lTMp2uH[.]com | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
lTMp2uH.com
Size 38.7MB
Sample260808-cx76yabb88
SHA256 2ecc6ecbd2cf5eb8e21271d18e21d16173c00ec8bfc713fc2f75814d9b9aa4f7
MD5 d68493081d9b1da644d49cc0afa2a0a7
SHA1 b75dc8252aec51eb0c7fe4f9aa0ccb159215ebb0
SHA512 5b69e558aa07f1d8dea2e4aa714edb433af78d08580e5dcdeafbe3c4bc9fd3924851edcbb23ee314f42b62ab23df57a7a42a181301d7528262d32e50a1e254b3
SSDEEP 786432:aO7gf5AC8smFnFVD3GDP1axs8/735RLW2cenKM3lxaBtx7FR3abZyA:aO7S8zihaa8/rGTolmFA
TLSH
T17E97239578D191EDD756CA31D3862AFCE09A389A1E76942F7FC608013631D82CEE2D37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lTMp2uH.com

File Explorer

lTMp2uH.com

.exe 38.7MB

lTMp2uH.com

IMPHASH 41c6d7d1130ab3f6b6348a13f985439c
SHA256 2ecc6ecbd2cf5eb8e21271d18e21d16173c00ec8bfc713fc2f75814d9b9aa4f7
MD5 d68493081d9b1da644d49cc0afa2a0a7
SHA1 b75dc8252aec51eb0c7fe4f9aa0ccb159215ebb0
SHA512 5b69e558aa07f1d8dea2e4aa714edb433af78d08580e5dcdeafbe3c4bc9fd3924851edcbb23ee314f42b62ab23df57a7a42a181301d7528262d32e50a1e254b3
SSDEEP 786432:aO7gf5AC8smFnFVD3GDP1axs8/735RLW2cenKM3lxaBtx7FR3abZyA:aO7S8zihaa8/rGTolmFA
TLSH
T17E97239578D191EDD756CA31D3862AFCE09A389A1E76942F7FC608013631D82CEE2D37
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71269395

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wininet

InternetCloseHandle

crypt32

CertOpenStore

advapi32

RegQueryInfoKeyW

user32

GetWindowThreadProcessId

bcrypt

BCryptGenRandom

kernel32

AreFileApisANSI

gdi32

CreateCompatibleDC

shell32

ShellExecuteA

ole32

CoTaskMemFree

oleaut32

SysAllocString

msvcp140

_Wcsxfrm

ntdll

NtQueryInformationThread

netapi32

NetApiBufferFree

sfc

SRSetRestorePointW

vcruntime140

__CxxFrameHandler3

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-runtime-l1-1-0

_errno

api-ms-win-crt-string-l1-1-0

isprint

api-ms-win-crt-convert-l1-1-0

mbstowcs_s

api-ms-win-crt-filesystem-l1-1-0

_wremove

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

log

api-ms-win-crt-conio-l1-1-0

_getch

ws2_32

ioctlsocket

wintrust

WinVerifyTrust

tbs

Tbsi_GetDeviceInfo

setupapi

SetupDiGetClassDevsW

cfgmgr32

CM_Set_DevNode_PropertyW

Name

.text

Size

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

907KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eac0

Size

Virtual Size

30.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.eac1

Size

1024B

Virtual Size

584B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eac2

Size

38.7MB

Virtual Size

38.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

lTMp2uH.com

wininet

crypt32

advapi32

user32

bcrypt

kernel32

gdi32

shell32

ole32

oleaut32

msvcp140

ntdll

netapi32

sfc

vcruntime140

vcruntime140_1

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-conio-l1-1-0

ws2_32

wintrust

tbs

setupapi

cfgmgr32

generic