60814232e8b491aa42c4d37ec185c738319beb104f65ee579f017a4750c04eea[.]exe

resource
60814232e8b491aa42c4d37ec185c738319beb104f65ee579f017a4750c04eea.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

60814232e8b491aa42c4d37ec185c738319beb104f65ee579f017a4750c04eea.exe

IMPHASH e160ef8e55bb9d162da4e266afd9eef3
SHA256 60814232e8b491aa42c4d37ec185c738319beb104f65ee579f017a4750c04eea
MD5 4060ccad239038c4a6485563f6a28287
SHA1 3a4d8088e1db32320dfaab3e0d11f053772973a0
SHA512 30ef737394caa7ee10c3226d0f908c9054480845a45199103f7afe0abb6efc31877cc56b4e783d86393832a6051c135bff0f195b6c8bf3ea68e10e7f49c6c4ef
SSDEEP 24576:ghXzjD/sw7fNgh3VANkbtfu/MK+sqVj50LLoborPpIgaQQhN+A:gpzjD/swfNgn6V+h70A0CZL
TLSH
T18F2523472361D193D2B59976351D8A20C3916EAEA488F8DE33F0F72C6DB1AF0C79E245
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

69:d7:ef:a7:11:a4:cf:5c:bc:f6:f2:fa:a3:e5:b0:22:6e:0f:ff:10:78:84:bf:57:00:72:aa:ec:36:52:a5:66

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Bolede,O=Bolede,L=New Haven,ST=Connecticut,C=US,1.2.840.113549.1.9.1=#0c1a43686963686973404675676c65646465726b6f7070656e2e4d61

Chains

Jul 24, 2026

CN=Bolede,O=Bolede,L=New Haven,ST=Connecticut,C=US,1.2.840.113549.1.9.1=#0c1a43686963686973404675676c65646465726b6f7070656e2e4d61

PE Signature issue

Digest

18:71:df:96:b1:7b:15:8d:11:04:24:3f:99:9a:c3:3c:3c:a8:a4:4b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Bolede,O=Bolede,L=New Haven,ST=Connecticut,C=US,1.2.840.113549.1.9.1=#0c1a43686963686973404675676c65646465726b6f7070656e2e4d61

Chains

Jul 24, 2026

CN=Bolede,O=Bolede,L=New Haven,ST=Connecticut,C=US,1.2.840.113549.1.9.1=#0c1a43686963686973404675676c65646465726b6f7070656e2e4d61

Minor OS version

0

Major OS version

4

Entry point

12489

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA SearchPathA GetShortPathNameA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA GetWindowsDirectoryA GetTempPathA Sleep CloseHandle LoadLibraryA lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA ReadFile lstrcpyA lstrcatA GetSystemDirectoryA GetVersion GetProcAddress GlobalAlloc CompareFileTime SetFileTime ExpandEnvironmentStringsA lstrcmpiA lstrcmpA WaitForSingleObject GlobalFree GetExitCodeProcess GetModuleHandleA SetErrorMode GetCommandLineA LoadLibraryExA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer WriteFile FindClose WritePrivateProfileStringA MultiByteToWideChar MulDiv GetPrivateProfileStringA FreeLibrary

user32

CreateWindowExA EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard GetDC SystemParametersInfoA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer GetDlgItem wsprintfA SetForegroundWindow ShowWindow IsWindow LoadImageA SetWindowLongA SetClipboardData EmptyClipboard OpenClipboard EndPaint PostQuitMessage FindWindowExA SendMessageTimeoutA SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Antitraditional.Emm

SHA256 8dca2eb16c0e35c9ec61fbc48f44264d64c5e9a308b57e0bf7d2aad430d6913d
MD5 c950acbaf828e689d22b0a2e86852464
SHA1 655ff05fd4bbbc4da80330b18f77004ba61fa5cf
SHA512 5051b2deda54202d3c3ec6908e0a1e9a0ed8bbf18164bf2bdb1d366a82c693e9acaba6728de0cf1f35e8922b6358a72e905b44be0981a1247b71628e803546c5
SSDEEP 6144:wAEneuaD16Yu4C3kC0iJniv7KwTZRkZa7Rash6rh7VLA19PbE3TJLLXDYdDC2n:wz616YudFZtaTjla5JL6qTlLTY42n
TLSH
T12A9401B71949C413CA2104FDFAF76C316737460A477EC9ECEA921863FE89847DE12869
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Benzinaftaler.non

SHA256 e7f8dfc8bdb33ab9d60b4675dcdd499af079a5d3f450449411022461ba47a38a
MD5 ce5a4bb6ce42d93d4e28cd40db6ea8c0
SHA1 1ce739b5142948dedecd899fe2311a927717fc88
SHA512 4e5f8bd31bc53b4ab1054e6bf77dc085349b3faa5f8a1b184fd9c8f4b877f423d261cc27de3e9d67991261683e5feffb1a29f2a5a99714d0644270c617bcb8fd
SSDEEP 1536:49F+V5hzYVz0dqjdsuvohqSqWQsvDez9abpqlkhRb+FhWlVVfbaaM12XC+Kkaom5:W
TLSH
T1FFD512CFEDAF976C14181116BB79A51C34256B62D76CF000C7939E8CC2606FE892C94A
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Hygiejne226.txt

SHA256 2791bb99cb704dd8797cfa829905b77b4e8a164823aa13e4af651f5260cbdc56
MD5 786b7b9351d9c1e5a1f711f5fd030c4d
SHA1 f9258120e35358fec1149e5c967fbcc83462c2c3
SHA512 8aa5b5a5a1fd2e7d235c7c18a4dccef596603db9c32cc98417f2ffbcfda3d771021c57f943d6dcebfef81c2f7d82f647218e69217d7b2e53d03db74c45961469
TLSH
T12A019420E92D1AAC1D4472FF34D9BE218EBF9215813A8CF1F4DD138EA11396DC3A8018
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Insteam/Multiparae195.wag

SHA256 300bd4dabd666d650d7376506595df80591785569023462f7622f87b9476c53d
MD5 eaeead794b028ef2ddcd71b385948f38
SHA1 3edbaaf7cda8f4dc023ec354c371f7a06beab5a1
SHA512 f62c25f9c7fe353f3d6fa87a328880a100756db0b1114849bd5a4259eb15eb3d2dc23e127dc1d25cc056a8d205f4141ce624d31d6db54ec9fbf345f0465c2de5
SSDEEP 12288:cjP1SdxtPJ7bf5+nU+joI7oalbeCUTsB9jIoHIvNI1+GpVgR7oemb0fcCWXiwgwG:gEyU
TLSH
T17A46129DC1B4768161BDD6AAF61B87F70F2742502F72CBCD72386B135CC234AD9A5A80
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/cigars.jpg

SHA256 c4699b84981100ef07daa3250f6a0b8b66bef9c7cd0cbce5169830818a6e904f
MD5 db69aa2dfca6a07c84a00b7319d5784b
SHA1 50776a1a7607f9664e53f5553916dd3374972cbb
SHA512 12b1a5cb886918002e5df8f1b160d0275922a9ee2ed898fbd9eff2281a7787dcb6af68e42921869be340d57577adde3dfa6850227ca439754d9950ebe5b6914e
SSDEEP 768:kNFBY+aQ85o1s0sK3EW9hToYAdsq3eGlmyji/Lbi8fAgK:kNfYTQ/L04ToYAaq3eLyjavNfAP
TLSH
T16B03BF5759188A83563A83E6BF034DAD7E113F0DCD457BEF22110EDB3A64A128DDC52B
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/frndernes.jpg

SHA256 acd72e40ae7e72c65f4a63e023bbd20748f4e6e4984bdf16aa50d74936bf49f7
MD5 7bc1351167a8ff94ce93efad3e558b07
SHA1 0899ef093a3398392fdc245cca591c9b5314833b
SHA512 1268a0b6be59ef8e7fa6ef926c6fdfd19b5d72d61c7f9b30421b0cc3ed4ac74ab2a2036f90d440f7ca393381b03f5a65a4889f65cdcebc810c0a39fc4619d99d
SSDEEP 768:9tJ+uqjh5YBkvLR7R/CyB2q4sorZzf8NGTIJ9T3vndz12GyjH1AnMPTWTZ4bu:9tMu+7gkvrdB11IzrTOZlEGKPTEgu
TLSH
T14C33F19D45FC2340A37A5AB1525D1883983F319AAAE3B53F41036432DF9EFF0E92C1A5
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/hable.ini

SHA256 188553762f0ba94f591fb6e71de6c36673acd9511f694299c3aacab200aefabc
MD5 7e1b9e2797b94a8a53cff36f0f37d003
SHA1 92d79b5c052c666643a4bb67e73712b32cac2609
SHA512 82e9e5d6210bfff88e070a307c48a8fd8f6066860f6255fda749dc6c01a441674e7239d471acc7be07d71eae3588b0dee6cf7baa6aba7440f2cb50dfcade6879
TLSH
T109D05B1CA92F4629AFB054B951562EC185682148E8210C55B575174DBE5C0CCC7B571D
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Insteam/Overprovident/honer.jpg

SHA256 bfe6f189c5f098f32ddbf2792ba71f8bfc5871219b3d944a30cb7c2d07537ae1
MD5 79d7e5ebf44c3a994c844ee128e47068
SHA1 3abcace98566257c1f9eb35026084d90e2face91
SHA512 f7adb554d392f44b26c149ac9320f237aeef0781c0af6a83f3f4b4d846c77b56eae9783a4c23dfe10b4b7e7b11857eb9c94b4e77c418ba55987719c4dfb35a49
SSDEEP 768:WEkB0MtS7tiyDRa7jSUHmGkwP7Z/NICX/28:WELijZk6Z/NF28
TLSH
T10EC2E12E55039482A76B0DA4D908033B4698D7CABB47EA235E00D51EDE84F3CA5EFF24
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/lflaske.ini

SHA256 e805258908cf61ec3a6ce1ea397b675cf811bfe10ea42b6f6200a4b3492053b3
MD5 f19043636f1cfd7f2f15753238ef114c
SHA1 98c54fa11bd02abb363c177893e1e296a5c89f6d
SHA512 ead6d1501cb4b0e4365c58af265731e595ba31b09d4e8b5c3080c8bd41f0da9b53e7036c3d31524592fe8d22e214418dfbe88d2c5df5a8be2062dc3358270a8d
TLSH
T18401C521EDA400660C617B715C60948695768D24CE3668B8970EA7C9114B4D0AD74FF6
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Insteam/Overprovident/maadeligstes.jpg

SHA256 e1a6924abebe7eb5017dac3cb92fc08ed3ce97521a0ef5d23a6197d1836eb8e1
MD5 6b634a27018f30e36b466d38453ae1dd
SHA1 2c1b6b925b373d462331e7c8128f37613c992b3f
SHA512 fe6e74b366d9409003492673be265c1e45099f1a5e3041dcaf6abb9aac03a0a2fbdda0b884dd8c18ac42e263c1af26ce6753d974a15eda62d3672685dcb33519
SSDEEP 384:iUVVts0azxHpjAfd8BU45EbszNaNcQvursDF9V7vi/UTaf1hr:iiu0azxHp8d8W4mbs5WctrOEU6
TLSH
T120A2D082575150049735E0B54B5EFE1381809ABB3E648C7A9F00ABAEF1F8D7B06DD1A8
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/maser.jpg

SHA256 b2abaa19a7dadc718e46836beae1f7f67d0dd9dbc3335f970860fae470281f7c
MD5 80b9769581b3005bab1dbd8fa72f64ac
SHA1 cc66277aca286caf9c34d3d59f17ec74fd7643c9
SHA512 79cf2c35d0898c88e81c89e311349d9f7a897cb6d06f75af043d2c980141163d5d127afbf26b634ab596db65294d0724890a181c278c0ef25a3d7f9e065176c7
SSDEEP 768:twRtmRlPr8mKm8AGJUyxQdbZtvABeuVn/N9frpl5DBufJ1oP6hdHWmOQL4wCex:tSgXPYm8AGgbZtJunr/DBuxO6hBWtwR
TLSH
T1E9F2E16366E6A62FDB1D0BEDFA41446B0B70C32FE832363511E369A754319724C0DCAA
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/overentreat.jpg

SHA256 e3a3367451569b48fe9076d3bc8178177f72a0685cf5a7deb8e5cc4e70274beb
MD5 924be56be197155c92c4ba20b937efac
SHA1 df8a395983b1f90a768a6fc5921785c8e1f14b21
SHA512 dc517c73be0b70fe659db2486a70d23b9bff664b199332f9667cb1bc632bfeba666b557270cc74a57e18ca46abcde5639b3a44918b77fed64e2824129eb4631a
SSDEEP 384:r9rwRw2qfqN6OM0igiFuxM1/n+V5TJtyCryoikXl95Om1Tjd2QuH:rCYuM0igiuS1WPTJoAyCl95Om1jd2QO
TLSH
T11192D15365EBEB31C20DC7D6365A3975F74652202CD17FAE23E29E812A00DB3468CC76
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/puzzlepatedness.jpg

SHA256 8e7127bd11253bda7e59581fc89f7357e9ec4bfcb9e6156141a981f31a9df47c
MD5 91ae2472f535ea3f59600aedeac31edb
SHA1 1f1e992945e657bc19860a433e2c365904044ebd
SHA512 f2efee9dc3ce07718016bd64831d8cd1ccbfc3c5dc0ad167e577ee5618f1f3d8ed5594bc08254a3bf8aa116e027fb93bbc479131823c0c917c937b175a6728ab
SSDEEP 96:Rh8EQ0XDQcMPXWqUnv3jgzcSKDfLrPtD3ma/Vl2PaK/DZknzGyRE:L8vU5MeqUbgzLGZD/VMdyE
TLSH
T184D18ED6951667413BA1C5FFE2B03B51C31D0BC93F7CAB74A23048AE8A21DF0A09785B
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/spindleshank.jpg

SHA256 89080cab25e0e9cd72551b402535a2a96bd5772a5783ae3728e37ded909dfebb
MD5 ffced31ac7959252654199219c4834be
SHA1 b41d2c4327c8430d183f9969c3fd6bada2c2e89a
SHA512 1824bc7f27df3a0a0d4d7c6359c2393c68dba02aa1fd019742988b28b8d874435265c35c53eb61ccb46b48cafb2132a3b11036e43c3817d26eae2facd6db1da0
SSDEEP 384:9pCoJUWY/b/K1zNd84csLvE3l+70w2YH2OZX71aHWWMVDfaTmvF7C1rcNBQP8fgm:9plJUBm1zdcUMl+70KWOZX71a2lhyTmr
TLSH
T191B2E1C8B6432374FF132D792B16832F62B6694FBC86A1F8510AD30AD0E4CE541D1BD6
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Insteam/Overprovident/trilliaceae.txt

SHA256 78069e598836a49e224a4cee525e018ca7f24cfca539ab3b8e0e8e34dbda5a46
MD5 3dd1420346f9170694ce0fc9ec15ae4c
SHA1 cc7af232048964e3cadcaa1df99399ea09c064f5
SHA512 9a4583b2d54af280a4dbffd971c8c595c840a2961936261160d4cc93778719d4909255a50168c754b790b4e79af7f92783f85c78ce26cccb717b62181b6ed194
TLSH
T157E0AB42DC1F19158FB99E8578691D4091C4C98E082E40B07DEC1B0BAC02D98832E45E
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Insteam/acheirous.txt

SHA256 4b22710c8019ba277dd26255d053f7111f27735a1b58bb43d0ef79a85687a399
MD5 ec872c0ab495c28702b2f409e1357ba5
SHA1 15640653f9bc127b9f8686e5f9a3f5d40e9a72ab
SHA512 7fb5b7096e458214e5928978e46afb9856af57528ccc5424478776b3613780c74949671f15322ffbd0c7eae33f06cefdcdd70c980a5fd10b1453e5054a1da6b6
TLSH
T1280144E09C7704791CDF2F96BAD12617267BB55049330592B487470F0916A0CA2B4042
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Insteam/akklimatisdur.ini

SHA256 f7453ad089d8bf90d058b23cd989743f931047d7ae9099497779931887af3e32
MD5 2879569542c6e3d68faaa0da44807ec3
SHA1 442349426905c0b0af17faf063777fdb77b7f7c4
SHA512 23106fd683a8ef4ce1861531d773cde39f462284974b710fcef678dc30a77c6241db250eb2fa84219bf1f0f582e5d3f9a7c93abfeb4b0e5ef35f2d974e76573c
TLSH
T150F0EBCDEDF2606007A14BEBB130AA4418A69884D5A68708EB2F038A8681869F37803C
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Insteam/celiadelphus.elv

SHA256 d93902977d55b40c2e87bdfea71d7e58516e98c0eaa6b3e962af5c5045f4b8db
MD5 d36b7c4090a744e6833bebbd2735b1f3
SHA1 54f95a181b6f6b090c88a15bf8cfad4b71505dee
SHA512 fc3c7ff9710c7a60a046142d62ae77de199a928a15d0ba4820795c5d1069bf671c19fe9a2b49306f24f009e83a2fa80616ac89c475c29467aa575a3f8a1fdc10
SSDEEP 768:bqAgB3SrtP14sHsAwYq/aPmCC0cwsL5YJFEL/YS495hlZKRjm5cY2TCL33VvOfzZ:sFx93WJ
TLSH
T11F561397A76C16C1D2D366347F6D9BC38E724D77B0E604904A24A5206F8EF0ACDB9D43
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Lsebgers.Bre

SHA256 4ac783e447712a8001e6abdc47c4e1b2bbc4a990a0af8c0dc60468762cfd89e0
MD5 ca6b30d971f2b79383c80f5c12718e8f
SHA1 3f49b9675ce0d5df8f426436624507e5276b5a5a
SHA512 c20c75bc3b1a8a52061072bbc2e7e0dc60980e04d7a78e96fd2552a1a56f023ae84675dd3599245a539a2219c262310d73c4e43530b7a1b7e8b46ceb49aa2707
SSDEEP 768:gcxPtxqjY9q6/XCN4l64sp9yjcyRfrybdKwKZ9sjthzPCklX8H77cw4zQzEjm:t19qJI1cyjnBPZCDPHYv40zEm
TLSH
T16543D099F73E666CCD5032C49F09842A1F694CFC0562C962D05F96BB21C18993FADBEC
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

60814232e8b491aa42c4d37ec185c738319beb104f65ee579f017a4750c04eea.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

Antitraditional.Emm

Benzinaftaler.non

Insteam/Hygiejne226.txt

Insteam/Multiparae195.wag

Insteam/Overprovident/cigars.jpg

Insteam/Overprovident/frndernes.jpg

Insteam/Overprovident/hable.ini

Insteam/Overprovident/honer.jpg

Insteam/Overprovident/lflaske.ini

Insteam/Overprovident/maadeligstes.jpg

Insteam/Overprovident/maser.jpg

Insteam/Overprovident/overentreat.jpg

Insteam/Overprovident/puzzlepatedness.jpg

Insteam/Overprovident/spindleshank.jpg

Insteam/Overprovident/trilliaceae.txt

Insteam/acheirous.txt

Insteam/akklimatisdur.ini

Insteam/celiadelphus.elv

Lsebgers.Bre