093de9f3fc81479b872ef3fa79d21fbe6b26d5d704f1bbedc9e2f6c95486e0d95402679205153aaee77b43cd8eabc76fe854237c142935
SSDEEP 192:T5T9S3XsHnJtavb5qkVJVv0XtswYvNTGoUBTdmjPq9lgA05bwY/JDmeDWNTn5:THS38Hr6bYklfwzTdUqYtmyGl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Maarups/slumpetrf.jpg

SHA256 ec91d4578e95c443842c383032588124683346912ed80143de1bb2aad2d14064
MD5 d3f8ff31e519a4c46ac4543ea756f4ee
SHA1 4601f0f978ab1badc6aa34f0195c13e28e4d5137
SHA512 6f51701cde79667699921d869ee05f81c87a241678e5044f1ed49e9241c00dd1146faf2ee3c2a7822dbf3ea82c44a9379807c2910fbb0ae6f582bdc110d67e24
SSDEEP 192:LuhcNMpvNVlEv+7ZojC6RhAXdYl5hVcU5aLcYCkKH8nCM2SLOxaRBB+:6hLVu0ZomGAulOAa/CknnCM9OMG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Mimre.bra

SHA256 4b6153bfd634095a2d7fc44294a9d32912e28f5d805d63a26043bcdabcd3d231
MD5 5a6fb443f0201136708e9b18cd6f0b69
SHA1 0d4e5d539b0613c5cf0c0ef61e392e41bab0a329
SHA512 7c2ca5020293decb7c8d6fc9ac7776fb743e93972468dd4196f54889918b0706232085ee731f4b9481ae09ba4b5fd6caa72a46bd9113fdd427d0bbe1b7605822
SSDEEP 6144:Wfh6jARHuJ4kNRCjPpwSH13+3Prc94w5Zn+iVjL5zgUO3csIJA8+WFTZ0p:WlHY4kK13ED50+UBzgjs7uVOGp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Conferma di pagamento.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Affix.jpg

Diskenspringernes.Lil

Maarups/Antiburgher.bul

Maarups/Bygningsfejlenes222.dis

Maarups/Eneboerne.kan

Maarups/Engross.jpg

Maarups/Gummistvlens.dem

Maarups/Gynther.suc

Maarups/Julemesses.jpg

Maarups/Marian.ton

Maarups/Meteorises.fel

Maarups/Orpheist.mas

Maarups/Overstrmmedes.jen

Maarups/Skibsproviantering.coi

Maarups/Subcompleteness181.fil

Maarups/Udbuds171.bil

Maarups/antagelig.txt

Maarups/halvbror/Eldmother/superfervently.txt

Maarups/halvbror/Eldmother/udsagnsordets.pig

Maarups/halvbror/Eldmother/upbuoying.skr

Maarups/halvbror/spaniards.syn

Maarups/kokumingun.pig

Maarups/nasalward.kvo

Maarups/optraadt.nae

Maarups/overroyal.pin

Maarups/pukatea.art

Maarups/redoblet.brn

Maarups/rhynchocephalia.eas

Maarups/slumpetrf.jpg

Mimre.bra