ef1a5648-e327-424c-8e8a-db9d2c790b30[.]XrAydmny[.]exe

Resubmissions

19/08/2026, 01:38

260819-b2dbpathpf8

19/08/2026, 01:37

260819-b1z43athnf3

19/08/2026, 01:34

260819-bzh46abr7w8

Sharing

Copy URL Twitter E-mail

General

Target
ef1a5648-e327-424c-8e8a-db9d2c790b30.XrAydmny.exe
Size 880KB
Sample260819-b2dbpathpf
SHA256 e6f9b4b0a36aae66bc6c811bf6aae96234e07049a55ebde56388a56d85438ee6
MD5 84223dd5145a488fbc17614778b9be1f
SHA1 6ff8c7734e9fbae538ffe88a7de20fce82913f67
SHA512 9aa43ddc470e36a1d44cb30c77c2d599a2bf43a76b1caf2050ecf9f5e240cc251ce0933dba7b3315c04230db0e7a23b8cddd2431fb0b5cfe488be643c4fb8728
SSDEEP 24576:gk7/BNGayaSoZn5MgwsQd9uSlYB8iWnttpIdh+YW2K:gk7jZyaSo1dVmV65Wn7pEh+z2K
TLSH
T18115AE08FAF145A8C17B647994A6A31BF736B84C1B7086E763E801983FA33E44F75712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef1a5648-e327-424c-8e8a-db9d2c790b30.XrAydmny.exe

File Explorer

ef1a5648-e327-424c-8e8a-db9d2c790b30.XrAydmny.exe

.exe 880KB

ef1a5648-e327-424c-8e8a-db9d2c790b30.XrAydmny.exe

IMPHASH 12ae47f6dc01672fdaeecb561b85ce10
SHA256 e6f9b4b0a36aae66bc6c811bf6aae96234e07049a55ebde56388a56d85438ee6
MD5 84223dd5145a488fbc17614778b9be1f
SHA1 6ff8c7734e9fbae538ffe88a7de20fce82913f67
SHA512 9aa43ddc470e36a1d44cb30c77c2d599a2bf43a76b1caf2050ecf9f5e240cc251ce0933dba7b3315c04230db0e7a23b8cddd2431fb0b5cfe488be643c4fb8728
SSDEEP 24576:gk7/BNGayaSoZn5MgwsQd9uSlYB8iWnttpIdh+YW2K:gk7jZyaSo1dVmV65Wn7pEh+z2K
TLSH
T18115AE08FAF145A8C17B647994A6A31BF736B84C1B7086E763E801983FA33E44F75712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

561576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Elijah\Desktop\srcs\steeze free\x64\Release\Steeze.pdb

d3d11

D3D11CreateDeviceAndSwapChain

xinput1_4

ord2

kernel32

GetCurrentProcess GetCurrentThreadId CreateToolhelp32Snapshot IsDebuggerPresent Sleep WaitForSingleObject ReadFile CancelIo SetConsoleTextAttribute SetConsoleTitleA GetStdHandle DeviceIoControl CreateFileW CreateEventW GetLastError Process32NextW Process32FirstW GetOverlappedResult Beep CreateProcessA lstrcmpiW MultiByteToWideChar GlobalAlloc GlobalFree WideCharToMultiByte GlobalUnlock GetLocaleInfoA QueryPerformanceFrequency FreeLibrary QueryPerformanceCounter TerminateProcess GetModuleHandleA WakeAllConditionVariable GetModuleHandleW GetCurrentProcessId GetProcAddress CloseHandle LoadLibraryA AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalLock SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter GetSystemTimeAsFileTime InitializeSListHead IsProcessorFeaturePresent

user32

ScreenToClient GetKeyState MessageBoxA GetCursorPos FindWindowA ClientToScreen GetKeyboardLayout GetForegroundWindow LoadCursorW SetCursor GetClientRect GetWindowLongA UpdateWindow PeekMessageW SetMenu SetWindowLongA DispatchMessageW GetAsyncKeyState ShowWindow GetSystemMetrics SetWindowPos SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard SetCursorPos SetLayeredWindowAttributes TranslateMessage

shell32

ShellExecuteA

ole32

CoInitialize

msvcp140

_Query_perf_counter ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Random_device@std@@YAIXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z _Query_perf_frequency ?_Xlength_error@std@@YAXPEBD@Z

ntdll

RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry

hid

HidD_GetHidGuid HidD_GetPreparsedData HidP_GetCaps HidD_GetAttributes HidD_FreePreparsedData

setupapi

SetupDiGetClassDevsW SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailW

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp memchr memset _CxxThrowException __C_specific_handler __current_exception_context __current_exception strchr strstr __std_terminate __std_exception_destroy memmove memcpy __std_exception_copy

api-ms-win-crt-runtime-l1-1-0

_exit __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _initterm _get_initial_narrow_environment terminate _set_app_type _invoke_watson exit _seh_filter_exe _cexit _crt_atexit _initterm_e _configure_narrow_argv _register_onexit_function _initialize_onexit_table _initialize_narrow_environment system

api-ms-win-crt-string-l1-1-0

toupper strncmp strcmp strncpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf _wfopen fclose __stdio_common_vfprintf fseek __acrt_iob_func ftell __stdio_common_vsprintf fwrite __p__commode _set_fmode fflush fread

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-heap-l1-1-0

realloc _set_new_mode malloc free _callnewh

api-ms-win-crt-convert-l1-1-0

strtol atof

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

pow powf fmaxf ldexp fmodf tan sinf sqrt cosf ceilf sqrtf logf atan2f atan2 asin __setusermatherr acosf log

api-ms-win-crt-utility-l1-1-0

qsort