a0218475b35ac5a80bb3e4fc9ae77dfcb62dd338ed277e9fcaa700286dad3aed[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
a0218475b35ac5a80bb3e4fc9ae77dfcb62dd338ed277e9fcaa700286dad3aed.exe

a0218475b35ac5a80bb3e4fc9ae77dfcb62dd338ed277e9fcaa700286dad3aed.exe

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 a0218475b35ac5a80bb3e4fc9ae77dfcb62dd338ed277e9fcaa700286dad3aed
MD5 90e1c0e20489688b2d95673d3382d7a4
SHA1 1c93cf53715ae2166cde90fbb13b90241545527a
SHA512 308ff18be86acfac351b8b59cbd7cf41539cad8db8adac840b81a83fe610d8f65be2bf26a1d0bb730fb670fdae53b197a66b1860e10900938b4ad4f7cd1c4b24
SSDEEP 12288:uNBRGXL3AQ+mvmE0jjG+zbI9VLg7chG/PtBL+ftOcGDOdP:uNBRGXL35+muzW+XegNPPLEc4P
TLSH
T172E423D32BB4C066CD5147F09A3A0A760EB89E7D65F8190F3772BF897E710C6861A712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

61:69:53:18:35:6e:44:0b:e7:d6:7b:c9:81:00:40:f9:85:17:d4:ee:06:c9:8d:b0:2f:e5:fd:05:f0:a3:9d:c4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kugle,OU=Idolator Afbankningerne Tranedans\ ,O=Kugle,C=FR,1.2.840.113549.1.9.1=#0c20576973746c6573736e65737340536572696570726f64756b74696f6e652e4e6f

Chains

Feb 4, 2026

Minor OS version

0

Major OS version

4

Entry point

13559

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Lnningspose252/ladakin.txt

SHA256 c825c95960676b270d013bbbc82c03f10a8fb2660111d7554c11cff93e665491
MD5 0dc3bf4737d432950f77ddd6de1b2df8
SHA1 86bf70b2d10b7a1112395a9dee0e2d8d070c880b
SHA512 890abb94a8b7e201ae2364d429df7604dec489d03b446754a96aed2511dfab5993eb41f1fbab1b4cc9d7137ab41f858fb39a177951396dde79748055ee08b364
TLSH
T1A80120B4CA4832028942A7A7B4175A394599C06F032055F0DCEA462FA3135BDC6FF209
MD5 SHA1 SHA512 TLSH

Lnningspose252/markrbevgelses.jpg

SHA256 a0cd02f1a0d1783b2d4674e50d092a73ae110ac9c92f2e759a465cb8dd76349b
MD5 fbcb4856ff2ee1490279f77e78d37458
SHA1 3bff56b0105aaee59f7f248f7bf2612938012047
SHA512 6c6a3a4406c0278d3f17b0f8f5e57390f5b7e008574c8680314549fa10f051c16fbfc308cb05a4e45b61ea757df4e0fb309d22ec1cc84db6198fa6afcf4252e6
TLSH
T1F3614A57AE9B322CAF03217228014A31C26A498F3B7C2B7825E5946E9018CFC959CB6C
MD5 SHA1 SHA512 TLSH

Lnningspose252/narvspalt.ske

SHA256 0791ee9e6a7c84d1908583a63358e437c6a9fc7c9deac2299cef3acc681bb12d
MD5 9c7531150b4e18394a5edceff29a9713
SHA1 b1ae6aa17b8980fb61f5c7e347d3d7f5a48886d1
SHA512 9f80265661f4cbb8e30b762cee28107b4546d63ac03bfd767b3c6fbbac0edc81209a15502ab1b486e36f5b5c6a7a6acb26ca49b8d3a5282200cb702d29475f0b
SSDEEP 384:6g39Zcf9euaVHeYNqBN35/w3pr3nbZgGVDCrZXlIth:6gtgkR2abZgGsi
TLSH
T1CF54BF491D37436B1178103A44CF9992C1FC3DF6A0124F04AA79C567E1BEA45606EAFB
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/oarfish.ini

SHA256 4ebf17c8f683025241f89e1ee42916eae3d60ee5603c5de55de5ead886733121
MD5 d4a4758fc5c30b92893bbfc7ed3883f8
SHA1 412ce4e043ba4b0b3216954bb989244385a908b2
SHA512 df931f12e45ed3fae412a2b6d6b2f4e104b39cc980a8e60590bf8fe2aa213aac65226a59eabac6b26145beb251c87150351a95d8480ef4c517dd83fa65d75c1f
TLSH
T17BF0DC69EA0A49A9507F2BAB9E408CDC8234E1C0D02A396E73D8538F5602D4C93D7A26
MD5 SHA1 SHA512 TLSH

Lnningspose252/pamfiliuserne.tek

SHA256 086948942d2fad89d484852c3c203e3321575e2b9f68812066fe31d0a62c5277
MD5 c2190136546902f691bde21b9534a06d
SHA1 9962d38d705b42e7a422c31b1e9675ac8c4bb6ad
SHA512 878c1ab18da471faacbb8664b5c81f69472d3b805366e8b360347dba8cd0ceb39fbc3ab088e48c28b4bc99217c5c79669d0f0f1813b58509f1ebadd8a5a577fe
SSDEEP 12:qm6NuoEUxlnqLECd+ce9LA+ttoq3W47Q2Kea1pT2kTgbygbXlemd:d6NCGce9rDm47ZupT2kMZbwa
TLSH
T10EC2D61FFA64D2008352F2480A4DDC20D33A8DFDC720A1D021222A6FFCA4A04F8A034F
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/saksegang.ytr

SHA256 3a69681ef0380fc5f6d094d88de3cd68812082d58d72329ff40f41c5a3037d60
MD5 101ee20524f51eb2b906b54437c75bd7
SHA1 e8e1dd3ec09df1d1ed04f18e869395fe5782f05b
SHA512 3cfca22fd4b8ce138f671a9139ff7e8cb805a46a0f28a12564213ef4dc4a6e7ad332fbe730355e8676e800ba4c610c5eee4cf6291564ea4b8460dfd299719a93
SSDEEP 192:EHxnsrJBZcCgfrDEx6PLxGbM6EhUL3CGYsVK2JxDnueDdRK06dLoXnvwVuGnofTU:sqMWu
TLSH
T12AF4E0C6767133379B8C498B5FF968ED0AC41E1B085B92F9C1361F010699E57B5E8C63
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/simulation.aer

SHA256 343ecead37e4fb556d232d4ebaf36ee6b50db273df26d3f7dbc3b794744a487d
MD5 43551b0ada620c2147c0cd384657cbce
SHA1 b5ba4c9c4343e53cfebca4a16a7fba695f7b5880
SHA512 28c1168fe5863282e994d838068a02c568fe371636c3e91ba96b9ecd0be29c052e8e562a7502a9ebddf8c65d3352f51250128cdd1915a1d937df9b9d8c081296
SSDEEP 6144:GbykSUQHELum50c42LQi8QdVjZARnl8luxz9:X
TLSH
T1C505F1B4C7378284FD244ED9F232DBD6504985568B280A2BD5035D5C83ABD79232BBF9
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/slavistik.bet

SHA256 4060c32749ef3d3de291dd7b7a6b413e5918c1ab56093dc2b7b1cad382688a05
MD5 843458abdab42c207372ad70c81f4774
SHA1 52cb97d8b766b19fa772a3d283af7060fced3410
SHA512 a9116da2516ab985066a9f5874e5f7e84966df6551c0575855684ed88257a3d798bd627c43d1cd387dd380d0e0c8dd9f4274e4ed96e49749d781024daed93ebd
SSDEEP 384:QKO8oFyeX24FhaRB8mGyoZ4WmnEZ3a6RQAuX9:QKmbmtr84azT3Xy
TLSH
T137C4B064DA345B452505D4620CF9BD0CA1DB1CBA728CDC0E292E6CD8DAF92DC9C39D9B
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/tagvandet.for

SHA256 152971b381ab3787365d00885e3eb23d89544e6afcd2f6e6602cdcf0ef7c92d1
MD5 17d93e49b11ce265b0f4e1c6e30a78cb
SHA1 c409ab5b87e482fec1cecb787e46ca4191e6a258
SHA512 bb9d1784e9e425296c18f53d811b8c607c58fd1061a94016829c8323f2177ee6ddc93913315120c2aa59951d3e6c2b397d579247ec1ff9c54d14850635f3f9be
SSDEEP 192:tP9bz5WBPtz1ApCOSzZpYLWKuzOwFrKKiANGO6ctgwIiqH+sc5csk9d2t3l:o
TLSH
T11515D0848F9685B322AC894F5336EB00739F8C7F082B9F74496D790555088EB2FD5E6D
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/teatimes.sml

SHA256 1e01db39e1980985c34dbee0fce7fdf43e6a230010dac9f6d1746db2f4dcb4fe
MD5 9355a15d726c974d72323a9c465b4aea
SHA1 6914aee33d8a6844aaa04497e094dbf0a6e6fe6a
SHA512 6dbc960ffebc1f755859bddfe924cb68ce17c75e502eb776ce16fa64c953f9af07af120d2a0c42addc5689f2087180c27c2de2093e479db3cdcf98be9f66d59b
SSDEEP 1536:mREaZC+FMlGDrxNR/4fWE0Vp/eiPTdWGhqjKddR5ogrjixcovDlkGbgi3F5m:SEQfM+Fncw/eust2uKPKBfki3F5m
TLSH
T1ABF4D0831D5A70E5900F59E9EBE1521E4263E244B709B5408BC1BE8A4B163BF327DDFE
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/undersgeren.teg

SHA256 fd2eaf974414775e2e6c33f615fa3a01849846e07c2a4a15c550862af6376c13
MD5 034b54cdb8c8bc02e99b4b29b487543c
SHA1 e87d7e6ce71504ad094f0b7bb9edd6111832e27b
SHA512 5ed1d0bcb2bc2c823f51e844f07061f09a00a089c876462a55266fa478309d2cea51e4c1296c2cc72bc8792f7143117b4eeb0029b615e709475ccc9f00452253
SSDEEP 768:awtNkszpEwHyaVg/VRt3XMAe/CcY7Yy6OPTe1eQrr+mGhjiFzbX29zJxN:dLhHAdAL1yZgyX9vN
TLSH
T12774BFDF06BB5092043D8139C8513511F2736C20991B1B38F247CB93F87BA4426E6D5B
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/vifter.con

SHA256 963c6a34fb5de0a6bb1927bea8fd6af3ab6d4ef407490c4dff21063c92b5a5b2
MD5 02f62c8ca0d165e1d38bf3e822e56e33
SHA1 2ec0416384d8ade597876fe88452fa7c9dcec686
SHA512 7e4dbe3afa9d692b96ec64afb9cf56d94a8f2ab6072db4bb79e11ac00f585eb377fa2e182904967fc0a140c2a612a6c384c21cce0901692bcead1ed4d818d9d1
SSDEEP 768:5ruC/U38mL7jKujcBA5NJSJDyTXRmryg2sPNdqvUdAC8up6JA/IKJlRuv0+4ECtZ:5iOgwDCltBwZBdlRaRs
TLSH
T18DB4D0878CFD4200D4F396BF225084124723746DF672DB2B66682779F6737B6D04A824
MD5 SHA1 SHA512 SSDEEP TLSH

Lnningspose252/wambugu.ini

SHA256 1e686d1461eb97951f6889b613e900ab7680cc9d35791178699858e7f7091ba9
MD5 4112dafa8ef9af8e321c4aed7abee546
SHA1 d1102e84a308dbb4332f2755c57c572475d4880c
SHA512 5bf94fdb6709704610ab65c5fd759f0f92f5bb26b7c1f84698c99fa7bad986ea49a0a7e27f893b37bbc42337fb75bc9b08dc2dcca1054e9effcdb7f0411f6d26
TLSH
T12CE07DB8816317140653021A29FA195B440E064052470B3E3829736D7005078D4AA23C
MD5 SHA1 SHA512 TLSH

Lnningspose252/wild.ops

SHA256 00e2d23e870519e2e2d9e16db4ddf197119d958e80d087994d2d52d1bc3ef5e8
MD5 04e49eafc0f4a31835cc286a1e736670
SHA1 08a51b907e455003d9488bde04e45f3a32fdf0b0
SHA512 b4b7155719da22ad68762b9575d6da470a1f1a2fe4df0d23b95c4eafc85ac80639bd8dd8f64f9dc5e7702ee21a340313607f7dfca5d991ae809f77ec8d46fc6a
SSDEEP 384:UxtWF0nDmwyzdljGobz6TqkpqezEF7dhn0wa+bx:UxtgwDmwyjSo36TqKlAFRVx
TLSH
T179A4C10901B6EC2D56A89ED2685EC7CCFCBA313D7712F22E709076544B8C87993449FD
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/Blandingslaanene13.sus

SHA256 1bdfb1badb4418c048c8a20354c7c88d25e910cc09d3443a5ff9da73cb5d70ad
MD5 c82edcf5152697f184fcdf16d1e3d5a0
SHA1 ad4ee7626194467a0799bed445c02dfab170320d
SHA512 6fe233d3f731a11e1bab6665fb5a2c98b2abcdce1b21060cfe2375f62624720553446aa7165c9fd25a4148ecf13b6e0fc4c69c27d9b6cd15d0e91d5cecdb5ef9
SSDEEP 384:Vyejd1mSEYQKbHTpahuyBFn8MtiSTS2QDec0OrDZv:pj3FvQwTshpBtiz1B0cZv
TLSH
T11574AF6D4FA706DAACB3EB4F3F1AB15C31D87B144929112841CB679607192BE317C11B
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/Corinthes58.txt

SHA256 cbfc8eaa48ecd803059ffadd16850a8724c5ef21d876b8a9a10fa67b138e7d5b
MD5 f0301f1eb7d986f80546f0584fd31802
SHA1 46095836990500503b0f95d6e3ab9ef9b5279cb7
SHA512 6418fd86e19c9c7d37d90fd751b1a53e041bcc580c95b953fb633ae9164b01d00d484c058a0ec9c098a027e64f135da2766d054e92292b00a0de940be0b3faef
TLSH
T11CE023D69C8506780E2F0AC969615E9295DC0D038E1D5275E4C4960F754C079C35D496
MD5 SHA1 SHA512 TLSH

Mniotiltidae/Evangeliet.Jon

SHA256 7f992b0e0281c45e4d4e6c38841963125e8f51adda27d031a88dab3137a23d89
MD5 e6376f50562acd4c10763f5723ae06cc
SHA1 e4793aa9208ffae12ccf60b3db0c3cd7622089f2
SHA512 ae8bcbad7d4d1e5562eb8e5b522af1b841b4c4a2d94fb7ebe36aa4e79d344c92b02bcf0200495eb6d0c2ae018decaa60c70c7f824fa4379d0b15d1522652ee6c
SSDEEP 384:1B9vUtKnbljvAVVGS9slzkgmNOqez7v+KNC20KSs8Sy7RsNh9OJvxz4b3j:XMVGksRkjNEzyTRN9VcPOJvp4bz
TLSH
T184B29F2A976A5CAEC913C234C76E63678D546015AF4FB0CD616ED704829F3E37B2068F
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/Forstaaelsesklfts.ske

SHA256 9841cf056c4d3707787c23b2a5a24b958c4cf2af39296419831b83241d0eaeac
MD5 9eb52545cc7d2802f0b5c8863299e544
SHA1 7d7001c28f35999baf557c8fcf28a73c97a97e40
SHA512 7f73f41bbee0bd869566d9b23b9fbfc77ed3b24220ee8d76831f66ebad0092b3ebc28bb0e37ac9eea6b12884df141053b4dc1a8960c0ab1046a07ed4d47763ad
SSDEEP 3072:g8KPai5Wh14ghj0guLxz6BY0h7hsrCftkwVXm/3sUWheefd3HB:g8OasWPzjYLxeBrbLe82/cUWh9fv
TLSH
T18CE4E0407ADBB2EEB947FA0FD91B2F9C29102956379CCADF14C00D11256657E217203D
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/Gloxinia209.txt

SHA256 85b438fb753b2cd1e03e6062746a13f4b0df715e57d571725a670ada2e9d97e7
MD5 2b0c2747149afce5be0409722859ea76
SHA1 261b260a0ad9216585905d7d68f6d652e85ba740
SHA512 027a414376fdb0b123e92cbe96a1d4da1b6a2dd653dbb721972440c41d8159156f3bf126d1abe5e808f45e0cdcfc49cdfb866c4d08ff9d5c23ccb96d8f9f9f5e
TLSH
T163F00E90CD83316A7A4B2FAA3C352CC6C90CC2C49D2FA4ADBBE0134CA128024D23E94C
MD5 SHA1 SHA512 TLSH

Mniotiltidae/Lufthavnenes250.ini

SHA256 cd39a8609345a7bf99a71e02d8004a7731b71ed87b0c20fe97eef25f7027bd89
MD5 2c054d18414dce6ecd3b9aab2f0f39af
SHA1 bb8899dff535d525222b7d5943cb5bbc2dc9e220
SHA512 63633da9a385f66d319b678dccdb4f105040af09907174f74dcd34ff49b12127a3ebf599f16d92f5d63f50353bc4ede70151c2dcbcf0b5c7ebc757c73e371bc6
TLSH
T11FF02032ECD1018D2E11037A68A919698EDF07C98A230618C2306B0C2804EA8DB99B3C
MD5 SHA1 SHA512 TLSH

Mniotiltidae/Pococurantist.bro

SHA256 81d429a732557768791dc9a7205011460a3dfea67af8a191dcf75b33d92d7914
MD5 d97a3959747ef432e95019777de9af5d
SHA1 9bfe4de31b7887055360d2dd7ac7c2b8de85948a
SHA512 3ef252fc7b4d68ed594c29b29c72fddd56113c51da8a691f888531340a9145a5bbe328e1b44b9ae28bfaf6fd56d39b2983ec6bf141c9fdf4054c99540637fb13
SSDEEP 384:aKIgtaXQX72n9HzdlZtgZigmS05VXjaCgttz635i8mwLMB:hIgQXQX749HLA9QVXjFgtJChmqMB
TLSH
T116C4E0CF09553018886A1DE52169FC06BEDD35FB8ACF0E7C91362874EB5A8F71892B0D
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/Starosty.hip

SHA256 5bc29dc2c6527f67b3da1c04007ba88ed725ae55c4aa005316b109d0e124517c
MD5 000a219f53f89479f5f71634dd2aedd1
SHA1 43906581761a2531724c6a210eead98896ab01fc
SHA512 0e73aa0673d49472144f79b59d2a7ce52021421201a9e2d748929ebfad3011a79f0ccfc2f9055483676d7e173003280d76bc5cd87357ce257ebe22fd8de7ef15
SSDEEP 768:4zRCS55T9JCL8UGj8eAmGMbqwlEOgR8ad2CJtcoNgaHTKYp/Kh:vo
TLSH
T1C2B4C082F665BE98C444182CEFAA7CDC6D358B43FC83532CB475B8272916D7277421D2
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/Trusty.kon

SHA256 3e68c0b2ec010865740dfb04042b6690a2428caf95910c27594118341d73b6bd
MD5 bfa9ea00a807705fdf0ea65da000413e
SHA1 9ad9735bc0b4687de3099c3cfca6b01b4ba88528
SHA512 3c4d260875f64ff8ff6e0846335b449b232108602072a27bdf920fc13b2f6cfa0e8cb6e9ec3a69538cba7748c5d240741b0b61fb6a2dffb6763184e481df84ba
SSDEEP 3072:4J3NSn23I5yKzMmM31TpIm83ZsGGxDb38:5
TLSH
T1D205F19FD90532CB8555DF1CAA8D2B84FE90FE8988FDF84D1B9F3241A8412545F4F42A
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/aptitude.ini

SHA256 a84f0794f41ce92c69a230289f0a516fb149a12cccab87d28bf4c66b04c3abbd
MD5 62d4238576d0b2f68c693165a305111b
SHA1 270c04c8d603c0ef5f865ceb95535d905aa2ab42
SHA512 60593b93ab37510d616494c9bcd928e392fefaa99c2604adddba96c271db802ba796086efb5856514234ae21cca16ab262ddc3542fc038ae5bf906ec77d58d3c
TLSH
T102D02B1DD12186664D070326FCF01CD2205581428526D94933DABB0C161CF7984BA148
MD5 SHA1 SHA512 TLSH

Mniotiltidae/blegnbbetheds.par

SHA256 c526cbadfd19ef4b710acc9a3f9cabc8a7f80810eb89811b1c1e7207175c46b6
MD5 00f0a7b52e4343168b38edfa0546bfff
SHA1 574ef95417ca4ddde6e02b231a839cf6b9baacaa
SHA512 9b5c6ba986ccd676273035e0f146a46b6aa653645430c89f89c461bc126ac7a29010e241522fa888e708bae12e5903f0ac9d815e72897f632ee0ed239db22d9b
SSDEEP 96:K2/I9lCoQB3ql3cXknG3ImMZ2drexgIRk0ECNi9MXtnqFfBMUL6Dgn0PvwxxSyyg:klJQn7vmajHWkSkUM1n1
TLSH
T1DF64BE8F299508CC774E1285DBA6621FE3948186F1A223BAD88D1411DE19E18ECE1AAD
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/brunsttiderne.kog

SHA256 ffcc8a73ecce03b11822fbff2c8794948d86a31d16d66272606d06ad9d615e83
MD5 b97de914f4950aa103745d89455991a5
SHA1 691619028ee7d9c23393aa1ed9d7a6a7f46c7db0
SHA512 5dca59bff154da987510b23faec15d29a9bdad72a13f567780ce3ac8116e6d4fb6980de6d9b00d9ff571472c9aacaeb9073bd0e3e81eec7eefb24cfad4bb0a43
SSDEEP 96:82/8juuqdh6kmGOLd6yvDZwo5m8fwcWEfnjHLFPGFKUL7S0MVg7h:D+u9dwkJ2s8Y+njrFPGFKmS0ht
TLSH
T16DF36CD8DE58BE3B33270B59E10157CB1DE05FBC4AB6B84DA70853829F7535B82A9209
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/cashers.sau

SHA256 c6f7fe453dad77ead739976dcf170868c7aa489a43c618448f2f71f53124309c
MD5 0a885b73130ad6a5303800adca6bf3c7
SHA1 ece651953ae30f6ca9ee7096e064af4e3008c54a
SHA512 fe91e5495aeeec37397c5df0898e5772038d698c0e264a65ec398c6bc60a6117e537d9629ce386ed6b22e9afc9b6bf4add3b695e0c05802c3a79dcfcece84625
SSDEEP 384:zj90+65dapI2ZEXzOppDk1Zh2kXHOT4XimmVAfg8XZ:zj96rapI2ZUqk/X+ESj8XZ
TLSH
T175A4D0BCCDA7E5F29546BCB509A1633E89DA5B4C18D110D8437D3A60D8CB8A1C8CFB68
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/duroquinone.tel

SHA256 061f2524a1549b12b058e5d6e328cc5964d161993da0c1a9dd96f14c06ec4375
MD5 1c0b5575af4c6f96b96a289ff4bbef59
SHA1 26d53041737d6d48988a243df65faf3fa372ddef
SHA512 7407760442ccd01fe83fccc0117fe355c518d9b7d69b25b0c112dda76ef93ab33e5cce7c43d7ca4cacf3273fcda007df0c43abf9b7ae4dccb8d730abd4f983a1
SSDEEP 192:kydMTTxRZ+h+gQTjLGdzMG46fGJMW4bf5lOAgZmOICMU0qhEwlFqUKIGfMLgr8yn:Fs+hzVWEjng7XwP2c
TLSH
T1BDA4BE2D7F8BE74BCD6249C5E3BC01DD731945435E7B4E9808AA48CEC385D2CAA44E4A
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/envoyeens.ete

SHA256 38d29ff84ed2b29ceacd1eb09d17b74c7b191771de80bab4c9d33902525d17af
MD5 17354ede7fffc6183e5d7339b106cc58
SHA1 28bc954e84d44165dc847f43acd85e72122b492d
SHA512 7d495431d5ffe3591cbf7da0bbecfa0b3aec61a1bfeed9109bc02c9a53d990f0f1da03cb8f936d9ac0657ccb9e1b804a00173f6974aef854fccf6d5bd7739699
SSDEEP 48:KIfggH3+1vfmMigB1YIbfCNReFjUozKjW0ajCBDDtuZ+hsFTVxl+:+ejgn2N4FjUoMW0aCBM+ahI
TLSH
T13D934B58EC0DD4709077CEB4B1816C828AD9CC63440B1EAFD8905B68735CAEC49EE9B0
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/fodrings.ant

SHA256 627766643fa01c2d73c5ec4fa704fa65f78be87f3d5be2b52fcc1f308827b2f4
MD5 51fc1ddc2f23bc793c343eeb77bb6db4
SHA1 b68a9d58cfdc1b88405de6389f1d7c916d03a448
SHA512 e80932ea4854be8dc1d26c0bd3092749d6c5b3e56eac7c637a551bb24840222572c505e8aef852ad3e6ee55c2f4149dfb1ca01aabe1d7282cdb16e7c9b56ddde
SSDEEP 768:y8oBbtGl4Yl9sayVlZlHTdb8DCC2wksAwgio:0
TLSH
T11A15E184E1AC8521B0716D7F32489DFFD8E746B93F724710B22732127E2FAAF1252294
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/intemperable.het

SHA256 d6cd0dd0afd7dc7e5d2d3e9e40a73373309d7bccc932b8a46e7760d1d60aff15
MD5 99db50c8cb038245b24107cebba4dc17
SHA1 5b6771d1eb47294dac8dcf74be47fa681dc4bd5d
SHA512 39a60d39210f47f38c874d0ca980de4af635c975dcbb45074d2ee45beaaa840f7354ad348b016cdbfca166109e827df588bb8d460dd5fd36a2ffcffe2f882b85
SSDEEP 192:dwPELoSVFSkWBpSPlRBM6szMp79WO1KDS4rEEZDjhFiYZ283WaHVg7r/Y:d/VEBBpSrBr9WOySXEZBFd3WaH67r/Y
TLSH
T19DC4D036473F68F710CEA20462234B8C5D69C2E012BF7995FD1FD5716602A7C49DBC95
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/introduktionsskrivelses.jes

SHA256 39b3afab45feebef660233ecafa3a0ce3ab05f958f46ac0a15144adabf97f539
MD5 129323f8cfe4cc005041e1d213c93a47
SHA1 18db2c58ec4216c1a8ee45461d453c39be1171be
SHA512 a4e850f6cbf83f331756118825a5d098f489acd126c5e7688c9a4a7225d2e022e1fd42d620b56308f55ee67324c3b4aed2fd598df7260614965d262e87e2fd23
SSDEEP 192:MEByPE0MD2qsdSFnycQmtKyBtNntYDIp47s9GGaQWZy4NBXw2vfYVxETeIsT2dRL:IRQNM49ZEydZETeIS5w8BTbwXYfnI88
TLSH
T180E4D07EBE19A55730A496870D239EFF34A3EBFCFBF00304466197E06602405D39A287
MD5 SHA1 SHA512 SSDEEP TLSH

Mniotiltidae/krystalterningernes.min

SHA256 95adc3b2a2a398a77e92f46fd7ce0af490c19e43fa16830e4420333e6188c321
MD5 c2c52203f0887238950233993ceb2ca6
SHA1 c0058bb58c691cd009f1819f20bd80cbfa895fe0
SHA512 d02d1b2036ec35b382c6b93ed8fc798c0e44500eddf7925aa068c24a54031d6a1ac1779af30bb11a114365e55312fb08ff04489a1717193b2a0cf890a64e5a72
SSDEEP 192:0rSShDlz2HU+J0izx/CTfLA9p8U5MddM3MDhyuSh804d/5l2MA2Uav5T+VEjWq:CTl
TLSH
T10AD4E1C92D9BF0183EAF7268530578A5B073F20DC9150EAA96A8D5F2BB288BF7850111
MD5 SHA1 SHA512 SSDEEP TLSH

Spiritismens.Kar

SHA256 c017bd433ea34681e9081c2aa43acc06a42c3da10a283dbe95875475dafc8d04
MD5 4118959c38e8dcb8cd286b3617c3d100
SHA1 07b4c5deb85440f7b4466b64ca6e1a0d2da1fd21
SHA512 2e25a0935dd322e09ccae6595e97ee88fb947f7aceb767d2e1f04f17ef90f9b42989b7dea7c33b58a93b60ae073ac64d2a6e0a422b19284edc1179e488ea02cc
SSDEEP 6144:OCgO+bfthDnBuJCNwivuFtUhJ4WdHxz9XQ+OO+7nDT8R:OFO+Rhlu8NwPUhJ3xz9XLE7kR
TLSH
T11144F103C7A789EAC090487ED87E1D476F652016B8419638FCD4B92CAF356DC62962FF
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

a0218475b35ac5a80bb3e4fc9ae77dfcb62dd338ed277e9fcaa700286dad3aed.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Lnningspose252/ladakin.txt

Lnningspose252/markrbevgelses.jpg

Lnningspose252/narvspalt.ske

Lnningspose252/oarfish.ini

Lnningspose252/pamfiliuserne.tek

Lnningspose252/saksegang.ytr

Lnningspose252/simulation.aer

Lnningspose252/slavistik.bet

Lnningspose252/tagvandet.for

Lnningspose252/teatimes.sml

Lnningspose252/undersgeren.teg

Lnningspose252/vifter.con

Lnningspose252/wambugu.ini

Lnningspose252/wild.ops

Mniotiltidae/Blandingslaanene13.sus

Mniotiltidae/Corinthes58.txt

Mniotiltidae/Evangeliet.Jon

Mniotiltidae/Forstaaelsesklfts.ske

Mniotiltidae/Gloxinia209.txt

Mniotiltidae/Lufthavnenes250.ini

Mniotiltidae/Pococurantist.bro

Mniotiltidae/Starosty.hip

Mniotiltidae/Trusty.kon

Mniotiltidae/aptitude.ini

Mniotiltidae/blegnbbetheds.par

Mniotiltidae/brunsttiderne.kog

Mniotiltidae/cashers.sau

Mniotiltidae/duroquinone.tel

Mniotiltidae/envoyeens.ete

Mniotiltidae/fodrings.ant

Mniotiltidae/intemperable.het

Mniotiltidae/introduktionsskrivelses.jes

Mniotiltidae/krystalterningernes.min

Spiritismens.Kar