b3fb616de3993830d09c675bca2c146618abd5fbf8cd564702642d2eeb8aef10[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b3fb616de3993830d09c675bca2c146618abd5fbf8cd564702642d2eeb8aef10.exe
Size 1.3MB
Sample260801-jpblbsff96
SHA256 b3fb616de3993830d09c675bca2c146618abd5fbf8cd564702642d2eeb8aef10
MD5 65c4a63f6ba13e25a364557efc811621
SHA1 8110bbef9a6412e9ef951b8dad15e45f2b703140
SHA512 0b11dc5a91a4d5ef2b63d4b31655608bf168b2cd05c8a642d3776b54f63f6b156379f8891678773ee64590c8e0a5695fe0d4e8c5a40b381c357762012bbeec99
SSDEEP 24576:uZbqxGFMhCGa7cQPUVN8EUehu7fIg83oD1dEUu28KkzFu7biF/z:+bqxGFMhCGa7cQOWEUiEMXLFgbid
TLSH
T1D555E0157B598D0EC2A36B798E58F37653648FCD3A16830296F1CCB7B9ACE87AD405C0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
b3fb616de3993830d09c675bca2c146618abd5fbf8cd564702642d2eeb8aef10.exe

File Explorer

b3fb616de3993830d09c675bca2c146618abd5fbf8cd564702642d2eeb8aef10.exe

.exe 1.3MB
Ndlgne.Hre

369KB
Yod.Kat

52KB
discontiguous.alk

783KB
genfortl.kom

922KB
leucocythaemia.lob

940KB
teknonom.txt

258B

b3fb616de3993830d09c675bca2c146618abd5fbf8cd564702642d2eeb8aef10.exe

IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
SHA256 b3fb616de3993830d09c675bca2c146618abd5fbf8cd564702642d2eeb8aef10
MD5 65c4a63f6ba13e25a364557efc811621
SHA1 8110bbef9a6412e9ef951b8dad15e45f2b703140
SHA512 0b11dc5a91a4d5ef2b63d4b31655608bf168b2cd05c8a642d3776b54f63f6b156379f8891678773ee64590c8e0a5695fe0d4e8c5a40b381c357762012bbeec99
SSDEEP 24576:uZbqxGFMhCGa7cQPUVN8EUehu7fIg83oD1dEUu28KkzFu7biF/z:+bqxGFMhCGa7cQOWEUiEMXLFgbid
TLSH
T1D555E0157B598D0EC2A36B798E58F37653648FCD3A16830296F1CCB7B9ACE87AD405C0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

76:84:bc:e4:13:85:7a:c4:c6:49:1c:75:2f:90:35:23:24:40:c3:09:87:04:fe:97:a4:80:40:ed:cf:12:0b:fa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Telefonabonnenter Rllikes\ ,O=Daleres,L=Shere,ST=England,C=GB

Chains

Jul 31, 2026

CN=Telefonabonnenter Rllikes\ ,O=Daleres,L=Shere,ST=England,C=GB

Minor OS version

Major OS version

Entry point

12799

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathW SetFileTime CloseHandle GetShortPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError GetFullPathNameW CreateDirectoryW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW SetFileAttributesW ExpandEnvironmentStringsW LoadLibraryW lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW lstrcpyA lstrcpyW lstrcatW GetSystemDirectoryW GetVersion GetProcAddress LoadLibraryA GetModuleHandleA GetModuleHandleW lstrcmpiW lstrcmpW WaitForSingleObject GlobalFree GlobalAlloc LoadLibraryExW GetExitCodeProcess FreeLibrary WritePrivateProfileStringW SetErrorMode GetCommandLineW GetPrivateProfileStringW FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar WriteFile lstrlenA WideCharToMultiByte

user32

EndDialog ScreenToClient GetWindowRect RegisterClassW EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData wsprintfW CreateWindowExW SystemParametersInfoW AppendMenuW CreatePopupMenu GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage GetDC SetWindowLongW LoadImageW SendMessageTimeoutW FindWindowExW EmptyClipboard OpenClipboard TrackPopupMenu EndPaint ShowWindow GetDlgItem IsWindow SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegCloseKey RegOpenKeyExW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Sharing

General

Malware Config

Signatures

File Explorer

b3fb616de3993830d09c675bca2c146618abd5fbf8cd564702642d2eeb8aef10.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

Ndlgne.Hre

Yod.Kat

discontiguous.alk

genfortl.kom

leucocythaemia.lob

teknonom.txt