dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980[.]exe

resource
dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980.exe
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980.exe

IMPHASH 9a16e282eba7cc710070c0586c947693
SHA256 dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980
MD5 828855c9ca1b300541e581ab41cc40d6
SHA1 909ee047f4df7affaee0e911efc49306c1652b41
SHA512 c462e3f17045b0642e2752971b21a281f4574b98c220a50d87d06da4334d145881218c5b15484efdb8454625076ad3153accf37e69ded8ada30631acd1156291
SSDEEP 24576:K+/0ARK/TWLGCtES37Za5DE5rmYGOqzSF:d8P/T1wESFKQr/G5m
TLSH
T12635F1D4E768C890F01A44B9E323D9785E74AC119DACE9AB95F07C2774FBA83641DC0B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13331

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueA RegEnumKeyA RegQueryValueExA RegSetValueExA RegCloseKey RegDeleteValueA RegDeleteKeyA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegOpenKeyExA RegCreateKeyExA

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA ShellExecuteExA

ole32

OleUninitialize OleInitialize IIDFromString CoCreateInstance CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

SetDlgItemTextA GetSystemMetrics CreatePopupMenu AppendMenuA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcA GetMessagePos CheckDlgButton LoadCursorA SetCursor GetSysColor SetWindowPos GetWindowLongA IsWindowEnabled SetClassLongA GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetDlgItemTextA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint MessageBoxIndirectA CharPrevA PeekMessageA GetClassInfoA DispatchMessageA TrackPopupMenu

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor

kernel32

CreateFileA GetTempFileNameA ReadFile RemoveDirectoryA CreateProcessA CreateDirectoryA CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceA lstrcpynA SetErrorMode GetVersionExA lstrlenA GetCommandLineA GetTempPathA GetWindowsDirectoryA SetEnvironmentVariableA WriteFile CopyFileA GetCurrentProcess GetModuleFileNameA GetLastError GetFileSize GetTickCount Sleep SetFileAttributesA GetFileAttributesA SetCurrentDirectoryA MoveFileA GetFullPathNameA GetShortPathNameA SearchPathA CompareFileTime SetFileTime CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc GetModuleHandleA LoadLibraryExA FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA MulDiv lstrcpyA MoveFileExA lstrcatA WideCharToMultiByte GetSystemDirectoryA GetProcAddress GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/System.dll

IMPHASH 240ca92ecc1c291801c451c447e16c12
SHA256 a44ca08afb3f6bafd76aa35c259f3d599fe34f6f49ea5118626c1c1a540b0f03
MD5 81e268e27dbbcadbf116b5a9402195ab
SHA1 bd2b701b2e5e279786e179bceee2dc132a2afc37
SHA512 784115c69df4a6f180efb4d48cf5c6e8c2393b8ce9aa664f192abf5a260984880c668dd0f93564126d2fc718130570c4f6224d1373d73bcb8343f04f6ede25de
SSDEEP 192:VFiQJ77pJp17C8F1A5xjGNxrgFOgb7lrT/d93:97pJp48F2exrg5F/d
TLSH
T10C424B1583618EF3F5961E3C00667E2F2B79BE3416F104A39FE34481AD9A1CF99B5392
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10673

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH cfc8bb9e11188db414351d2620c98f39
SHA256 7853be9190489ba84dae8232e9a967cec02d941732cb4137bc9ae6a392e89fb8
MD5 3fbd78c889fa40a2e5567b980c57b7db
SHA1 303564bfa6fd5ab7a65d35ae1cd14a05643b6b5d
SHA512 95ccd599cdacb1128aa35694aa5428f12f50a20d95bb500e9b180b3ab322b1870ae301f77f7ca0e8674c78742a1eb5c82ba3cee05c67d3d961a695563c8c1514
SSDEEP 96:oX7lf7AR1VhrfzBik0cxM2DjDf3GEkniJnifvcx418qndYv0PLE:oXl7wrLBn0REc0JxedO0PLE
TLSH
T1371207135A0044B3D9E2223A31AA2F2ED73C932490527D02C777DE5A2BB43166D3E351
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7513

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Archbishoprics109.cik

SHA256 46be5c27300bd19188a13d2694c1b1a96b0a4b0eed1f2cff0c8af5126cdb0436
MD5 f2d15952d0c064ed2342f13e9d068372
SHA1 d0053b32eedddb722bea2330757fad31ed6092e8
SHA512 86bfe61bdaea41b95c4ad896c96ef1f0f0dbc3fcb7ee8e26d85ac89e6c7d3c5e854146d18113952d4c09f51d3019b492a07656d27415ad40a1ef863c80d7b80a
SSDEEP 384:/a0kmNVblCJ+U4TFosaZbPp4rTduaeJ8Eo:/a0NVblI4posaZbPp4rTgaeJM
TLSH
T1E964C0C3B551953739AC90574E5E1EF8F4C93BBC74A52AB800A675C4E83E318E293378
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Billedgallerierne.kit

SHA256 e5b76f4d0cf7029c895d2ac6711efcecfdfd7433c94c3771c2a038e81665f943
MD5 3234e662a0dd1914735789c43ce5bf45
SHA1 1e3ee60e4e36bee1f4abc5907b77f1d9ce4f30a4
SHA512 350d5381bb310fc773c3685081d8159247a7afb618c45c6c61c1ebe71f804d60abdc91831a657147357e73990d0beb4c439a26bcf7371ab0f1e801319784e7e3
SSDEEP 768:lQ5lp6PIyHqj9K7ZZwceRN9ZTWNfy5+7hqTBY2:lkp6AyHqc7DwcCrMBy5+7hqTBY2
TLSH
T15384CFC0C5BC6DC74897321EB38002553D9550A166C16A2E32DF45FF6A8CA397A948FF
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Booties.eks

SHA256 0f2b20fcef416bea3e4a4cef0dae7685af68ee359fbf1682c91a47a6df89b3c1
MD5 d826ec42d5f608526581abd1975207fa
SHA1 c05a55c4e85330128f02f083e051d84d92f8d9dc
SHA512 7a1f79e69a18d8513576eff12ec082dfe2c58b506be7689c386c08b71811463c8b90043c3f5cd98399a3a1bee2b7ebe35cbd6426c2e687993eca9a213c9c5d19
SSDEEP 768:7VfJhRh5Af8TGLvVmIf+jNJSc52qg4invldjyQD5htUuapJzM01SMxhLzcOD1lq6:t/
TLSH
T1A1D4E062C47053CA74AC3E23276106CA06B9DC590C3FEBD119A9F51EFCA07D026A16E6
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Fjordmundinger156.Arr

SHA256 d0fcf0ad37df09c71635c77738c773e6e04adcc4d398f11a7517177b76974268
MD5 884e059ea0a9045396f377a484a49ef9
SHA1 3790daea68caeabe4a1091caca7096d8107813c6
SHA512 35c240d70ea8054f1a9220746b7493e54b282b0417b569c7569937a64027f1623212f8ee0f79c382b1f3fba9e9ff79d65173641ad21f149dc3066d6c10a8199b
SSDEEP 384:k5QVHlpGOevt52gveXzNNRzKRolPhm1FQOcHNglW9:hVFXgvM1ni1F+HNj
TLSH
T1DCA28D87C7B20DFED801E934C75B32968BACE011972ED9ADA03B9D2481935D16B24B99
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Mannishness11.rom

SHA256 fcc39bb546a6d91b3982eaae05d484dd88c9fce80ec39ed55ab64659c3fe8ac5
MD5 e25526529dcaddc4014c158493ee2c54
SHA1 c259759154748a9727b18847b7386e4070e5d5cf
SHA512 b904d93dc95c41be362c17bddbd848c812160b8599f51aa61aebb785b02f584ef8a3cc11ca32a81406a553f163598eefe6d44c6d163b47290bb1b029b473557c
SSDEEP 192:mbHxwQwflB0/StiQFDzu2U+dsoMJaNQpjArWZfz/bbCYU9O9n9zi7Ju2OgVuNDSx:9x
TLSH
T19CE4D06A498D2141769F4337ED6BAB7D0E90032B17D58300D1B7F98D04AA40EC9E95FB
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Medlidenheden.jpg

SHA256 5de0d75685b7136d5ff71c818d5cdebbb5af99e12bfeef3dc0ac832f1b6cfbe3
MD5 f229abbbbfa82cf6563bb6308147de4c
SHA1 e11f15e9aef672fe33799106738f3cc8531c9d48
SHA512 ff7b22d4254caaf595f26b5815881c63a8ce8442a8067765e3e9f473fefc860824eb583f28cf5bb523b038473bd029345a98d5679150cc2584cf175669229f66
SSDEEP 768:y2qstfNLecpcGd44DXBhUp1ZIXBFj3SLg6QH8QFW+XLufo1rCb:y2Df8GaM72MP3SLCDCfo1Cb
TLSH
T1F213F1F03E2096DA42254D2D1D0B5AD9B301B82A5FE29D3A53F6D17C84BBDB7904FC98
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Miljberedskaberne.drn

SHA256 c59339dd1c08c1388801499f674a6abbab67c0735f55ec876d2aab740cff0f78
MD5 81c1680a6811d5b2aef26d3b79db6b97
SHA1 629c9578969617ab677310c6b0aa7e7dd2a695ac
SHA512 f6afecef17fb8cbbf4856f9e0dc1a77650f8237f84101a57e52bbaaed3f1270bc4e1764594b0e64247b7bfc60f941b4467b1e9c799eb40809dcb863d22288d84
SSDEEP 192:VjMA7/ixMHfT9lMJCWEdl3oCrG/PFwRVeIgS:VjMg/ixMr9eJCBl3oUUCVeZS
TLSH
T13A24AFD5743DB5BD8F9608F874C8E816719663A0650F608242E76D18311AB2D341CFEF
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Nonspinosely.kys

SHA256 071f097c712f200891b05d8abb7a0121ec944094f609d2907f5f56ce0a9da723
MD5 74c12cbff6e3bc31c2c656f96ec89512
SHA1 3ba0afc28100e227a7df81bfe9df07ac1d2cd6cc
SHA512 05f62fc56664a7e05a3c5746db28263d4decef7fbe470a78250a5c92d0fe61945b3d1695ce3489df4a3cb61a6de47c2c79fee7af5e1d858b93c9f74d27dee0a0
SSDEEP 768:mHgikNy96MmkZKEWzHT9/ajoMwWZE7Uz5mlgh6Wriv8jog4jy:a
TLSH
T128E4E02ABCB08F9D7EEE94E4B367D0577AAE5416E331C7113D28B08A31725DC6042DA7
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Oversigtsskrmes.jpg

SHA256 43108aaea6ecbfc250ad488b7f1cccead61d81303ad1325958e4e1f2848be491
MD5 734c9099ec8c372e911c1be5f6305015
SHA1 e0f9a58ae67e802359c13d413a364a9052674001
SHA512 62f32085eb239303dcd2bf4de85cc664685ae7155aa4e715879b82a9df82c3507a8968c60f11524ee0bafc587f851ff17c8b8b51a60f6e26af2897e9ff425057
SSDEEP 384:3hEz5C+bHH3QPi16vIpDXhjSRdHoQPcuK1+B2OlSKrhQDRxzuPGzIFGD9kX:36kiAKQv4DXszwl43rqrjzsF
TLSH
T185B28E0308094F96B61A42F46F074EEC6B5A7D4DBC8639BE292B5EC7AE506710D1C93E
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Stitches.ams

SHA256 e2023b0c9f0cf85fb4750a36453ba9b83b53de0b9cc092a0e719b6861d4d951c
MD5 4d15548a98b8c93f9575f75c25023f86
SHA1 e3f237fb13ced621a6e39692b0bc3a1ea1ffa639
SHA512 6ffc23365cc32dab39a994a54ab79a8a2753f77256ec1a9f5506af79616d763ff811bcfd146ee35f6d95a81b1a214f9bcad4bcabe45b30040d12e4ba05777051
SSDEEP 24:CXL/TdqyQOnfUJBAjNypY93AY+oJl0eUa+lzjhfr4o7QvO1VKo:W5qydfYAwpY9AYElXx/7Qo/
TLSH
T1C3E2E9BE22C9E41FBF944C84F32A6F0344120FD80C1B79262659E9733241EE9F4B91E2
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Strudsemaverne.Afl

SHA256 b629d72fe2b2944b3082c8aa8cc19f71b5f74e8ace8b422577e28e9e651bca5d
MD5 55661b1aa6dc9c39e24d797859675a20
SHA1 3f631abae78f9e02c0d53fe516e93f2f58470d97
SHA512 ea7961af5c91183c00088b7831271935dcc3f184584fa948515940c178535f89a583782b6389fd486d12e1233eaede0ac0e8418f20f8a7bfafe842a55b85e2ed
SSDEEP 6144:QoazUFFDLcpVb4I7bNyfDIQjedvSBWHkjFUk8uUFir:1FDs94I7bNyUgiqw2Ulun
TLSH
T13154F1A85AB9559CDA0E8736E9B5E13EFCC0AE0EE7C7644DFB508405D039810D1BD2FA
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Unharmfully.for

SHA256 26414612b14fc7f45f97540b7802e70570e257d1cfafed229b923682578455db
MD5 8d05eb068a93dffc170e34af59e09439
SHA1 2319347c51fcea7025663ea15fe49b4b8bb99b2e
SHA512 88aa04a7158037bb795c9f7c1fe6f7c4667230d476847eff959a9440408c01189ecf9e898e6430a8ed6cb5abe7e707208daf98bfb13aaa8e5a8215cfe3ee883f
SSDEEP 192:GAI56q6tyfXWPi/jgw70L7ADEb6/Yw70AmkvWVJQZ:GAI56qtiK0woL7QEb4v7Z
TLSH
T13E94D0E6A7610F729ED4AB70CC91C48AB18A3C57329793150203B3F2337B636467E5C5
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

alstonite.hyr

SHA256 46c86fa68a78ba5e6e6c747ed06c3024ac5025a3a006052f650fa545ac217282
MD5 636c9b288b9d489cc9860ae7115afd57
SHA1 77c2da32e0c4931b035aa2a4e0b9db372d89b2be
SHA512 229b00f80c7459cbb77bfcdc4cb6f1de8c9641582a74e2f0b3725b03780be08c8bc664d64ad4f86e35b6e2e1eadff3c3ace7726b9e0a6233f58a5d2d06bcad57
SSDEEP 768:UdN8OdHONEVFu8Dr4j/IO0S36hnYj9jtwYDhZCIuGb:Ujf68DrS0S36ijtnfJB
TLSH
T1C654BE86223C234C051A17967BFC1FA9DB693587804B27E2A4AD617DC043A3AA330F26
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/landspout.bri

SHA256 3b8cb45ead28d3ca3595af5b7ceef23551f170a9661ba144e2362190f77404ae
MD5 2e9c0716be9920944d98ef0b95bebe18
SHA1 c163b307d863913002ce1606fd8f3290670ea117
SHA512 6da0b5d739935675dc2d7578280d7c74cd372dc42989c2f2f75ae0118cf87c7742b4df22d9ae314f28f4dbbd94db92c1ae42b6ff37cae2b5deffbfd80e0816a1
SSDEEP 192:WFY3Q74VT1WHQiic50rlnK1dgdzN5CyPzd16ZfrTicwsrn:WFYA7eTYQIYKmzTCc169P9r
TLSH
T14824AE4053504FB9AD3955019AFBF07750DEFC0B9A18786BA3A0914827F1DC21B9BE92
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/loofa.hou

SHA256 f2203c6fc70bbceb7fd80486a107b8d6e7b30701a6229c1f6b9cdd8fcb4d962c
MD5 71bda5091c0f86faa006e0f92a6536b1
SHA1 9cec847ee29819fd4a4216a0b322d3572877b893
SHA512 cda49132bcb2a0697d193eb088d0b8eb9bf23ffc69b1f34947025dac11c5e7ee63910835635132dd4d4dd16569d03aada70c06ecff1bf3c0f7220ab4894cda81
SSDEEP 1536:+Alw+qrEiEjB5/0D0XAEpa2wf+9yEZodRJQ/M:m
TLSH
T1A405D02106CC6B3E46339755E02A045290C7EE1B6F5EF25FB96F923E1468261F271F28
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/metazoal.aff

SHA256 fd91824f01903b154a0535bcbbff4bf4c4646927980a303fed38f8270561b2ce
MD5 7eb62f5c6e9b76506b3829ecb3ac9e83
SHA1 2baf5f1179cfa372059449e605f185d00ba78936
SHA512 2b55a5f8d34b6f8c2cc824da2af9f65fb2b76e6b869b24d82faaf9165127e1764e4b607b2d60bc2676c95267772177358338a7de616ff58863adb03189078f5f
SSDEEP 48:29j7/yGEq02lVyxuk+g0ZzmzT8G29nkXGXh9Kdw89liNCJiM/GB9glMU8/DTQ5os:Cj7xQqzqT8G2rqdYE9UTN+2b/4lga
TLSH
T155935D4C9FBF4DB26875DA8C13A83D8E126515092F5DA0EB82BD52B1473104A5073C7B
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/nasonite.txt

SHA256 c9d59904ae6bebcedd04b0a206968e85f6ef80799141b12add63716c319751eb
MD5 75f1858ce285afc846865818ab1f354c
SHA1 7c12b6b9102b33fe9fbd340cd9a9cf6348dc1089
SHA512 5a973e88fe67d3baabd17a7db89846c43a394d36f872a99d33c220676de3763c2552ea020cb325a2c394d578403c83c803c28517ca2623166ee3dba4a2e8b5fc
TLSH
T1E2E0C0C88ACFB12056EA7943DD212E90156C4022A28B42587225074D110015CF22015C
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/navngivendes.jpg

SHA256 e63b4dc6b7e68a0b4a1798a3c51f87cebf53b475561108d88c4b68b8fc5c5c16
MD5 db95df49b756b215d6e0e09758f6b806
SHA1 083c504a907ed566ad8e3e75c2dc4f868573bb18
SHA512 ec51b80cbd25ab9bb0d0a9d7d0d661510c09a2932a0f51bc88e0b984d3c4cc76ca01749ddf7de884a2b5568cdd35ebc617958571b98e0c6e59e423e5726b3384
TLSH
T10C813A042F28A1171BE360F3ED28091386A25EC27912FF3A1553A197D592D7D87D9B34
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/nonmaritime.ren

SHA256 b9e7f6a1b07b8bae80e7789028fdf2ac605fbf2b5532fce59af80e69bfeb6e23
MD5 cdf36b82031cd675f51131f5557fe299
SHA1 fbdb8dd790ac7767bfeb77eef33102ca4531f52a
SHA512 623229ddf0df9ed3a5315e71088f29f9fc367c97b19198171c4fa39db28b705a2ae74039fc01f6e9e46e97e3c42ce99ba2772ebb28531eed6305921f48f6e933
SSDEEP 768:5xkal2CYuR2M8uSyDYAuSpqNSwLjimrNicuSdrN68Et2eC+flMcVZK66B:5KanYuR2aSximRnuSdrc8EY+uc7a
TLSH
T1EB05F1257D75B876218A07C0C8ACCB84DD80AC7C49E392AC63D979FD735F3008E9E65A
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/overrend.und

SHA256 07506eef4feb6bc2cf8a1c01285d06cd51fea45bb5ef904508cb2ddc344b09b7
MD5 965d124a672a8134de632fc25594d180
SHA1 43ffff13e9382d9a4126d17e989fc7e73bb42873
SHA512 b5a866fc0ad52b341a86223ab09abb11577368cd1b16208074cd756e3ffbad9d89cac1a7a999e321b078f03da9b19fe98e1eb7b72a9d4eb579c5667a0b6ae4c4
SSDEEP 48:Ehoe/SvoX6GZY/uC7B94VBVgnmU2GRIsZ6iS:M8voqMYmAC0mfGbdS
TLSH
T16313C87DBC84D5D9E912A01D0DD64BBF1D12EE3A7C807511B1F651606071707BA02773
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/reformandum.jet

SHA256 fbe3d0d274b888f8315e297ebd99c4bbcb8660c24597e720cce111875f6017bb
MD5 f31dbc3b0c265a8a0830f5d2ba79389b
SHA1 f4c614935047f5714d3e43cedae205064cd4f1ca
SHA512 136eaf0eb4321e524c014f1c49e24776cb058591d92f2cf7e1a612b57e27cef88892107f61c6211175f0541a06fbf0a502bda8a65d59bf5ea738d83e40063a3a
SSDEEP 384:+tmbxxgnv50hoSsVkw6Z415QAK4cHUuMj:fbxU55STlFdMj
TLSH
T1DD64AE7427C54F8EABEBED5028D0675C18B3752118FE92DA1888AB85341F19CC0DAE3E
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/slidstyrken.cou

SHA256 e73b06cc85810d1881420765f91de9808b553ff288f1b4645578eb885d2381c7
MD5 c17364eacd5366689e2ba6423115aa82
SHA1 af4f153136068a5945914baac96f4ba2316f9f23
SHA512 2d12f8382f072465a76c46109da2b319914b2c2ed32f2278f15ff58cf769b84f75ac15df2fd5254ab2faf180b8b4205625a2c53cebcb9638d52bec33c7a1a5ea
SSDEEP 768:rzCbyTCMe1NQ+VfmZCh3vrgDplaoeaW/zBSa5i7eFYRzA4:d
TLSH
T10BC4D068DA6278C6656CFF2C0CEF95D48F61A282AE5225CA671FCF959300E18BC90113
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/stddmpet.lat

SHA256 8e297234ac752680d91195aa4734c540d7cd45fa9e6e931f418431c936dd0e00
MD5 c6380d8e339009d12de57edd7e314d3e
SHA1 681eaf086a42971de6cae181ec1e9c27932fad0e
SHA512 1504901dc28ca5f8837e3964499c31544fad985e1d356a72da290bcee46a3686e4765496bde5e30337e9258dfe5b49e33507a8d38fe7df183ef13a6dea408452
SSDEEP 384:N/MHJ0yULlmSh/HEMGIIna7pLUYDRj734pBwAyn2LkzlZqx8nNCcs:N/Mp0yalmSEMGINNV7ei3YyqKCX
TLSH
T1CCE4D007AA37D8CB35EAE7D6480C88F05760B99D74DB7275BCD4B92AB315AC480205AE
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/strikkede.bed

SHA256 b63f7f00a904ae08b8cd9b754b896d4b95dfe536f1192eb6882c01f3f5d187e7
MD5 872cc81ed87c032ffa6d4ff6812a57e0
SHA1 7cca2d0fe72b50a085377a4b9d63ab01fc4d8c6e
SHA512 f56b1e81be70713cec55a805957bed08a54c6de7b6ce91f7086ceb6f3d2cd9dd76165dbfec8c4ac022b876c259a07a7cf6949e80ebb0d09125884646c39e0aec
SSDEEP 384:UbCM5IfBP6CYkfh5Xoo9QMHg/kgWJHCf4Brc1y5b:Ubi1fTpQS3gEfZ5b
TLSH
T1DFB4D15A7EB6071041FF7878E9177B69CE7B6AA8B9870A19E407E4678C53E034228352
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/transportformaalets.tri

SHA256 69012064eaaf40a18fc673de9cb0ea4ccfcfa91c9de80260583cceb87ba9d962
MD5 f666a3078e2614ba94be291028b04c7a
SHA1 b5bdbcf6548e105ef09548ed84f406c63ca96225
SHA512 c17eb40dc5e60a1417eec52cc29d23d5637fa4604780c5b7d7eb89805a7ce02c80484abb42cb8693d972dd62e27c97d70edea44c183f582935e96c8a8266e6bd
SSDEEP 48:0gd1KGQIG2M5CepmrH2wgAk5IjASLRP3r9xsQzqL:0gd1hM5Ce0hgrSj7FP3rpzqL
TLSH
T10BF20C3A77D9F7204F8BF8281A0BFAE7042111430C61308808362131F892C1D886DFFA
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/tsedes.fil

SHA256 0f4866cdf4c693ca07c77574f70ad2a5dc3c330ee1a694c30382ab26ec7e6746
MD5 3fa2f473bde6a143c3e031063b43c1da
SHA1 88c61d6ed1674666f24d69cb7a9d538abd2d94cb
SHA512 fa6de63dcb1ff0afd543255726599d51a3c2aa6847235a5128c5e875b6066c3729afb11e249fe97306dea65184efd77a903ca711b13361cfc924a173ab7517cb
SSDEEP 768:gGY6u1CTb3Tppp6Irlu1zrlcQFxvjoLIiVbR7W3kSP833rkE:hY43TpblKPl7oVGpP8Hr
TLSH
T1D9D4C0E6294D7CA40F2278A462D37D0E3FC3745BDA39AD5A61E31D2E4914FA28C55307
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/Skrdderkridtets/udkommandoernes.pro

SHA256 63a14833e8db5c8e19470b7a1f4d5563abb84c4e0d76600201f32aae1881be02
MD5 8f79e5983ed702c6a2ee5eb68673f163
SHA1 d5b97194bb7636da2d5d28ccacf87ab0476306e1
SHA512 0ef42084b9612106abd3640c1fca9a8dfe037abc92aeb2c87720b08b9c152253ef7c6bc3883ee4a233ee17ddeab8c1f593db7efff526ab9869c6d105866b5cf7
SSDEEP 768:r72XBxn2+pWRDE/XqDlytYZVwoeiiNTVJoOZDdejxXCzL:a
TLSH
T1B6E4D047AA2B2447277CA76A40C6A816E4DFB10989F77DBA43DFF704382296C484D4F5
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/amendment.kar

SHA256 f9aaa878ce8b7ee78e94ac415ca7c9fac941a98cc21e23233354689e4e591052
MD5 2d2592b2c488c1178134a01ad289af27
SHA1 5ba2929289d727c69235ae965dfff3b30d9eb9a4
SHA512 8983f3ff594c9333f24d0da3e9857d0ce781da936b33c60ca10084fcb9b8652f9681037a54e55ad602808b31eead0287f80dabb6902b51ed7894084009e3f31f
SSDEEP 1536:dO6PuSsYUaNaZ4WiObBx7x1QeohVa8O4BNVnaS+icIDdOvtXQw/qQEKRM:hs6
TLSH
T19205F199607F88991F07525F837159F74E1FD33AC4A794ABA610C7D26CE4A2472F42C3
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/cifferlaases.fri

SHA256 1c08183389bd0021f0451b44aa47416c3d1c17ab24306ac5d83bb5aee6059a15
MD5 32d4e1a7f6e4f22a95c41aa1bcb599be
SHA1 38100e20e90ad7dde9ce4c2d19d7a165e0ef994c
SHA512 f6ac29eba305a73fce26f514b14165b859d1c44fba5d99dae518dddac82f5e3a700a0612ffeb2bb1486c1ef955dfb053fef6d602be3c74590152f63bccfae1aa
SSDEEP 192:v5N3bp9Z5uzQhgM0U60qsoVaZC8AXXBzML1aNfFuUJG+uXUj4fGQ8gcFhuhD5pMp:3kQWPwjj17X+18fGwV5r1xi9wo
TLSH
T16254A0FAB8BB4D0F1BACE403F962B54E2D291785C91D9E8E0386A919091F1207DD6574
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/confragose.sam

SHA256 e98169e8e9179f8ca395de4c6c567efcf88385de7acae6c2fc0f4243048e06d4
MD5 0a87e26dbc3aefbc8c224bcb6f00a52b
SHA1 3f426ee53e6f6fcd3562e2650a92449e866be122
SHA512 53210097d136750c1db20874490acb1399db84f179c4dcffa47ab8ac349b610587a4f2fe4f16eeb0e221a64c62457a3476853747274c1a69f99cef15ffbd8252
SSDEEP 192:2sRUlxXCUKG/xpjMN95DpASisuPQiLz7dqqyfdp0xjqnG1l1FD2TMmqQrUbuwSC7:G4eZqY
TLSH
T127E4E08D2BBC671F122A4574FD2053B182116DA7CF0A34521D371C953F32BB582AFB56
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/dusket.eth

SHA256 eee162572d2d80187c2f9cf3f7bc9231b01ecd0aadac8e3feb1f553d951daafc
MD5 5f19a02df4526143f73939c8f5495ecb
SHA1 17bc7e42df9d5a044dd0a1aefd48843edfc115fb
SHA512 4148fe0dd9704dfa01c85ad4902c6bae077c7f77e01cb14e879e77049dd957c692df945e595c85e37c597c63c0b78cc8559b852417b943a22205e1e57eb81bfe
SSDEEP 192:XoLwt0FL5JsOZt+YVVFScOoGcMXGYesQVpuvR7b/s7GFAI1dawApxsQagxi5Bw40:0FNdqovHZB6Vn+CvD3lZS5XeqRrV
TLSH
T1EA05E18D29825B53A5F41A3E7D3CEC22F8BF0AD948B5BF7850D03BF5B8541BD6485284
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/fyringsanlgget.maa

SHA256 c1107d5d4227fd15a421db0394627125959f2b9f6f1c6eac30120714b13606f7
MD5 702286ddd02e2c1f878e534eecd4af0c
SHA1 01c7d1ff2e9865473c16cc9718e61d0711ce0aad
SHA512 26d324523032b5e2eb199dd18342f9fec90a2cbce82a3932267876c11eda44b46ab69f08ab5ab03d4e54468e21ed1cb18f59574c73ec38d7d24f309796802bc4
SSDEEP 768:5y/xxrNcRXsoAz5Ov/FKiiTpzsLa2xmsbkRlBRD1vXg:5y/x6soAzUvri12xmsbkBg
TLSH
T157D4D1DE70BD88FB18C06FEC80160E86561ECF56469B45D14C15EE8E3CE658E7662B07
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/ipomoein.non

SHA256 30faac7cb147b17944ac86a4cab1fcff2341244ed582be50a6ad66f6b3337036
MD5 80b5123ca5becf86109feeed886fc1be
SHA1 96c3201fd9eac1fccb56a77577a4890aee985b07
SHA512 e0c13bb0e30f09d64401415dd3a967578be7431faad0702a4e340888d75bf81f3a0340479325f30134c3da4c8b7827e8e9bb2d5ae53253a4825c9244a8ccf3dc
SSDEEP 768:wrle3gFfEirWvH/r/OxBmemSejUk+My2BvkMFsUOzEF+vO:/P
TLSH
T196F4E148FD4DEC807EB3B03A7B2889E8948C1705A24FA787149DF5B9CD92F76706146C
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/jackknifes.rev

SHA256 dd211bc918fda61bbc39925904d1576875144092240f49cbe797a35b1fa60324
MD5 513691ea2b45975f9b188e29b3059b70
SHA1 8027271205fdd4e5b8ec66c39fa54f48eaef35b4
SHA512 63ceaf8b562c86c9c97d6e82d950939cc5dac656464c0e5213e093bda70cb26aeed040d4a73cd65cf46fa95d0fefedc075250b424d0992aff5bd1b6cbae24a0a
SSDEEP 192:toYAOLBW25PesX/uzKX0Y6ppcQw24cdyEznHThb:pAOLBdxPuzLY6QQw2bAEzz1
TLSH
T14724AD9B4B61232CD22833DAA7E5BF6F638710505074DD47279FA0BA0AE85B4C28830A
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/klamphuggers.goa

SHA256 ad92af182ce5cda47137240cac15ac075acd0525315deafb49cb436160c54d3c
MD5 d389f893f725fa99ac1ed01d2a8170a1
SHA1 2eaf737b2a4ca51ae343e4c7162e116a9bc07ccc
SHA512 b7f58a2bf7ed6603fc66341e433c00bca8b979c1c2fb503505568d4deb36e4203762344808c25a35b05a1bfca70ab1e59a0d8677a6c7f9eadb2353c7d738ed0d
SSDEEP 12:HNMnQ1AS0RhPjnkfMwY79vCbYughIaZqYj3Nztx1a6OKM:KQ10R1n+MwS9vRXPjVtx1aTKM
TLSH
T1C0E2B7C642A164111D03F4BACE5E966CE46F241231FDBF47FB0666DC20F45020E9B2C2
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

spiseskefulden/konfidentielle.for

SHA256 56203ea264fc28cc456295f1be9fb3e11c1c7ae12aac08c7949468cbc2163591
MD5 e01edb47a628198b116f438faacd2246
SHA1 97a15aedd2ba9cb1a77a8bed007b47a4b5734884
SHA512 66a95b9f6bc0c4ebc9c18cd565a0034bd768d84b177bb9ee54fb31c531a30c87176501a5c53ffcf392a4d42e6a2d295cfe39a7d9e24c864cf3a4b2421f5bac76
SSDEEP 384:CVu8hPPGc3BFsjCIK784IEHjJw6cuSNW+TmmSFGDEFCO6C:au8hPOc3nsjNwjGwSxTfiiEFCFC
TLSH
T1CB74C057DE122F708EFCB9D13256142E6CE6E9242CCF202E399983E5ADB87410B9D538
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

dc698522859bcc7c5337e5d5b316924e39472c5ff3ef58b3118b1835279ff980.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Archbishoprics109.cik

Billedgallerierne.kit

Booties.eks

Fjordmundinger156.Arr

Mannishness11.rom

Medlidenheden.jpg

Miljberedskaberne.drn

Nonspinosely.kys

Oversigtsskrmes.jpg

Stitches.ams

Strudsemaverne.Afl

Unharmfully.for

alstonite.hyr

spiseskefulden/Skrdderkridtets/landspout.bri

spiseskefulden/Skrdderkridtets/loofa.hou

spiseskefulden/Skrdderkridtets/metazoal.aff

spiseskefulden/Skrdderkridtets/nasonite.txt

spiseskefulden/Skrdderkridtets/navngivendes.jpg

spiseskefulden/Skrdderkridtets/nonmaritime.ren

spiseskefulden/Skrdderkridtets/overrend.und

spiseskefulden/Skrdderkridtets/reformandum.jet

spiseskefulden/Skrdderkridtets/slidstyrken.cou

spiseskefulden/Skrdderkridtets/stddmpet.lat

spiseskefulden/Skrdderkridtets/strikkede.bed

spiseskefulden/Skrdderkridtets/transportformaalets.tri

spiseskefulden/Skrdderkridtets/tsedes.fil

spiseskefulden/Skrdderkridtets/udkommandoernes.pro

spiseskefulden/amendment.kar

spiseskefulden/cifferlaases.fri

spiseskefulden/confragose.sam

spiseskefulden/dusket.eth

spiseskefulden/fyringsanlgget.maa

spiseskefulden/ipomoein.non

spiseskefulden/jackknifes.rev

spiseskefulden/klamphuggers.goa

spiseskefulden/konfidentielle.for