esseidm[.]zip | Triage™

esseidm.zip

SHA256 0cbda0a83df694542b1589180f6b0559b06dcb3bdc5e201bad478ff1df02d09e
MD5 441ccc869b55d935952ca707eb6827e1
SHA1 a8630c3ba1746cb1b4f723a8fa97cd23f840e99f
SHA512 21220dd5cf9e44665966a0539b331b87ae6f89666daa5550b19f5a8bbd2af5ab372b475f370d4968017275e9266b028c2cfd4e9d6e31526f76fdba2ab6cbb3c1
SSDEEP 196608:IWMfO7teOORLFWMS5ceUIYzDg4ROUmgMOg1mC77wuyyqKdZ:I/foeR7S5ceUIK84EUVMOg1fZyxKdZ
TLSH
T178663310E6EA8018D624E7F34FCCE572950AE17F57163D2E66102F5076C25BAAB73C2B
MD5 SHA1 SHA512 SSDEEP TLSH

__MACOSX/esseidm/._.DS_Store

SHA256 2f380f4a3d05a8d90c2106f50da75064e9ce57a598599dc5404f8f69a0223aa9
MD5 b9a94cc8f4aac450fb21641eaf065c6d
SHA1 0bed7e90c2bade9763fa18f1fb4441d31f91c87c
SHA512 f1e82573db1da08be076ab30e7d8cff350e15d06765e1bb74e313cf5f93e1df6921893a3589df51e6b18538c21a9df6d3f23fead170e9b3c02993f5b5d4a2f4d
TLSH
T1F1B002682C130251CD95C53017C60455BE7C519153631526F57E414903073607995D36
MD5 SHA1 SHA512 TLSH

__MACOSX/esseidm/._README.md

SHA256 2e8191f0a0f7f713d5b02ee237eb590b1c47cac397f4e967911ee103ee27baa5
MD5 877e74e8f1ff711d5ac03eba21e11a35
SHA1 e33cdb9a8b412ffffb07b5fafeaa88696c8a13e1
SHA512 8206b10bf5f1fabb5c2f9afcd8361940cd86d999cca4c52553693a4f1683d872d18bd05ed7d17714a9fb0c19eb5283f78a9f005bca25033bb1a7fb2e9b5508eb
TLSH
T18BC0127910475762C58BC03048CE1090FA35F07993A24D12B19E42905700F25FDBCB7A
MD5 SHA1 SHA512 TLSH

__MACOSX/esseidm/._discord.py

SHA256 3c736f8e8c0615c6ef6b1f931cffe98d55bfe7b12fe008297287f1dedd864e7b
MD5 47a3187bf7bfa6998cf3c34d525ffb3a
SHA1 c90374b5ddf6b5ef3f6b5a55616bf5cd10ceac43
SHA512 583695e416351cbad09656784ff55c23c2e599c4e4e6a14b88347df90e732de4cc99b335ac76feccc15aee7ddd42fd4114f521ed98dbd802d8eaf39334193318
TLSH
T15EC0122A50061951C44A8030198D1050F176E16853926E13B56F80A04730F35FDBCE67
MD5 SHA1 SHA512 TLSH

__MACOSX/esseidm/._modules.py

SHA256 ca2ea18ca105e92480a77aa0ff6347f4b4b470cae1b0911472f759719ad3fbfd
MD5 8265f0f200d9901dd99cac25567f2fb5
SHA1 5eedfb9601726543a1625e6d76becf3da4527f9e
SHA512 184e81a42db9eac53f21cd7dfa620839ecfe8c411bb23b1ced42d42c3ab349f353a9ef42240af608b6acffe03ef2b0267d73e139017702c57a85e8cc80086c1f
TLSH
T15DC0122A51061551C84AC0B0198E5460F139E07853A25D12F55F81914B10F61FEFCE7B
MD5 SHA1 SHA512 TLSH

__MACOSX/esseidm/._reflective_injector.cpp

SHA256 e33cff87bb9eb1395b9020e2f361469d221c95e13b9f33573cf920d4b12a723b
MD5 cd890f75434241b58e67c79a13184239
SHA1 1fe3c69ed1b2feccc0dbce337baef4ee83bccf13
SHA512 e7f1156c93afe4c00269396ef346224022e58c713fad615992ad0545470f18927703c81463dae416cacce07e8e6a72f0cb6aa941f6d91ecbbae64dfdb11694ff
TLSH
T14EC0126A14062791C44AC0300CCF1170F279E2BC63D20D22B15E45905700F39FDBCA66
MD5 SHA1 SHA512 TLSH

__MACOSX/esseidm/._setup.bat

SHA256 65833c380bf21b00ee2b29aa7b81cf9c07944a3eafe58b9e40b2bf3f9d15b432
MD5 0b683d456e8ad5455ac7537bf116bd96
SHA1 8458e53485187d2f08e93ed6e1e2781d94c041ae
SHA512 80f9925eb70d75557bdfc95d4611ca843b7356e80c53db356d43aaa4d1ddf0e22467f26280fba03e0e7e07150fa4ecdcef0971ac20bc5fb1a69d732e3a079597
TLSH
T110E02E3227C00222C25882B160CBBAA46323F426C6C24203B99CD220072CAA02AB298B
MD5 SHA1 SHA512 TLSH

esseidm/.DS_Store

SHA256 32d3bac34779a05024f8e258ed7ad54e9f96c0367f7a7b062c3df29116fb4885
MD5 47e66591103b12b8f9a9cb107d1942cc
SHA1 ad3d546c219e04d96eabb20a8403d60dda433499
SHA512 a538715dffb57dea3e3177a7fbd34d2a5794b201ee0628f2bfbbb8f9cd52afd7d946a5e2afac6c7a613ad923f97adca9c7bfc999ff8af49344d05c4dfb77f128
SSDEEP 6:VWmtQlEC6oeYGonb+ilGYSilGYwc76XkEslX/9ldlXSPnrtHP8//kZEK8lXSPnrV:QawENElrl0O9EEX/HnXw6XgEK0Xw6X
TLSH
T15EC14F5283A0209AD4391B7508EB0B363B76C52012624387EB512C29AC13B401F2AFB1
MD5 SHA1 SHA512 SSDEEP TLSH

esseidm/README.md

SHA256 f72475f4ecc5664a03a2bfd49a91ff47c27d26c6c31560748bf82ba1c201fe3e
MD5 59a556d284272cc7b32f08efe11fa08d
SHA1 41be5e912ab6aa9c1de9398f3e1bca5d5080f4dc
SHA512 44cc8cbd2ef4c3c24ddce7dbf095925e6c8bf6708a8e3c6aba91b06a4388b3b068d9b9352236057cc5a88c07c83e5bf89f548bcfd8caba17dd0972073f9732a2
SSDEEP 384:3PNbMz2eiSYXQBGu7l0QlBBMt55j4PbOCfb95S7E7Buq7ewcfxQaMq4ylOCM5Lkw:3Puz9bYXC0ywtzPCRR9uq7jK9iylRMyS
TLSH
T142A2E92F6E94217908B38163FA4DB2A2F73890695311646DA4BDC49D3F3CA69833FDC5
MD5 SHA1 SHA512 SSDEEP TLSH

esseidm/client.py

SHA256 0083585223fa3247ad95222f581e7e345b785a8d62bae7a0da1536673a47c460
MD5 1e7812bb418bf8293d9594474422cecb
SHA1 4924db2fdb03ce3f34d956642304b6a72802a9f7
SHA512 04474df1775f46afff239a9a428e41251ba3f401a8fab1776e89a0b4b536a8be27d26b97b5cb6ebc8aa48cf6f1e81f8bef6f7c57da689fd53624096e645713f1
TLSH
T1B0716E599C1DD625159C0BD57C5D1A40A33EF18FAA52698FC8E67BCD042D31683814F7
MD5 SHA1 SHA512 TLSH

esseidm/discord.py

SHA256 6a0da788c3e5d57ec16088b04cb8cc39b15dc0449a6ac21dca5ff7389716b4cd
MD5 3e57c2bf4c7624328cf1852370207cd2
SHA1 46d112fe076cb6f1ea9c05f5b0568048040ab76e
SHA512 64fc6542306f57150b33893a57f9758573d7871f839e00c6a070292d428b166bcc64b2c00ab56b0acd7f535f1ec75c54322b559e95f922a427594a3d76b10f2b
SSDEEP 96:FHmsUKSGckLKeMdhPKcnt5pOUKld1jx2d:ZQENKHxntnuldpYd
TLSH
T114815C7C6C50EF1E60AE64092799C946818593F452C3D684431ED66BC7B2BA202AAB72
MD5 SHA1 SHA512 SSDEEP TLSH

esseidm/hollower.cpp

SHA256 2a19c636388af04e4c89c312b14378bde2ff8589adfeac904fe72d95a4378770
MD5 9be213543d4d45887a32f1b312239608
SHA1 8db9d872429084b3af081ab387481e41ca31fab8
SHA512 942d993c5b2e3b464f575f948495665a277993490f1a288ee987dcffa7bcbdcb51ffc5acb49b5807ff86d08d2829cfa88dd47f0d6ff2f48189ac7bc45cb207da
SSDEEP 96:uZXVHqxsaqp7l1cjIipVStqPTk5nf5wt4w5J8IGnm9+w:6rakxGIipVS5nf+tGnA+w
TLSH
T1F4A165865929305158F71079A7838C071DA29003267DCA277DBEC2C38FED1A9DF67B6B
MD5 SHA1 SHA512 SSDEEP TLSH

esseidm/modules.py

SHA256 8e69a17d21fbd667ba95f561ab8b907897c170485936f8ec6f66fcbe5d35de95
MD5 653b7578718a2f62285edf025fced892
SHA1 948f5cd7fa65651d6216750fd5fd184bc7600b16
SHA512 651591d3593e5567ed0bbaacf8fe591e82e681fbc236fe79b9a2f4be27f066656598a11438d876b5c2793c294f1b787fc64e8ade41305231fe7d9df5a71d6e38
TLSH
T1CA615BFAC600E0402584DE4D88FC214593FDF21578838FE3DA25A6EE0A94DB4BA49A13
MD5 SHA1 SHA512 TLSH

esseidm/reflective_injector.cpp

SHA256 567da8bc8f9fb1c94069f9968a94f4e114745c676b4155038ba5de806340ca25
MD5 98787194428dd266a971fdb1d4b8401e
SHA1 c7894df737971a89c91b9b1c40f30dd1721175c2
SHA512 340b51e3e63782a4133ca210694587950c64fae63b24ceab629f3f0ce0a2e91eca8bb115bae8ebd7fc917f7317c2ba020da03eb3365b1bbdbfdd69682a99da04
TLSH
T1EE5144CA59263146A8E3117C57C38C07A965D013676CCA2278BDC2C19FD92BCCFB976B
MD5 SHA1 SHA512 TLSH

esseidm/requirements.txt

SHA256 c11b2cc4917b8355ebbc10c0caf5a54272284442c9baee3c9b13e28d084b642d
MD5 7d31013f75f5ba0587fe02bb8039d467
SHA1 2dead3f83b6227c91cf410221b7277f421da1249
SHA512 0ce1d024e129a93cf008f2c177bfb8826a4abca8958f317aeb5379b56abcd43a11359e5b6061fb841c58f66f4c6c725ad8d5253c43164a662820caaf1bd99652
MD5 SHA1 SHA512

esseidm/setup.bat

SHA256 ea4678072dd10a2bacbd1723558e3442d7864134825409fbb963753966acdc9d
MD5 8fc740d66e60fd431b74f17773a98fb0
SHA1 394fd5f9cfeab29e26429b4c01b61b39da36e3d2
SHA512 4f2654914a62a21d65b63b390e5715a695d5544f652c3e692c396b8f12d0b00d9adc302b0f491b428c7c8ee486bc5cd0f1c30822d573af2979e0565e0c79195b
SSDEEP 49152:qncpeL9t1M+UfMWfR5uBNnu9ooura7wMptJyFqvdkOubLE9EecGQITRCpNLR9uO8:d
TLSH
T1E5074B320697BEFD3F6D3C85A4056E441D5C3B4B1169824ABB8830BA67E95B4CF2CD78
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

esseidm.zip

__MACOSX/esseidm/._.DS_Store

__MACOSX/esseidm/._README.md

__MACOSX/esseidm/._discord.py

__MACOSX/esseidm/._modules.py

__MACOSX/esseidm/._reflective_injector.cpp

__MACOSX/esseidm/._setup.bat

esseidm/.DS_Store

esseidm/README.md

esseidm/client.py

esseidm/discord.py

esseidm/hollower.cpp

esseidm/modules.py

esseidm/reflective_injector.cpp

esseidm/requirements.txt

esseidm/setup.bat