1f699db45e66e2a2d404231be31e51d3a6d390a73beaeac4401de6866397dc4a[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
1f699db45e66e2a2d404231be31e51d3a6d390a73beaeac4401de6866397dc4a.exe

1f699db45e66e2a2d404231be31e51d3a6d390a73beaeac4401de6866397dc4a.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 1f699db45e66e2a2d404231be31e51d3a6d390a73beaeac4401de6866397dc4a
MD5 a16767a43943bc4c2e25d69ca4ca68b7
SHA1 bed104a086f69d9fd7b69f6b7f1797b18a26c862
SHA512 95d97abd292af4426c0ca732ebe5291447af69e99c129e6aed29b3244f0acb9d2f8b4b99bba2fd82eb10130eaf79d56861caa360bf9b5d3ac3dfbc49586890e4
SSDEEP 6144:omGIhCrl0WKxHId8CWoWZGipPIR3oRsu22KqEWriKUofF9a5q56zX:Pm0NxodvEYuu3o82KoriKUC8qE
TLSH
T1DB94CF83FA80D6AAFC3D4875D9A352700B72AEB596854F4353D879123FB22C0753B52E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7f:63:5b:29:49:cc:15:a0:53:1a:d9:4f:37:b7:98:d9:e5:23:d7:c8:de:e5:0b:b0:3b:73:d5:59:27:78:f7:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Compacters,OU=Labilisation Insulinens Perulate\ ,O=Compacters,C=FR,1.2.840.113549.1.9.1=#0c194272616368696765726f75734050757368636172742e486a65

Chains

Aug 6, 2026

CN=Compacters,OU=Labilisation Insulinens Perulate\ ,O=Compacters,C=FR,1.2.840.113549.1.9.1=#0c194272616368696765726f75734050757368636172742e486a65

PE Signature issue

Digest

fb:13:43:0f:3a:98:c6:0d:1d:e0:82:76:c2:c2:13:d3:c7:0d:61:9b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Compacters,OU=Labilisation Insulinens Perulate\ ,O=Compacters,C=FR,1.2.840.113549.1.9.1=#0c194272616368696765726f75734050757368636172742e486a65

Chains

Aug 6, 2026

CN=Compacters,OU=Labilisation Insulinens Perulate\ ,O=Compacters,C=FR,1.2.840.113549.1.9.1=#0c194272616368696765726f75734050757368636172742e486a65

Minor OS version

0

Major OS version

4

Entry point

13199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Endosteal/Buhrstone

SHA256 a9c53bd4084e7273e8440ab824667ce49affe06bfa043425e7ee9ef3c1e80b9d
MD5 b6cfc9e200e03fed4d973698c42eff62
SHA1 19947181d6637cbbea1dba94130309751cbdd49f
SHA512 4f246e29453d65443aa23aa192d61d3773923453186df717b487f5484e5bfdda48161661c32d3d4d75026a88c106d964adb4203afb5d080e80226ae559428431
SSDEEP 3072:JUdwt0Mo2RKHVLkuSAwAEvmA+3tnj3NS7h8PES+fxJTJ28YZjr:J90Z23pAw0AK3Ny5SONQr
TLSH
T1EED3F2159BE02A0CC8647D3672EB3E84D2DDD5235336B08ABD8654FD8E8DE630CBE514
MD5 SHA1 SHA512 SSDEEP TLSH

Endosteal/Fragments209

SHA256 5e651fb8bab99126b30ca254ffa6faedeb1ea7fa22c53b9b15eaf88d8f035a75
MD5 f52d0caa1f7a698b3f5508bd188abbb3
SHA1 eeb66f0f0a08e9c7e811af93f13691b37df64858
SHA512 35a5384bdba661e9e86f5502891624685417030b926f92b92b99d42844118c1b84e888f9693952f04311ab7df1d56a2610779d588d9a5296d4a433c6b486df4c
SSDEEP 1536:m/VklYF9pZOf2Jo6pZkv2ElCI7ADg2t/5t:mklY+OJp6bljAdht
TLSH
T194B3B092DF578CBBDD06D634C46F21E18C647006CB4EA0BD61B3A515C28B3E367649BE
MD5 SHA1 SHA512 SSDEEP TLSH

Endosteal/Spragged/friherrer.top

SHA256 bc7a7694cfa2960e325873f199cf729127d341f5f8e501c908b9e3f3d99a1780
MD5 562212551266d8910717dcb94034c4ed
SHA1 3d7ef02e5714fd9af35a02180358f97c564f3954
SHA512 9714d4e1742b965bfc59773e057460b4f460b06363def01db0bc7fc25affed5d801d38ad3a72a6f066beb56c1636722b6deeaec2790e2ce9fabaee8610387770
SSDEEP 192:KeTsrSdbgk/PvaFx51alj3ZUNUv+0mFFPcVSULW96clAJspg3w+:Bsfknvy12j3sUvAjiA6lj
TLSH
T12CE37E10607EA2D3D831F72F5E71B804FEA0215D69CE5A1815B887DFEE5C22913C8524
MD5 SHA1 SHA512 SSDEEP TLSH

Endosteal/Spragged/kommutativ.bid

SHA256 3d648fbe3d01502afd5f9a50835538253cde7466a5c6e9082c8d08d5751a0e89
MD5 3571a1ced72f05e97c79e69d93d0f642
SHA1 d0a1cc9524bdb1f51f102b3325ed77aa16e31abc
SHA512 2207af5e0a139063c18a00252e828c3314974c14764336257e760de02f36ca0cc6fb5b29ad457a2ba8f4c18acdc4431610a454483adf6c8810ceb11206ab5f1e
SSDEEP 24:xJX6HvvNTPGE0+mf+oQInG2je49GphfoYM1PjuBqqbzhjjBGcC:x6Tulz1yfoVyLz5BGcC
TLSH
T161631C215D35A1079BB3B520C859B7347DEB674362FA8CC8DE075E8501F10CC8A4DD43
MD5 SHA1 SHA512 SSDEEP TLSH

Endosteal/Spragged/reportage.tro

SHA256 f407ab2817125b159ed6fe459a996cec15ca0141de926251a280811b3c80142b
MD5 80565e3507bc21502ab1cb351bec773b
SHA1 d702be8ba79838243e75894f46a0b23cd3ccc68e
SHA512 972542e1096f9ddf60fb68efd107c97307028b7216ef2c9a9ad46db87765ba8113a931fc15fc14edb717738edd23bbefbca3a04f6aa607d2d83b9dc65cd102bc
SSDEEP 48:Hd6P2niSGsU8A7fNRz9ONxE/kffqMiDLgojCFo2vkM75PrEFYqrPzo3rK:HM+nnWl3rLgoSBC9Pzo3G
TLSH
T13C5319182BE72AF10D1A05155290F816426297A0168CD9BEE46577CD81ECA1B7F24226
MD5 SHA1 SHA512 SSDEEP TLSH

Endosteal/Spragged/spermaets.syl

SHA256 4a7f25f2134f7a2e6febf5289b9c7817d875daf7f6d001cc1ba409022f87bfef
MD5 5a96c67cf987717ec6acbfc9f232cd3c
SHA1 3cdfaa592b4d1b3fa6ad2fae008ace5b1e5ebba0
SHA512 ba853c8d3296902888b83b98e79a7265406f75fbdde49bc298f19d13474244cbc9a8878d5500292b60ea3bb24bda45a730f77102891f362b3b3a96a95a4bac30
SSDEEP 96:Wotyb/5JnTtIW68vSkcc76er/BGjtVX2zN:WoEbvnTOW6fNE6a/BGxVX2zN
TLSH
T158A35D1E62287A84B8310AC5000752895D96B150CCBFD1E4B38E9F2BEF73E97218E274
MD5 SHA1 SHA512 SSDEEP TLSH

Endosteal/Spragged/unsharply.pos

SHA256 5fc5bb4302e39698f6c0794041ff2d6d695e45533ae7214c87d2c4c8993bf3f0
MD5 619dbe3677fe84d57252d9b030bc5407
SHA1 d62fc1b0c7c63fd805667cc42aba8af8a264a279
SHA512 547cca26f1c53acd6dd0f1ea50bcd6a858680134740aa4ac6efbe42fa7fc02b6a1726446e5e3c97c4b2a53f8b50a592a6ee380a4346f6f9b5eef6b4c04f7f1b5
SSDEEP 96:2371+VBH/YuojEm2t7Hy1a22UoQPElTEfDsczbLb8e/q3r:23g0GlO7zpQyE
TLSH
T1F5C34AE3C683B036F588157E8247DA7B588AD78FEB88EB650A6B66526A54E400FD1402
MD5 SHA1 SHA512 SSDEEP TLSH

Endosteal/citharoedic.fej

SHA256 a12bbe461500124cb57abd8269782d01e99ff7b9a1cfff94bffe6151987cd4ad
MD5 33e88b2adcc23edbd5aedcde1f864560
SHA1 9c25c1497d5dfb736655ee4b84a2f1ce8ae83d9d
SHA512 c05795c1e9a00165f5419bbc8cefcdc978f32e0c7d32a4db484481c347e23a06c6cccd1f989766e9ca66602856057b329d5ab12709c6aab8b20a27e9d01ed180
SSDEEP 96:T4oNedzW0PauOAKS/k2DTVm/Q9AbJChkAE:T4oNe1W0Paufs2s/DbJChkAE
TLSH
T1EBB33B783137757D79AA0F2A9FF908F4A725C834D5C41A2A16D1BB478452CB262A0D64
MD5 SHA1 SHA512 SSDEEP TLSH

1f699db45e66e2a2d404231be31e51d3a6d390a73beaeac4401de6866397dc4a.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Endosteal/Buhrstone

Endosteal/Fragments209

Endosteal/Spragged/friherrer.top

Endosteal/Spragged/kommutativ.bid

Endosteal/Spragged/reportage.tro

Endosteal/Spragged/spermaets.syl

Endosteal/Spragged/unsharply.pos

Endosteal/citharoedic.fej

Sharing

General

Malware Config

Signatures

File Explorer

1f699db45e66e2a2d404231be31e51d3a6d390a73beaeac4401de6866397dc4a.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Endosteal/Buhrstone

Endosteal/Fragments209

Endosteal/Spragged/friherrer.top

Endosteal/Spragged/kommutativ.bid

Endosteal/Spragged/reportage.tro

Endosteal/Spragged/spermaets.syl

Endosteal/Spragged/unsharply.pos

Endosteal/citharoedic.fej