a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b.exe
Size 3.2MB
Sample260620-2lsdsah17r
SHA256 a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b
MD5 062a5e59925595038bb7522dc3d16250
SHA1 4e710f19855891ed350ed2e96c009393dfb331d7
SHA512 a19746dbfe2e6c3c292790a9d1dad0748df154717196b43b5c3ef1cef876f149440ca769dde0f13bfabbbedaf28de169028f2786cb33998aab043556d6fcd6f8
SSDEEP 24576:oub9q+Ir9TEaqXIM3NBx/GjtCvI8/bbVSBOY61Zua6C+zhfngSIVcK3vA2Bele58:oubM+IBT9AIMdP0sjUch8NgbVcXZVw65
TLSH
T1C5F56B07ECA609EAC49A633189A346A6B779BC181F3227C32E50B7783E737D09D75714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b.exe

File Explorer

a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b.exe

.exe 3.2MB

a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b
MD5 062a5e59925595038bb7522dc3d16250
SHA1 4e710f19855891ed350ed2e96c009393dfb331d7
SHA512 a19746dbfe2e6c3c292790a9d1dad0748df154717196b43b5c3ef1cef876f149440ca769dde0f13bfabbbedaf28de169028f2786cb33998aab043556d6fcd6f8
SSDEEP 24576:oub9q+Ir9TEaqXIM3NBx/GjtCvI8/bbVSBOY61Zua6C+zhfngSIVcK3vA2Bele58:oubM+IBT9AIMdP0sjUch8NgbVcXZVw65
TLSH
T1C5F56B07ECA609EAC49A633189A346A6B779BC181F3227C32E50B7783E737D09D75714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

44:9f:62:2e:d8:11:4e:2a:e3:78:57:79:01:b9:a9:48:b3:e8:e0:01

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=grind.su,O=FTdWZvwlGW9b,L=ALpMEMt,ST=ARBZdAv2,C=US

Chains

Jun 19, 2026

CN=grind.su,O=FTdWZvwlGW9b,L=ALpMEMt,ST=ARBZdAv2,C=US

Minor OS version

Major OS version

Entry point

482016

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

899KB

Virtual Size

898KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.1MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

82KB

Virtual Size

376KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

a78dfed1650aef00f19f9b86d529d42500cb2202923169692a789bb7f3bb402b.exe

PE Signature issue

kernel32

generic