Fatura[.]exe | Triage™

resource
unpack001/$PLUGINSDIR/System.dll

resource
Fatura.exe

Fatura.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 c301f73e763173ccfec4bef1df2f9ea35e5d483cded5bc6d87813bb0df53d1c8
MD5 63d447c1cf2bac0ea4c313c39d8c133e
SHA1 846b7bb80ecbc6ab4b4ccd74604fc4058148bf84
SHA512 bd6fd17e509e2f8daddd750e6f290d3a24b6b1cbe89c7d6baa2719441e12b3e741557ae33e7ecadffb253058f268401e07641c2790c8313e8a4d06b1ef3b232d
SSDEEP 12288:xL2FyV3yC/KoErt+93mpIIcL1wWUx1usXMfv1zEzZQ+Erd:xLoyV3yQACwM11Ux14fv1zEF8
TLSH
T1BBE401156AE7C433C9940B700426D6BE6B2A6D4428D143077FD0BE9FF9772924E3EE86
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

1b:45:a2:fd:b8:bd:6b:04:da:42:19:c4:09:d6:67:82:a4:91:11:64:eb:a3:77:df:8b:17:70:ec:99:a6:4e:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Tilisning,OU=Rettesnore Wheyeyness Tunk\ ,O=Tilisning,C=GB,1.2.840.113549.1.9.1=#0c1d46617965747469736d40416670726f65766e696e67736b6f65722e5072

Chains

Mar 2, 2026

PE Signature issue

Digest

75:0f:91:44:a1:2a:1f:58:fe:f7:fe:d3:97:14:f3:da:6d:32:eb:6b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Tilisning,OU=Rettesnore Wheyeyness Tunk\ ,O=Tilisning,C=GB,1.2.840.113549.1.9.1=#0c1d46617965747469736d40416670726f65766e696e67736b6f65722e5072

Chains

Mar 2, 2026

Minor OS version

0

Major OS version

4

Entry point

13145

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Aandeagtiges194.fut

SHA256 3c78b9e836080f9f2c636981f43ee595305f113c9e04e4050d164c081eab6502
MD5 ea36ba1b3455368fa76ce88ad09ef6fa
SHA1 46ea818d374c18ca1a2163e375ba7683f01df5e7
SHA512 a858e13f7a7bea7b6247fc61c10b419c596dbbd185aa2eea26f6fa9c92191365a44973988ff09f1f446049cf6d125b2534d6caf53d966647d975d6529314d128
SSDEEP 384:Fm6wHasze/HTLuYEOZt/tOVgAfkI4AQyzuOSxzThhD7UqvGEj0ZOCixP:s6me+YdFOzc0WDlvlP
TLSH
T16C64BF10A16238F580EE504948CEDFB369034E5A563D6B549AC73F924974BBB1C9CF08
MD5 SHA1 SHA512 SSDEEP TLSH

Betjentstues.txt

SHA256 97775d63f462e78ca15fa6db8ae76d3808d5fa4c22e500d814d6cdf19f2d10a0
MD5 d2ffdcc6abfefa7afec520dabe424654
SHA1 6c4d74ecc4fd3e3a5b1dc58b1c9147044251feba
SHA512 a458843f663b8820c0409f071c64a4e1082dcb88c53c308481120fa874994091cc3a242a2029e659b8ad3378dab52102d06aeb903c004405ad85f309dd95bcb5
TLSH
T16CD0A72CE10B1C5A556824911D10DCE840F8D2459B5C12EC7DD84B657C04E5DD32CF6E
MD5 SHA1 SHA512 TLSH

Caponise223.ung

SHA256 94b04dc5080b67e5581e54030f290a6e4eeea913c19f9edba20628a13b69f1b2
MD5 e897acb29cff6febaf31d612c082650c
SHA1 88fedff15c909e3373f0823d270ba72b91caeb9d
SHA512 1686a82b6ed7645ea99520d2d1dadb951465c8ad03e281c8c342cf9f8b2497462843cf944a98313e48abc66387d978a8feea54875fe2bf1a6bdc49777da0a15c
SSDEEP 48:aEEXUeim8jFBLMja1ALk+8S0C0ajY4gImTdm//:aEobH8jHrh+56PTdo/
TLSH
T18203860248EB145B8FB706638BAC11E0FBBCD04656211C29227D57EB003DFB8B1C1A0E
MD5 SHA1 SHA512 SSDEEP TLSH

Palehearted

SHA256 c5e7245acc6df41082bc2ae72373b29b8d72805c27b60a42e2c9f185e382e90a
MD5 cefdf892d60f17707a753b595ba8c24d
SHA1 e36d96296126b8d70175eadbd4647e38955715d0
SHA512 eb6ca8f2e3e7630b9cb504c3869a651689414e4d092301dff179c355b7eee0cb95e026a88b16fad2301125f1bc345946b41d86645358bcbb485cf2aa1e15d7de
SSDEEP 3072:OEEbKaoSknpXarb785wts7rLl3CwCLGNJb/E5oSZJ94FC5678lw:OPkpDyIPVCwCCXEZJ94N78lw
TLSH
T14004E12077D28DBED917A4B1EDB987DEA9557E241EBC30EF9032B420467D2831274877
MD5 SHA1 SHA512 SSDEEP TLSH

Romancernes249

SHA256 c14148721ebb8834cfa8cd14986976b1a5cd9b25148976d6d550adf640d61253
MD5 2dc24e8b7e4d6331313316029f24ca01
SHA1 cff0d93b6f4cfba835cd8a15b6a161d8846ebb6e
SHA512 aab1d97dbbfa7277b85bdae21623df99045212034a2eac3d5aa753e9899dadfb33a1c9107fac86ccbfe8dad11621e8a973a4df6528755acdc5c9540caa284e5a
SSDEEP 1536:uMKNA98FEMgYjj9EO9iV6dJ46Blq7MiJCfSSwBEvapaPKG22wxqJWVdRZZZ7M1M6:3u3QPPnqjj/04AlkxbgsDzMsnGS
TLSH
T1C1942D5075CD8AE0F61A5984EA78FFB211733973AFCA1CD22324F5004ABE9513A8D95F
MD5 SHA1 SHA512 SSDEEP TLSH

Sandbagging.pas

SHA256 73aa9054a6dbac5f0ae6fa32bba840ae738adead8c8058ad5de76f677c864802
MD5 0012cc5b24d0220a908bd2ede103f04b
SHA1 4cf63533b9a0b7800b51a8acf72c0d06b24774ac
SHA512 0f1b8052a99440f84a774f80b023c7d6fff4e6c432a35b7ee7eb373c15c9e03756dc81a4ac2b18407990096999f222a5f740ceac56bccce95471e9134577f3d8
SSDEEP 768:k5gdu8XJkRE5E0T7bh8vU0S3/DLleLRwNg:7uAN3hoA3/3O
TLSH
T17D449E4386CF1665F6CC09649A7D247001205A72CA93B87AFC4C4D100B13E8755DF7F6
MD5 SHA1 SHA512 SSDEEP TLSH

Semihyperbolic.txt

SHA256 17fb3d401124c121dbb76f2053d5b0f737b042727d3e5ceba05f8cd0cc815ab1
MD5 f32e3e79b5139029ca6f8e114873294d
SHA1 18e5c9ba060a2bfa2867fea1413891128ca41139
SHA512 2b93257f7acc796668ddc42521a64d1b43f63d623a12b1506d4963b9a4fec4f0c0bb23768f21956dfb5f2112444055922f22012c81ae423191f32bc62fc5c8b7
TLSH
T129F0DCE8C9076007831D0F88CA4D1DA940EE033968722222FA8A1B07A40BD7E8B3D00E
MD5 SHA1 SHA512 TLSH

Unpackage/Farvetones/Kompenserede/whisperproof.jpg

SHA256 d602820a41cf8c0de8196d3b3e6aeb14ed777314d1e692f8b26ded95e3317693
MD5 ba03ade424afb9ac130a439923376087
SHA1 2850ab501f9fc5044ef24d7fa691d15bc9c8f24f
SHA512 5af171fd0b498c7d8249d8e27e19a8add768f93b31467f79f9b530548b0c9ba2bf8ce359560123a4423f2ec0369f18021b8a81fcf3cccea62f5b4d4a4bbd9b52
TLSH
T1548171078A0917C1BB1957A17F03218A6F85874DF8D739BD68434DC66E14FB65C0C82E
MD5 SHA1 SHA512 TLSH

Unpackage/Farvetones/precollusive.ini

SHA256 a64f0f8ab92e254bce6e7f71fa1d8c1a50a75018ef5aea4e7519fb4ff023ca80
MD5 defdb42ecb2ded333403ee9ba275e823
SHA1 78bf99e0ff95a2b65c18eb05a20da9cc0dde5207
SHA512 36831b7e9b2a35e5f743e12fa7584b15973481547a627d3495a7cda54bb470aeadbc081ec594642be04b04acfcc98502b80d5321b48fd47bf73cedee8b75cf2a
TLSH
T19AE02D06EC880E63680303C2059A40C0B62F7AB85022600DEA0E2F6008018B4F7F8230
MD5 SHA1 SHA512 TLSH

Unpackage/Farvetones/rissolle.ini

SHA256 d82a09cce6d145abc2e41c840cd88552a48ff9f7198d7250d17931e35ab6d589
MD5 9ba28e224e7f5c5e6468b863bc65b0b9
SHA1 d4a3d4ba8982dc6bf886875d8cca350df1187458
SHA512 13c8d7d826040bab5660310b43971ff5dfe16d5ecb0f2f67dc0cf335893949a58c4470cd0d549bd19722190b2c78e94e308a97be7689b14b5a115796b6540a70
TLSH
T1380186D6C94107EB0D538743A8F285844D5CF2A51EA39B39D4AF474C17214C5BB3EA85
MD5 SHA1 SHA512 TLSH

Unpackage/Farvetones/scabbards.hal

SHA256 c2c543f3bd606bbefdecd0c60f87db98bb2acf44a587089c08901d5b96885bab
MD5 7fa1672b8c0bc006882087838f34fb4c
SHA1 90c9885ca2abca723280ef2317105a36ba9dbff5
SHA512 8c3d981ca3c50ffa1e7f579a19b7e1dc99cc981abefbe7b7d67af28435a7d9eacbf6cc59aaa201af3f3614165e41dc5620e5a41ea8eafc7429c90d97e51d2584
SSDEEP 6:Q/kf8f3Gf3OvsfU5/Q/I4M4wov8fHrfZv3L/6fqf3G3XcuQqfJ:QsUvIevs85Yw4M4wov8jpLMqvGnXQkJ
TLSH
T1F491C05F745F0C38C4D00000B4C3C131048540104E003937C0CC4C2840BDCF0EBC25C3
MD5 SHA1 SHA512 SSDEEP TLSH

Unpackage/Farvetones/stegebo.bra

SHA256 dddd052496143191b147385587cfffb39a641d200b5ee43567e7cc40d1906a47
MD5 036c83bf9c5959d54e30e2e266117a18
SHA1 4ca2ab4ee0464c12d304d417160b3dd942bc1f23
SHA512 116ae9ce8e28584a121a5398071abf96c3e91d86f13066608ceff2c6539655e77c6d7edcc87f9a1f55631bc78cfe7c8d291b4d812e50bd0e244b8d5618c2d198
SSDEEP 192:kZsMNmhQtYHInoSMPQvKiAQ6QpDZlkvPh8jhM5H:bEtYihtZSnZ
TLSH
T1C444B0290711D6C485104FD9D19C580BCBF6FDAB7E3F0E4E24CB90273966BE4246C1A2
MD5 SHA1 SHA512 SSDEEP TLSH

Unpackage/Farvetones/subcultures.ini

SHA256 f2cb4ea6136d095328e5ef2f191256aedf1e539cc901930696cae3843cdd17e1
MD5 df882b7c2d674b7d900bcde0418f7b24
SHA1 849f7bdf463a4ceceaf0f76e2ef4d84770f2687d
SHA512 d26f08c504dd4c2baa17b1e71f8518c9602cd3fe32f994d8fc4ae249b48fb02aea899293175245260b1028434c912d3a0c9253b0bf4c73a4b8a6e15a31675426
TLSH
T1C9D095000557C585533867717A2CC49183D4407CB0644956F6CFBF0952C658C811C30D
MD5 SHA1 SHA512 TLSH

Unpackage/Farvetones/undervisningsomraadets.mex

SHA256 5d5c7309985e6716305c302827b11f21d574b3baa642db9dad0413b9d1307b0e
MD5 85a9f77713abf237997688fb2e8c7baa
SHA1 216d5536770d4f6f2d666532ac1cd8f662fbc59b
SHA512 fd0188a4b6822d3da7f2b5121e64806aa5dbbd2128f6ca8aa4ea63c0d9291e2104000d1143cded91b4b7183673cb6122832b88bce129167bef1370a7d4f03a49
SSDEEP 768:h0M7eJ7cdXXiqn/0Bq6ocMKv7XqNme+l9F1Msc:h0MqdK4qMzq21MR
TLSH
T165B4E1898F8B4AE32868F6DB175040EFFB8891BCF053304E1A48355BA4157177DA4FE4
MD5 SHA1 SHA512 SSDEEP TLSH

Unpackage/Farvetones/uven.txt

SHA256 ec3273976f11047ceb8ea1931e5738ab22b736b74b7680d005c012206ead8c45
MD5 5d659e22ffc59bf43d89c56343e4a074
SHA1 ace8f706b77485b05c011b941879327ad3bf4167
SHA512 c5b35a950bf623a31cd5e0d0f60c2d42d7487276a450310cace966d1bb83a85a181531d5dbf0d9d607c3fed17b3ebe94ebcae862daed51bf6baaa2c4e9ab6a3e
TLSH
T135E02B53CC559621484E5476982722C28FAD8494651900957E53474711E5969E23B22A
MD5 SHA1 SHA512 TLSH

Unpackage/Farvetones/vrdige.txt

SHA256 bf2073cb282163a03971739f06a29c2834a681d2b69bfdde56247214abe020f2
MD5 01874ba389026c930f7113b9a4d81646
SHA1 038696e040f980c556b42f5f8c3900f0776ef9d4
SHA512 894d59ec10363a75b004927857fb456f1bc7810e859276dd108b4c11d172c90bca0013be7e6fdfc111ca94491de7b91ad6873cc3243187118117ae89bbfcbeed
TLSH
T15AF04109490A048A0CB787EEBF608CC0D16853789932D00FB58AFEED512389CE32670A
MD5 SHA1 SHA512 TLSH

Unpackage/feststemtes.gru

SHA256 04439a19128224de61dea5bb1451f928f8c7df6037ad0304c0989723dbac32a9
MD5 fefee628c93b23625c5204ece5a1c44e
SHA1 f45df4990fe33f4cb653865e54d5fecde1e634af
SHA512 c3579dc99138c9e02ff7af9eaf5500694ade80a308ba28660308d3f6fce7f40b05755a510093fd7a481027784cc32310bfab4e2e40251b192a9b4da5b3a68578
SSDEEP 384:36N6nc/ObEm5upE0kyoc4WjxOhJawEPbx4od:KFMBlOlj4JawG15d
TLSH
T147B4DF779832B9D3DCF709A8EE5170D751A04A9761ACCF64653F8693084474B0F6BC3A
MD5 SHA1 SHA512 SSDEEP TLSH

Unpackage/harmfully.txt

SHA256 0f56591b185cc3f8c017eee93e207653da6a38574f06d948271cded4e4738225
MD5 c401cacd25314fadde62e80dce445c1a
SHA1 d7e3f1845f2af83836c65fc93d7649ef38af2bff
SHA512 ff83d8059d47c3beaedeb68df4213c3d3a56a75819c20acfe905c520cc7ed7c8da37d6276fee02d33fcb745f65c2acec0125650b9866d3a9e8b1f2043b4e402f
TLSH
T1B8F02059C92027280CEF2D1FB515D583C92B89083D53107EE177937F39021EAD2A9110
MD5 SHA1 SHA512 TLSH

Unpackage/harvestable.jpg

SHA256 9855450a97d8344750f4bbfcc7ea06663c92bd8170097823801c1d03a74b8898
MD5 782df3f1fd7a4b51df51ad9d5f747cf9
SHA1 78f018b5f02d3fdc06bdf29e76387011540f0e60
SHA512 aa089fe4c541fe236d7a7706d9cdbe96ab0201ea09529cfad868393871dc446bfbdedd9c8522f8b3d486e76d984b7e50a901f35592caeedfe5efc4a020e7204a
SSDEEP 96:RhoEnJf2du1Sl05u/+WrzgOhG3vCsgXC+TdPYmmfO2ZfXMIH5:Lowf2dsk05u/+Wrz+3sC+F1GLlXx5
TLSH
T102916CDA8A1359D80F9A66F8089929A1435E28CB7D7073F73DA12250CF44CF98162F90
MD5 SHA1 SHA512 SSDEEP TLSH

Unpackage/kommoden.kni

SHA256 7173a862ba93f4da1c008cad339bfa15bdb510da315c6875427cba58e68875d1
MD5 4a32c88b36bf4b82b0e3cdd8c7e6da51
SHA1 ea68f4fa6faa3ccf0c791d30591ed4b8b4a3fa92
SHA512 d8d73e1a52078cbae7f634caa13e330ec41b261326b07673e0ec7cf953fb95c44eeb66d6a28a5bec2a804b44e78cd55cd4d95ad3579ce589636d51fb9714cea1
SSDEEP 192:9XT8RD2bgu/NBUwyl1OGcZCK/iMOE9xz4:93MnbxuC
TLSH
T15C047DF15B2935C4B409AA9731DF2EA9A4253C1AC98F529BCD2012E6C407113D6EDD2C
MD5 SHA1 SHA512 SSDEEP TLSH

Unpackage/korterevarende.sto

SHA256 fc9166253985e43c30de6746f8f1cdedeee60ce62530ce7a7a69406521fbbf06
MD5 64bd7eccd7ae115c6e541e920060d5c2
SHA1 9487a0716972053a3ffaad0a8837ba94877b1809
SHA512 4f5cf3c756ff88bd72bf452da4ca7e9846f021e66f5aaecf14de0da3f13951118f8a611d92f5cdb55babe120ff383475ddd6568d719339f10cce44809d83fdac
SSDEEP 384:7d457hK5YJQKxb+EfvWcSGZ9M8Ik0Inun8WnArctEBlSMlE0q9KWKKy8ActPR7:65dFujVS7njQfMG9R
TLSH
T13ED4D03D54DD4E9829279D33063992214463EAAC11B115D99A5C338DBA83EBFFF23372
MD5 SHA1 SHA512 SSDEEP TLSH

Unpackage/neel.jpg

SHA256 24cb6a19b730630d7d085451a402730f9f9f9c6d682851af3ced9f6e725523e1
MD5 136fad6bbdd65d607eb80839a065e18e
SHA1 40674c111fe29d0044d64d7173e60bc7685677a3
SHA512 595d8f51381a4ee16f9ed8663ac21c4a0d65c7612bcb8cfbe6e8e0649ce1d31dfe4c76d80401ac1d400ec5723864313292181d6e3d11265911f80082136ee7fc
SSDEEP 768:IutzAIFmgSbN/hfOJa82/WYLWgjnhZL6j5KH+R7UD9be+qn:Iut8Vlh2JPqW+nnL69zUfE
TLSH
T1A8E2E1C42F69D3619BC9BB89610E22C3A266CD5E4EAE7133F6D5498851C48FC4D4CB8F
MD5 SHA1 SHA512 SSDEEP TLSH

Unpackage/nervelidelsers.jpg

SHA256 7e362693c6e02b6bfeda46940b7ada5c9d16cb4507e599aa9a26c0236e801eb2
MD5 6f681624da282aa1d2b35877265cc55c
SHA1 1c6619f56933df37671e614a31737fe5d85305b9
SHA512 bcb456db3a06108bed9627ec052235658df3f9fa3e694d2be1bbe2cd6352bc35dcd52aea5855e447d229f8a5d98db9b59b3f4106d681b1b7ad9180a493271c03
SSDEEP 768:h8MEdo3YI5If3XWJLQ51XOdI8NOjqP5ucQ+2zQWPDj3867RC4:h5EKjmfHKQ51+Wm5PHchDZRC4
TLSH
T117E2F1B3CE1D0805AB14DABDDA4940F2466E2C08BA9897251D63FEB30945DF06C3DBAC
MD5 SHA1 SHA512 SSDEEP TLSH

Viriliteten.osm

SHA256 a6e9fed369874b627f03fcaff6a13cf269978ef9797b636de7881dccc59a9d64
MD5 0af03fe8c4d9d5ee68730407ee605fed
SHA1 b35ae8c43a23563d9f8fa1318c1b82b921fc95d7
SHA512 bf4106ae3ae10b131286e394241fc926108b50b580162d80561bb0245f1582b087c01c0b3e79fb30d31672134d94d6c8d98930c6b9072d09697c9a23859d4057
SSDEEP 96:0LlFPV+PeqZG+YFJIzQ1OHB9nFfAcv8Q+UXgxtyjBC2MXAWEiYqTU4uonIHvu/lG:EjPVvqiJX1OHJxUgBtpCEi9YHvuUz
TLSH
T1B6F37C22F821530CCD281909C65AFF8DD7D2B25B0A7DBD4593028C421B272E6F7B871E
MD5 SHA1 SHA512 SSDEEP TLSH

aanderdder.der

SHA256 f3ef3bcb1e5709a401eec72450ccca7021386c9177485b7866ebf49945b2c5dc
MD5 79a1ef12d605c4c640d97f0125d4b227
SHA1 7f1fa5cd0378e9588a6a016236fb34cf5ea0d39a
SHA512 edc2798e17d41d51e1dd0e686d5a900e8b0ce79ef9d1663df98910942fced5d0c3ed6dff23d399d319e42830c08d07e66be7f3964e7ae42d89b070eadfb3c977
SSDEEP 192:dhbHsfscRzI6OJ+8M8IGIpGT03h8zdCLEk40bwoerbJVx5AK3TGnXMxy45:LbMEcR4MtuzdOEkQb5AKD0w
TLSH
T106147DE72CD53658B09F89F24D484D84F16005581A1FF431772EC52968A8B4DF72E1A7
MD5 SHA1 SHA512 SSDEEP TLSH

amourouses.hin

SHA256 43ac222256e37d4d7b952131e858fd8239a18bece635180796e4712427bc8ecf
MD5 6969781296ef0bf52f9b2cf6ad04bcb3
SHA1 6158402d95f633e3fe69c5f38404049203d4b325
SHA512 30f8fd2a7280079c8020665eb3f98f6f8bc3a4a2fc860a9e3038abd462af7f9698193813003da42835298c296d030a7713c431c5591d1b031ede753ce57b0da1
SSDEEP 384:2OXJax8wN5Lvqt9KOc7kdepWkXqAZmFGSh7861:2OX45LvI4k2WkXNZwGyT
TLSH
T137C4D14464A434AA96D421C35D669DF1642A0593FCCBECE5BC40F0BC8846BB0F49D67F
MD5 SHA1 SHA512 SSDEEP TLSH

antrum.txt

SHA256 a5e1627b915d972013b75df5fc307086f740fd8b811dade6f50f3c4e177b0efd
MD5 c2afacdc41027bbcb4fca99c09e2c069
SHA1 b965dd01ea504a449e4809d955e7bcf99d51be66
SHA512 6d29c4ca15da5eb87ba0284430aa9376af74f7e1905c02994d91028bad14289c162347319b2e7573bab2c54546fd9137ad68398418b4db453c3dd728e46eece3
TLSH
T1BAD02B9ABA3F015C961150CDE4B158890C156B74DDBB013DB8A9360CD025A9C1C0351F
MD5 SHA1 SHA512 TLSH

besigtigende.jpg

SHA256 b7a00bbf7f4006f16ac16e86875dcdfe0ffbcc792cacc38b7f77f538df02f046
MD5 ee1331479d4c46d6c97b00eccb212e31
SHA1 f1a462a84f7d2c6119712980eafb37abb266c11a
SHA512 042bddb79852e8bd09ccc90e0b6726422bfa0c09d8d68034bdd0571f4a2c0144210b6e6e0f1933a47db52d857b9a1210497709e8b4930a3648c1256538effcc6
SSDEEP 192:LIouAixhu+CFr50JoFwDKjelAue7BvXxbsmXGd9:MpmFrW3D0eM7BfxbPGd9
TLSH
T122E19EC738D8590247A90D7429362C7B935B264235207FFB3AA15ACCA1B1EF258CA3D0
MD5 SHA1 SHA512 SSDEEP TLSH

cavum.jpg

SHA256 3de9254b5bdafebb38c3a9b987edad67c27e11e83f8e4b09dc7e17d6c69dee16
MD5 24c3c068d9645a916de4edee514ec63c
SHA1 60ebf5bab2caae6aad9123c18de9b3031ab860b4
SHA512 ea14305302be66f6f9d3682b6c6275b8ede4a3bd8daa632923e542eef817228d011ec09a3f7513ca3b0630a5526517c5c1390fdce9d964e8dd4f05c4d9e0dca3
SSDEEP 384:MyXgs+gs/z5G6swLTDluyadSrJcuiwjt7UQMeOpyncRuJ9J:M4gs+g8zA9wXsyn9ct2b1J
TLSH
T19592D05B554697A29F044325EB1280F159ACDBA9FE6B3A3498B0CA062ECDFF431C47D3
MD5 SHA1 SHA512 SSDEEP TLSH

coyote.txt

SHA256 75efc781351203b143f326bcd4ada3369d5279526c7e6ac9a54e42b6a55cea08
MD5 c29eddd9490b69f8da58b4205866d529
SHA1 47aacf1691f360ff44460cf931b229285e27f05d
SHA512 c8e05b99e8d1c9bd9ee55fda09b397f83f281f3f5a71527af3d254ff52e34f9ba17536917e28a1014a1b9430c3ded622c14660d1478fcffb94ec39f79cde631a
TLSH
T158C0C0C0E7632301258129C144580C1002040140C330712C2C40330B1591C816F0C68C
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Fatura.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Aandeagtiges194.fut

Betjentstues.txt

Caponise223.ung

Palehearted

Romancernes249

Sandbagging.pas

Semihyperbolic.txt

Unpackage/Farvetones/Kompenserede/whisperproof.jpg

Unpackage/Farvetones/precollusive.ini

Unpackage/Farvetones/rissolle.ini

Unpackage/Farvetones/scabbards.hal

Unpackage/Farvetones/stegebo.bra

Unpackage/Farvetones/subcultures.ini

Unpackage/Farvetones/undervisningsomraadets.mex

Unpackage/Farvetones/uven.txt

Unpackage/Farvetones/vrdige.txt

Unpackage/feststemtes.gru

Unpackage/harmfully.txt

Unpackage/harvestable.jpg

Unpackage/kommoden.kni

Unpackage/korterevarende.sto

Unpackage/neel.jpg

Unpackage/nervelidelsers.jpg

Viriliteten.osm

aanderdder.der

amourouses.hin

antrum.txt

besigtigende.jpg

cavum.jpg

coyote.txt