02388aba1adb686063dba875c903764ce6fa725393ececc2d71c8cb111830b07[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

resource
02388aba1adb686063dba875c903764ce6fa725393ececc2d71c8cb111830b07.exe

02388aba1adb686063dba875c903764ce6fa725393ececc2d71c8cb111830b07.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 02388aba1adb686063dba875c903764ce6fa725393ececc2d71c8cb111830b07
MD5 0f8b7cacf491c03ef391a321be149d96
SHA1 0978bf0c6e4a21480eb48b9bee398092ac419ee8
SHA512 c96b6c21ccc6076e631c780b499c142226851bc778cf5068b2702ded21988c0c1a5b2cef161e66994c16afa601fe66b76e1f2bddca90c1bb206a306213580b40
SSDEEP 6144:R5lz/2vCy++HyvHwk/Bg2hkH2vvXk3F/nTYhauiQ4LRSB0482xEnRy8FNYesPYSP:LsGS2xvv4f8hmKuFnY8v8PYW0TPdg5Z
TLSH
T1CDD4F163A694BE13C267517E60AA82D2AA7BBD10F76391372790773F98FD040C60B357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ea:63:0f:45:5e:7d:c9:ae:d6:b6:87:d6:b2:51:c8:1d:61:00:9b:4a:44:37:4d:fe:45:74:78:8b:26:eb:31:fb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Immunol,OU=Unlike svveflyvere Hudorm\ ,O=Immunol,L=Affracourt,ST=Grand Est,C=FR

Chains

May 27, 2026

CN=Immunol,OU=Unlike svveflyvere Hudorm\ ,O=Immunol,L=Affracourt,ST=Grand Est,C=FR

PE Signature issue

Digest

60:5f:da:cc:a5:f4:88:7f:7c:15:28:77:46:c5:1a:8b:41:8e:0c:ed

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Immunol,OU=Unlike svveflyvere Hudorm\ ,O=Immunol,L=Affracourt,ST=Grand Est,C=FR

Chains

May 27, 2026

CN=Immunol,OU=Unlike svveflyvere Hudorm\ ,O=Immunol,L=Affracourt,ST=Grand Est,C=FR

Minor OS version

0

Major OS version

4

Entry point

13145

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
TLSH
T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Angiohypotonia.Fun

SHA256 3ca9a0aa8c3e02f3be1dfe66da7f463ee9d9273c9a16ed9a0a81c28b0df68a4b
MD5 87802d032f49ce3177c51b359b56c9e3
SHA1 b8d4d051031c227bc7b3e59852830660a85fa8bd
SHA512 c541d9837b23b63df9e8c313e1f409d7640367acc2ca3147e6e4907f01e2764266efcfdfbdde62f9d735d2e225b3c74571131db1e29994ab341c9022aa83e409
SSDEEP 6144:kKLq7OQ11j2Ge1MsQiiCb8uhG7czH86FYa7b8xazZFVAr/Ql6ypzydnnT5EUAKqD:kKaouZCguhPzH1FtYxaNF2rQlMVEn/7
TLSH
T10574E061217C6CF04BD0E2A71EA765982EC93DED469C1F2883BDB9B132B9173CDC1166
MD5 SHA1 SHA512 SSDEEP TLSH

Exhaustedness.rho

SHA256 97b77df8e753675798d359c3bf8873eeb189aacf71ab7dd4a865a5dc208a7143
MD5 b59271b6abf6203badbe0968059f9f66
SHA1 9743dc751216c3fd9493b4cba99cea98dc7da0c1
SHA512 7a090b7b92f4efd9bfcd1199f528d8d104569c6f5e6502de0009ef564c1f6832adb5ad0941cda2f89fb49cbf12d82edef7014d1357944c7a36d2121c7a018cc7
SSDEEP 192:sOkzE/FlAaRUPvWWAQbZyQlRE5CPfDZD/vZ1djT4O3MGkf/kGhuSWT7dA++haVAQ:B/EaR6p7RE4NDHZfbk9yhmS8MPv7
TLSH
T16464BED8BD19F1392F0243142176963C12124C0587292FF6F6930DBEE4B69CE1E6BE28
MD5 SHA1 SHA512 SSDEEP TLSH

Morgenmaden.Pap

SHA256 7a31abfa09eca331e492157c709c7f0aa6222a64cb12b67b9f05b66a9c5e153c
MD5 b594083d912deaabc35ba1ad80992115
SHA1 3ab8366496a0d99788474e740abe06ca9598f0ff
SHA512 87ba38cd418aa8281a917e21adbf7b232e631af997232c7365278c9d3693ef05dc8a90982e91a66303d034fc59c863b1b3f742841c08d3126f8ea296d365ab8f
SSDEEP 1536:lsoYb0+wHdGwHhr6ucxiWCCZP8qkbGnpZLUsVetDPwADMsyD6RWnnx8ax/9HXggL:WoZ56uyZsR5PwAG6RWnnx99QWbokg85X
TLSH
T104C3BF95D7A5CCFFDC038538C06EA1FA4E65B026970FD47EB179D418C1862E367243AA
MD5 SHA1 SHA512 SSDEEP TLSH

breezing.pol

SHA256 2862984b0d2884ccc873b2441225175c5ed6e4ff61184cb80f76eaeba93b1a64
MD5 59b55e140982aa595aaa17485b78dff0
SHA1 c677fce2497993fb45f5ef00112dae8ccf093c1c
SHA512 f92a5b47352a3fc7edf51211e0a881026a6e758d9f1e937f6077034789dfd45dcbcd9ab4bd71171e447dac493af1c740ecf515ccc7da5415bf55391e6bafb3ea
SSDEEP 384:FgPJJODSmnZ/v3rnhLwzTSi8OH7vYQTAxiPD8rc0V9Jmm55KrnUlB:F+YNpvt0TSid7vY08UIpJrDKrU/
TLSH
T1BF64BF715EC0EDD7A3766F12ED856E220F34E26B663AC44BE4619930A984E44B5020EE
MD5 SHA1 SHA512 SSDEEP TLSH

ranked.mil

SHA256 d690f1b27cf68b7d2f56463ed3606e9a48bd1a8a9893b49e9c159eb53cd9a558
MD5 5882c543a65b6df2b456564784fed1d2
SHA1 b6236c1c434f81c82ba0fa04ab0ee82fd6ff05cb
SHA512 ace055d33a5aaa9f550d7e91d142f84619a7f297b07f76ba9b189833958a66306f969c1b3216c4ee24762a8e6d49f9389c82245509e33285c0cf24ba80e69002
SSDEEP 1536:uR+Aoxdv8I8X7Hqxfd19POJM3MaGwq9K3JY2Fa:uojo7KxfROoM1Y5Y2k
TLSH
T14694BEF290114DBB8BF621D7678D3A17612321506CA291CFAE5DD13AD53C3F11B6B218
MD5 SHA1 SHA512 SSDEEP TLSH

tve.kon

SHA256 e671e4b738fec88ae64c0795186b0662651777362db967d5a6f2a70db7379dca
MD5 c44dab2705ecb65fb37482145c7d8b59
SHA1 95d47e80f9924ebcef58cc6073da3904ad1c7ec7
SHA512 5670d630d397247c31c8069a79e33b274d3a12267673bd17c699d35892502f99a6493d5d661e1f7864c2434ed65351d1a2f34dee3e9ef9cfc5e54c6d1ae71962
SSDEEP 96:23KdV5q8TNZwS+8ccEa6gL7wR55aEt2boxTof+UQ:23EbB+MCae3Tof+r
TLSH
T1AB732B2B08C462864D87F74C242B0B944FE81E414FF12B249FE84287323A5E4EFC788A
MD5 SHA1 SHA512 SSDEEP TLSH

02388aba1adb686063dba875c903764ce6fa725393ececc2d71c8cb111830b07.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Angiohypotonia.Fun

Exhaustedness.rho

Morgenmaden.Pap

breezing.pol

ranked.mil

tve.kon

Sharing

General

Malware Config

Signatures

File Explorer

02388aba1adb686063dba875c903764ce6fa725393ececc2d71c8cb111830b07.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Angiohypotonia.Fun

Exhaustedness.rho

Morgenmaden.Pap

breezing.pol

ranked.mil

tve.kon