Noise+_dump[.]zip | Triage™

Noise+_dump.zip

SHA256 7c100d6bca62948270b03e6646a27a7e054fcb7d343c34123d40fe925cb78a59
MD5 a42a78c0b68c39a109321d97528528ef
SHA1 59bd6ce0917ec53e2b06afbc5717add0e59dd1ce
SHA512 609c0d458e54b532abe4029f454dc90bb22215ed7d907b908cd68b582f1a7634f4da80596ebd0877d4a17c589eddd51ee073b86ad7b573c3a5cd99443bc7a539
SSDEEP 393216:d57sANYO8u2bK7+NbVQIFJNrqJcrNbfKnHrmFypg:dOYn2bHbxxmWbfKnHrmYi
TLSH
T100D633904FA2FDD45F522BB7DF9C2486748E0CDF8CF52D594B48F69940CE0CA86A1E29
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/all_functions.asm

SHA256 41f7e9a6884c55f84bb0c69f4e1aaaa351a281f03e4db6694c830c50080bbc53
MD5 119f3a6a759e14f36714dadd020e943a
SHA1 f87ae52451e41167ff3b31611817f7685ba98cc5
SHA512 911d78756a8e7bdf286a9c73cec2eb727d7493b59b2302bbc6aebcc8831617889e95bdd6b16611f9f57052e7fdb03222a2b55bb1da157c5d17851fc446daa464
SSDEEP 49152:IbpyyvZHre+wzDY3mJ1LL4O0DSOYlT0IUSyU7xYDBO7seDe3T0OF8tuEVAOw0lRI:O
TLSH
T11537DEB1621F4CCD8B4AA734946006D776FEF597A432B870EDBC507E28CBA4D459FA20
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/all_string_refs.txt

SHA256 a7a8aeee1db5cffb29af56352b438132974ef9c007912978bc3abe91bb4b7c67
MD5 e939d48b274330c89037dc9fe75b2203
SHA1 25e7febafc3976fb690e70125bae9c265a33c4d9
SHA512 33bdc28b9126548363bf25d5cfb0dd7e1acfaa437ee34334d381b004dd0c7954b6498546f794f5e33bec5ab411ad10d95997da2279b32dac26af5bcde9f1a7df
SSDEEP 6144:uwlGfel48aoTvDxXpE3U0BnzMNPf2Y3kUmlfez:uF7oTvDtpEVrUr
TLSH
T1C4D41366AE0EED4A398A544778B2782EED3CB2E006C4D2486FE9415C70EBC1FD5F6570
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/api_xrefs.txt

SHA256 8c2b5127db55dab9573f7843506bc8546015f2e9036baf0caa86fa94d2ed88ea
MD5 685d5f5f1b6e136e5230f81f27b7fced
SHA1 512e8cee780811de1370b632bfcdfabf296ba7e1
SHA512 7016f3c6d86e52638e88f95deafdf0eff279e7f8b6fd0884f01ceffa1ce107543f349129be045a8bc0c3ed430433976de700a529fe1b31e479b3e3182cfccad5
SSDEEP 192:UoAU46EvM5O/mjVGpG+0ykIJDNf8i84Q6:ZDp3IHdQ6
TLSH
T147F1777045C7AFC90470B22CB9D487B986E2E2F11075E591F286A859B1BBC78CECFD46
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/config_strings.txt

SHA256 5ee7a7771e800be9c49be89d0f6adaccfe136d613c9e0e9c6ff31e2c3930201f
MD5 5861bcd38b0bca601b1654e42dcb0d18
SHA1 0c2541115051fabd6fe6ce748ea36b9657f28984
SHA512 6977bc0e10e56dfd76210aa082d095bb5a1648a35cd4bb3f00e8ade8fc73c24bee991c93ed6b461bde280e7afc39a6b65d1efe55dc399a9209f0056e51223918
SSDEEP 192:+P0tA91lOF9MBg+0cP2cB2zxGid2OSHSv:AuAP2S29QByv
TLSH
T1254299BAAD0E5CCD4985E1AAF089344FE17DBBF15519E1246FC84189324BF2BC2F1963
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/001_DllMain.asm

SHA256 126144d9e211c22bad80ae6b2dc297f1d50f6b2166dc071a1a59e2de4786b6c0
MD5 a9f5636d93c25c646349e7788791d41e
SHA1 0a55d01738825d145f4af4a2b606d50daf257070
SHA512 be57b4a818c20f8fa24bb981ec32fd77faed32de1541400899edb342da44f61513ced641926a121509b4178afe4a0dd99f23eba0dea3271d6572a343b01d01bf
TLSH
T1D851C171A7B24EED5688ED78B8D1149572A568A600307C70B4CE91FFE3EB350C8F7990
MD5 SHA1 SHA512 TLSH

Noise+_dump/critical/002_MainThread.asm

SHA256 27748077c6229c5200b4d584cce8f186daf6bf132023b89760661ff51f460e5c
MD5 025f94b5d79f7a77520b15df1a1cc1b8
SHA1 69b5097294281cde4af4ed7874947f45504ee445
SHA512 1892806fd66e3bcd98d10750a1494b1e710061dcfe6cd3ab23d16de1df93f8f84bdc73a282183f881ef92cce511e341122cae5e8aee138b91d891f9baeb26e88
SSDEEP 192:6rncDRbvsZnHrAL6B9sjiZJzF10eo7D6pjBCux1gzxGYQ:3lCESZypg0wqxGYQ
TLSH
T1814236B0568F4ED94B79EA78606067B672D9F0470C700C75F82D90FE67EB281C4AB9B0
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/003_SwapBuffersHook.asm

SHA256 6338b14cdd1479ef1bf32b58580dcf51c3a9f691d92e8b0a22393009f9783714
MD5 d85405466b3e772fd883463692e07001
SHA1 bb8e90286c86eefa2866302e8141ec3a804fb089
SHA512 b27a8b3ba95cd70356188a8d6a16f83ab092e6bbab7634a2a5b6186c9ad97754911b36e9eff3f81474207c895b54093615ce964b7a0b4eb5db15ff7fc7f5089b
SSDEEP 96:dpYh/RQ/mafqNAP8cSeP57wGEz6iJdNNFEXz2DGg6Q:ditiqGCe9wGViJd/FEXz2DiQ
TLSH
T12B0214B155924DCD4B85EE3874E1209673D5A89708343C24B8EED0FF27AB246CCEF990
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/004_GLResolver.asm

SHA256 d8b1d4c409216027c415b7cf41618e39010badf3f2ea453a0ce564bb49111e27
MD5 e5f04a53f48cccc5e9d973664355fd4c
SHA1 e7ed870054e12b6df0f7ed2a4ef43faeb66c9803
SHA512 5d41c42839887762e63fd376c38c37d9dfada53619654a8857c132a2a88614704d11abda70dc76f900c05062d5f848c003c0bc2124e78e734b59ad1692d4f650
SSDEEP 96:e5pYh/RQ/mafqNAP8cSeP57wGEz6iJdNNFEXz2DGg6Q:e5itiqGCe9wGViJd/FEXz2DiQ
TLSH
T1A20214B155924DCD4B85EE3874E1209673D5A89708343C24B8EED0FF27AB286CCEF990
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/005_WinHTTP_C2.asm

SHA256 f2bcaadbff8e047b4469abdf2682d3455449dca0bc9263465cf2d12098aae4bc
MD5 feca7c19fb4e085479dafe3c9dac1ecc
SHA1 f9d5af910dbf6137f88c362b4ce0a87edb45d468
SHA512 72307a1dfa41aa03380a8dfb4ac7fdc3486f1f65365ee0844f3b625f829650a16d90b117a20fcc491d2023c4833335384bf7b408dfcea0571f922dd920035acd
SSDEEP 1536:MTHl313478bAPdRqILeKZGODTSqrNFUFVCeJse4q:MTFP6lDTSqrNCVCg
TLSH
T11E047AF155564DC88B86EBB89C7018E673FAB5A704304C74B81F907E279BE41CADBB90
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/006_URLDownload.asm

SHA256 f9852c559aee952bdadb420d96b90845d07bac8977dea539ebe352399dcf8e55
MD5 3a1c4dc23da59c63740bd48b908f82df
SHA1 5921fb29b4fd7b9bdb9c6710e4c8a55917dcbaab
SHA512 e033952af9b4be37a3475366e7016486d1dd7842795d54b89363601d25a4e94345f1b48a264d63087d8ee630ada0c6886ca1a22b1b0e3d818458e8b2e9379d8d
SSDEEP 768:iZwJfRxndzb0E0/piXi8SFJ7ms4r4fN25goaj33p6f:iI3QWOFJDX6
TLSH
T1474324F1B78E4DC44B86EB3881E019D677FAE15B44B03D74B82F91BE2797E40849B990
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/007_CryptUnprotect.asm

SHA256 12781ef984d3b282e79e23622c585efe38ede98d1755a46f6ea66f5f8cf3ed02
MD5 c239ffa7cb135ceb179c8bdad771e2e4
SHA1 01d0ad4471afac05a3a997a69e05c3a7870596cd
SHA512 7acfba031140ec7f6c21198287dee84680313381a1f8b70a6684f821733a440f99704fca13b72f999303aebeeac3f0874ffa6b5e1dd5c0828577d243e295101c
SSDEEP 192:wanxnI9kWU/yF299A9LENFi54iR+9XgNaUeREU1MEEhLOiJtGlEaNWZ8blt6TO+E:bALgqaXMqCVC
TLSH
T128B215B116974DC84AC5EA38946015DA33F9A4B700701C347B2DB17EEBE6EB484EF96C
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/008_BCryptDecrypt.asm

SHA256 5eeda4dd157c1a7203959d53c987bd072327599ef5f9b6fafe92b8843bb94c11
MD5 d916874625a0834a14a01691f6bc9af4
SHA1 aeabf36c5948d6879289f66741f90c9a9012d7fe
SHA512 9757900ca7d03b10a8663305fabae488df68bf8a705f2e46e2686a07f7c63b019c683d70a5b019f326a192aee27f6c548fe0f1c3a4f9fbb261bcc27f2681b6f0
SSDEEP 768:FKwsmLKe0hHM07ecoFo1oaamSCrtLhkonk2tkWwDWXIL50Mpc9EGLX0:FIe+HMIYFf/mSCrtLhkoxkWwDWXIuiQk
TLSH
T1D38349F07E964DC44AC9EA3C702855D673FAA09704301C64BB1EF17E379AE74849B96C
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/009_OpenProcess.asm

SHA256 5e8bdef91e7e2a77a911c7027dfa509483559a6df4434be734f7e7f0eefa9d51
MD5 3aa791a935bf03158659391878a98b2b
SHA1 a59e954df55fefb89da0e3ef3cf177efa8fafbe9
SHA512 d93228c0911acee8a14a27cd5da7e8ef29d8116b514274285c3fd138ad074edeb82d3cf43dafd63d7532dd6fdfad20cf874e36fe6c2c38f5fba7acf9f8a233a6
SSDEEP 192:LFMZ0s5S8SEMYRFLFdB8Iu6fRif9yxFZLnyFG22myRdrMsm0MJIStpTZ/GmPVTzD:qLJNyE4+fHA4C3hmhaN
TLSH
T15BC227F3559A5DC44BC9AA3C843015EE73BBA4970C301C20BB1EB07E27ABE74859B65C
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/010_GetAsyncKey.asm

SHA256 18d61b74b9ea8ad242b20c6bbbfd2fbad644b992faee0d4a7a891ff8a9cdec5f
MD5 b802cdd8db6f86caf7b28089e4f7cd68
SHA1 effe0ba4d450371bb299702b0e858b922cfbbd48
SHA512 11ee640c014dc489e8c3ca7baf09688be6152149d26a9b9486daeb8eb151e2ec1d9b94b399b4c6c8194d94b25b5120a2a236d3ac31b5e5c9dda4250dda1ff0f5
SSDEEP 768:V8IasK/7HkCls5M0rBWgwcrp0kT6ZMsqof2zv6/7wCCKI/Fn1COIS5XBF+qXy:Vmb/7EClsdrtp0S6ZBqK2QEF/FO8FE
TLSH
T1B8D359F1A1934CCD9782FA3992A008D7779AEB5274371C34F86C826D77EB64C44ABD90
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/011_SendInput.asm

SHA256 10725f0b7daad2a4e6d701d30d2bdd06f33981d5a556c5b65d7d8becde6d823d
MD5 41250556e6fb8c84693ac0ded46d4bc5
SHA1 2d6ece49a0968d2ab13e23db956e6127a76ff13a
SHA512 9369679df5068acd6080f3739b37fa6b5494cd653cbab6c8e57e4111eb25b520eb2b103b157e26b44915bfe5bd606e60a9a8594847f16fede34fb9afa0a06058
SSDEEP 192:noNnymYRWLvbLXFMz+exH6UgTnhcS39yJqGILIOjTpUzFGb2xMNsjU6OQHKouaSV:VFoRF
TLSH
T1B5721AB065A64EC44B89BF788520D8D677DAE34774330C25F82D81BE6BDB34D84AB760
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/012_LoadLibrary.asm

SHA256 9f31bc2051ab418594d98298c96156b9441d882471fe3f00bc95431a781fb708
MD5 7899367544c7fe46a0830587a755f1e3
SHA1 da4610a1a6c86884edacdae1d264f6fbeb03ae4b
SHA512 78958ba51f746b12ed1b396d2f99d56f8cf700ce612bb9ecdba5c60d133b405828562948501b5df216ae8faed155d2a6db59843591961b0c5da0fbe508344853
SSDEEP 48:kJfeJST2HFspMjZpXffFqIujOQ5usVtPRpcIIyf2TNWcZPW5qLCWMtkHFS2zMUhs:kpeETC1Xzfo+KgzOAdsGhQ
TLSH
T17A9145B0BE9E8EC446FDEB3C55202589B3F5A007C4644C75F89E8CBE1B9AF8140BB850
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/013_GetProcAddress.asm

SHA256 6098433c51700fbbfabde52353d17b3d63f75f733bcb09d08ebee92f28210296
MD5 106a0e74f099ccb8073cada8aa96ac6e
SHA1 d2d11b2954d2393fae082cd4029a51c318f4f8d5
SHA512 2fcf739cfc56a93d175e357844afd75ba0e30e22cb976505f88a990f53329f36b4e1d1f2df2f2cf66fd7f9b4fd2a84a26cd60639dcceb4842d770b8e15a2e43d
SSDEEP 192:mtmrPUSZdRbseg/0UAwNn9ZgX7PWdAoyHDCtyP+sF9o3PPOJMxQciPBNAxWCRvyX:m+kvQ0JOPFJniUzv+m9RuZd1ytgWYK5
TLSH
T1423310F152B24DC88BC5EA388D6015D237FBE46708301874782F917E6BAEE5085AFF60
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/014_SuspendThread.asm

SHA256 5d13341a5a7af88f4f3512ad8e52c04704f866022a0748140a8425c3c4981f7e
MD5 32fd99f9932b50160e56bfed8bac3257
SHA1 4909f6e2911cf5b48a8cafc804117f22deeefb46
SHA512 5e66b5c8fab5a0cca6f7ba17157912182e2dced559b2f29ed73ca0cdf9f46298609fe983b49ba73dfc70118475582414aec5d1039e03c8309ad26d77314762e9
SSDEEP 96:pgcgfDP08jXph9k36EloziiqJi9pr9re725i7DGSJAZd3L1grOY6TCo6FLXTpOMS:icgfDP08jXphS36EloziiqJi/r9re72P
TLSH
T12F91C2B397924EC4478C9F389520C0D677BA6447C8301C79786EC5BE1BEBE848DAB954
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/critical/015_SetThreadCtx.asm

SHA256 c11afa25d37d8526ca801050f9a8da62e154bcb8573fef3918aeb4a97ef36be9
MD5 3460cdea3a86576bd70918fc62fe4cfb
SHA1 fbe7269374a642b64b4bf1115f38f055f4c899c9
SHA512 ee4c4dcfc71f5237f69af47902f4ee35c382c5ff8b5e4dbc9b10bfb240d3a919a0f7b993946b6f23fb530f365032b7e941468dee0fd6879bb22fde9a483a53ba
TLSH
T18681F4B2D7929DD4068CD6381037D186A7FA6097C8205C39F83DA4FD27EAE45C7EB990
MD5 SHA1 SHA512 TLSH

Noise+_dump/decompiled_source.cpp

SHA256 3a00eb573cc0ae39a71d4eb868b48bfbaf6e79486f2c42c723436dee16dcdb98
MD5 b083e8e8d88140f93b10a9bbbcd744ec
SHA1 5bce11d0ddd7861181b43fb8805e892738ef52c9
SHA512 fdf6e664ea315ed68c650efa6cfa4ea9358fe97022cdf25ab621a3337b57e549f522bc6e3c3b5415e5256fba204fe17408ea13744f053a931c5dbcea45572d0e
SSDEEP 768:6c+Ant7jAlyW9fwHsIK1Kv//tQpAhX848ic6n:6c+to5Hx/tQV48P6n
TLSH
T1C1332B43C9CB2822581366978FD31C06743FC2531A6EF611785E83E85FC83A966B6BD7
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/function_list.txt

SHA256 55f6463cd2be45f69a37a45558e424d97db92a2ea34120c2a8ce21c10cb254e1
MD5 cd4a82d9922c51e0de824e7f3152fcc4
SHA1 d08620a65c2bbf7b461e07b73ba4df4559d0bf0f
SHA512 b5980dbafe63c616b35ee4ddbff0f5b0855027795646761c351cf2cf0ab6e0e0819cc4a98afa5e1a2537c5b1a0917ba29b1054ba827fc7a9c57bdc4e19153119
TLSH
T16BB04860202E4888890A3AA1200E0208D6D2BAE2D300C802D24E0EC0B2A223CCA82C06
MD5 SHA1 SHA512 TLSH

Noise+_dump/function_strings.txt

SHA256 afef6133d04cf3c7b7aa9c01d51e9addad04e7a0a66316e6c8681f80946c3310
MD5 2190f76309932f763229490cc551fd83
SHA1 0aa3971df34d7200ed54ad83efeeaf42b111e904
SHA512 a80954ca19d4790b052f6e370c2fe2be9bc41d0d3d56b91c52465ab96728ac3c9076d989bff059761e4f3c33d751f375c9b101e6375c815962e8f91a9b320ed1
MD5 SHA1 SHA512

Noise+_dump/ghidra_critical.c

SHA256 7fc3ec816ed07526e34116770e67e5a267d2e0d3ec42b2a3eadf3d73c93ff830
MD5 33a63eb2bc73240bcefef292b6a86603
SHA1 3fa170e74d1f2d62ee851108a9478d8abeb662f9
SHA512 76d014cf8d5cb6694a0491826714309947425b1446cd59b26114b990f8b97525b7767a9f1b7081a8622c46cd6134389a541c53a4e6f935d511189c9ed1f59a9f
SSDEEP 192:jTQmNt9/jIsNIwVmL7lyHP2nj0vdDpRonZkA69J60FmrYmP0hUC0tiWu7Ifsm5V9:jTQ0thrLYUv241FRbN5mP0lI0m5V6tk
TLSH
T18A62FD8C4B178C89057D737C279F094EEED2502373143561786D6B6CEFB922A12ACEDA
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/ghidra_decompiled.c

SHA256 919b85153a40ae9150b1a165f4cf5b0a5299d896d8a9bf5cc71ffe04043d3fd4
MD5 38f19e2ceded89a9842a9d9fd6e9f366
SHA1 1a8d042976f0a46b1e9487794f9f6aa089d15f6b
SHA512 9f4fd8f228fb45cedfdc62c8b6921223918ca8c562589a7b3e26860919bf7de6024cf257355173cefa40521c53c4d4c4fd6f33739eb5fc8bc31b0d2310a79e6d
SSDEEP 6144:TjYr6C/mrUT9Tg4JTDAxASAIq/HDlbdGJ4NtAlo:Tjr5f4NtAlo
TLSH
T1A4258BCC8B21C58F4A79422453BC05CBDAC19523A3B8F992B50E3E9C6F77402579D9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/ghidra_full.c

SHA256 e6d951babbe32355d4c91ba17e9927081e89716d40b774d20c85f38686b8fb6d
MD5 0b407bdb69d3f90dfed16724a7f6165e
SHA1 6b56407aee1e127965e8fe40d03c17b696397675
SHA512 e43cd425c00d486f18882afd1665bedb5aa4b2b7dd6228f4f1d9f617c630ad76c6fb0dcbefd60a31e27b71288e1d50126afa364be4f87f77fe6a14398bcaa989
SSDEEP 24576:34NtAlABVkp1pzEv8A9KtVJtcUOUCaPT72H1c9bAybFwjQ22SRCobsPR8GQPZDsV:34NtAlPp1pquM0jk8RlCU
TLSH
T10A67448C4F03888D05399338579E094BDEC1842373A8B692BD5E7E5C6F7711A226EDF9
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/ghidra_injection.c

SHA256 ff614b8ae073b9474a5765b7cfb88bdba7feb401ab1b9f3475083af2de6673a8
MD5 af5b890310f8d0c04ff956370e32a243
SHA1 639398b83975de772bf8f9dde14fcef496f41fab
SHA512 e2f242626633d1fb5e016983866520f7a2c1137ab906f5be61a36d95a8530438d5bafbeddc98b522773de8452670e33416a238a3cbfed55ac3468c45d9b05b85
TLSH
T12651996C5B8B0485557D83BD175E9A0FEED18803362936A07CBDFE74AF3E12A402ED90
MD5 SHA1 SHA512 TLSH

Noise+_dump/ghidra_input.c

SHA256 579f9e02b4c4c11bfbf2821e354944f809df236577a7f8ef062cbeb7082e8f48
MD5 6b8bbde22e03ab5b94820456c85c1c69
SHA1 1015e8477426299832f11dc28ec0b6d2ff45d1db
SHA512 b0159c2a50495f8ff2ffa58a75d83575524ef5259e2b84aa3cf899f1bf4bca6535b68f71c870e0893d2926a88efa5d259b59f4ed6cb5d4396bfe9432b7872efe
TLSH
T15A215E982C6E4CF1227D5337BBAA045CCDE1746B6B50C189784F7045DF711E401EDE56
MD5 SHA1 SHA512 TLSH

Noise+_dump/ghidra_renamed.c

SHA256 dbc60adb946f02c0a7a7421a6e8986533a8e513762591ecc582f6d2da53c86b0
MD5 6b9a93bdf2df4843a3b3ebc58df34c9c
SHA1 6073227c5ce3624a5f35b30070905417298ce7f9
SHA512 3f94a9f305b2e637eb7d42834bc17e1d59c84e8ea553c9fd48ff529e8789a96efd3e81b3e6162292bbde4b0876987c22cfb4a73ecd02cc5019d14b955d2a633a
SSDEEP 24576:34NtAlABVkp1pvERCa9KtVJtcUOUCaPTQ2H1cG8RHKZw+Qg2SRJEZV2ROGQFo1uu:34NtAlPp1pSUk01k8RlCw
TLSH
T18B67448C4F03888D05399338579E094BDEC1842373A8B692BD5E7E5C6F7711A22ADDF9
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/ghidra_winhttp.c

SHA256 8de080eefb013cc43d2aecaa093637920ef56e6f167b9d7b964663649374d8ea
MD5 53848eacc2569e648d0370c53a68add6
SHA1 11adec8609f71e1942137d97ff60322ccecf5b44
SHA512 158dcefe5883f57e791b581a8027800e42d0c124ec2e54535a1037173daa0b4855abe31663dfae43c11046ab7737bcfc6436c2d9216e7c22f394401884b14aba
SSDEEP 384:dE7P+Re5ytHlhFmVmNF7IRtq1JUtOpXtappKtUDGerqle7NFzL:6P+IrTmt7ul
TLSH
T1EAA28A4BCB1B0ADCA43A237D7B8A1B09D6B1453703687B92BC3D4B1C5FB261D522BD85
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/hook_analysis.txt

SHA256 6b34ec2e88334d5f953739e35b2a1b6d073bc31c5e01da680bba72eb6fefea56
MD5 4406403df201f40855a90060f7e8272f
SHA1 dda3262a76c7f3e531adf39a2df7497cb0beafc5
SHA512 052e8cfd6f1a2d89cf4adc81add79b9184030fd448c621051327a6dd69073c7c988faf225563b85c9b040118a423d07265ff588feb9bc268ad69516da4b0013a
SSDEEP 384:Jjpim29z3+DcvCCFko1lxRXJW4TxFoTQlm/1DwaE4uNmyydZd0LU6bUkDALq7+2w:Jj5wDOmZXBoTQlm/1DwaBRLOtW
TLSH
T1C703552DA6DC5DAC4076FA42F1DA869E61C673F040997888F2D416D23273EB9EDC3C09
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/interesting_strings.txt

SHA256 d180dc1bb86bedaba4df88dcd18a10935b8c46d25ef66ba4e236a3901183b287
MD5 f98e5f54aacbdb7f984dd2bada2039fb
SHA1 ad112d4b8dfbfba0af6a41b7bd1c4d9a4e41d5c8
SHA512 6e047749a5fa04adf0525afd4ae859ea90bc0288096f6711030b1da7945362551f08a45da599b2e4c891f45bcebd1a408915e152d0445d4fd9a483d3e8061e89
SSDEEP 1536:T0rMXDZy1dUO3HcYbjTESpTElkQKdHZNRF4eyjZ9/Bb8zZGkecZ8GlMAQwcRO9Or:T0Q411KJZ9Zb8d9eHU42kR
TLSH
T1BA0460116F0AED8B2A85A003BC79B52EDD6C34D157E8C2686B994A4C79FFC03D1F6874
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/malware_strings.txt

SHA256 35d5a5d260d825fab4d96d273a0ee894294d69dc4dbb6f5d09f06eb686dc1ab7
MD5 c3cbac0b98cc54200614275196c9a8ea
SHA1 261b57b1dbb8aabaa9056e1e0e36cf5057986978
SHA512 7e2647c43f03e014d91fb72528ca9640b046ea9caf88d582c6167054cd85e17ab501b794abbcde70cb35b37d1f3f33f0f0d2f017f9cc737240089246ed192980
SSDEEP 1536:upjcdLCEMfwCNhWWmLtUwxlFRBTLslBHzu99X9Ig6Lh:upjcdLClLEMHzu31Q
TLSH
T18853727AE54E5D8D0483E18AB082385FF23DB3F45659E1686FD8819D30C7E27D2F294A
MD5 SHA1 SHA512 SSDEEP TLSH

Noise+_dump/pe_analysis.txt

SHA256 910a7b44796bf7b17ce8e1f702b99c869a461630bf7ddafb67f45e3b1af29ec1
MD5 d29e02efa4cce737c39bfd5f6602f661
SHA1 b1aaffd360d1e81d0d307bfa227c26ee5b190236
SHA512 97ea46776719d359ba7053d8abd6435ad02883b69e3c892033915b9e7cb97f361bd53d2b5c1f1e5241cf239b83e32c78d2504c07586e4f694c3c5f00890879cb
SSDEEP 192:TkEUcxlxph4FhQWvZnYzdqb63AhYVQ0VhH+AM12eY9cDgN2lqRBSOGYQZ3yIF3DW:Y8Rph415YzdqbYACVKAzeY9cJlqRBSRg
TLSH
T154325091100AD49AB4B24D2793D17B6FE0B9F173CAA23B2274CFD1981F7B3846E452C9
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Noise+_dump.zip

Noise+_dump/all_functions.asm

Noise+_dump/all_string_refs.txt

Noise+_dump/api_xrefs.txt

Noise+_dump/config_strings.txt

Noise+_dump/critical/001_DllMain.asm

Noise+_dump/critical/002_MainThread.asm

Noise+_dump/critical/003_SwapBuffersHook.asm

Noise+_dump/critical/004_GLResolver.asm

Noise+_dump/critical/005_WinHTTP_C2.asm

Noise+_dump/critical/006_URLDownload.asm

Noise+_dump/critical/007_CryptUnprotect.asm

Noise+_dump/critical/008_BCryptDecrypt.asm

Noise+_dump/critical/009_OpenProcess.asm

Noise+_dump/critical/010_GetAsyncKey.asm

Noise+_dump/critical/011_SendInput.asm

Noise+_dump/critical/012_LoadLibrary.asm

Noise+_dump/critical/013_GetProcAddress.asm

Noise+_dump/critical/014_SuspendThread.asm

Noise+_dump/critical/015_SetThreadCtx.asm

Noise+_dump/decompiled_source.cpp

Noise+_dump/function_list.txt

Noise+_dump/function_strings.txt

Noise+_dump/ghidra_critical.c

Noise+_dump/ghidra_decompiled.c

Noise+_dump/ghidra_full.c

Noise+_dump/ghidra_injection.c

Noise+_dump/ghidra_input.c

Noise+_dump/ghidra_renamed.c

Noise+_dump/ghidra_winhttp.c

Noise+_dump/hook_analysis.txt

Noise+_dump/interesting_strings.txt

Noise+_dump/malware_strings.txt

Noise+_dump/pe_analysis.txt