SLAM_v1.5.4.zip
- SHA256 bd50edfc6285e3d323cb47d37220c05f4c5db2c2760a04797e8b03038e0bced8
Overview
overview
3Static
static
3NAudio.dll
windows10-2004-x64
1NAudio.dll
windows11-ltsc_2024-x64
1NReco.Vide...er.dll
windows10-2004-x64
1NReco.Vide...er.dll
windows11-ltsc_2024-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-ltsc_2024-x64
1SLAM.exe
windows10-2004-x64
3SLAM.exe
windows11-ltsc_2024-x64
3YoutubeExtractor.dll
windows10-2004-x64
1YoutubeExtractor.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NAudio.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NAudio.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
NReco.VideoConverter.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
NReco.VideoConverter.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Newtonsoft.Json.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
SLAM.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
SLAM.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
YoutubeExtractor.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
YoutubeExtractor.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target SLAM_v1.5.4.zip
- Size 13.5MB
- Sample260822-cwmtlsem9v
- SHA256 bd50edfc6285e3d323cb47d37220c05f4c5db2c2760a04797e8b03038e0bced8
- MD5 d3d6fe7f1a15fb30fbb24e839d376694
- SHA1 fd18a0db2847585b139554c9976d5c9fec8e9df8
- SHA512 29804f0c1f4f9936722e3af499956fed17a506a779527ee580cefebcceb5158db294ee01e84d0ef80f945c178fd07d3b2c9af4f622bad4747301a54dc7b57e55
- SSDEEP 393216:dnuq9xscpqWtJhAIvjvO73Yy1ZDIQyZH2SGVF/ezOdd:PDpqarI3xLyheF/6Odd
- TLSH T1F5E6337985BC175BF674CB3941ABF02BE916319CA1CBA9F5E77E70E0B3B4348A14A101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/NAudio.dll unpack001/NReco.VideoConverter.dll unpack001/Newtonsoft.Json.dll unpack001/SLAM.exe unpack001/YoutubeExtractor.dll
File Explorer
-
SLAM_v1.5.4.zip.zip 13.5MB
-
NAudio.dll.dll 453KB
-
NReco.VideoConverter.dll.dll 13.1MB
-
Newtonsoft.Json.dll.dll 392KB
-
SLAM.exe.exe 1.2MB
-
YoutubeExtractor.dll.dll 31KB
NAudio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f49bd87c5c828f2505efc965a666fb86ca3543e6d5f2ffd25eeabce7877053c
- MD5 c28a5accf44730b2ed9934a3a67a39ac
- SHA1 1cf0f914f96ecc9017a4226437b581802ff67f2c
- SHA512 eb906c83df4ce43eb8d4d7e8138aa074e8f303bc44e33bf75f45460ac45796982c5b2e5b81dfb621915084222f0b0f3567334ae72f6650dc44a01044680e871d
- SSDEEP 6144:e3B65XGLrNNwj/qMqBhCQFputPAZoSRUsa012wxjmqFFpfFsAzRAXAwy:eR6tGASRhCMputPAWS/TAUiU
- TLSH T1C5A47C6237E49967C5AF23B5E8F1092603B2F4567323E74F45806ABA1D93B819E407F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
470062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Andrei\Desktop\naudio_38dadb417edc\NAudio\obj\Release\NAudio.pdb
mscoree
_CorDllMain
Name
.text
Size
451KB
Virtual Size
451KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NReco.VideoConverter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9457e58680158c041d4a980907abc7f16a4c798e639fdcb8d0cc5d7892b2e2da
- MD5 2d056c9c23ecb0b0933f9e13953af1d8
- SHA1 25102dbfa7172468ab22bfd2ee608a3147daaa60
- SHA512 db82e7665397693e08043a3be2bc8cdd1f5a6d5560e4863b7cb7f533a48a24ed53e4336a9b806ccd64d8af27285cfbdd6c144e60b1d5c9360e51b4951eff0fda
- SSDEEP 393216:XZG9xCypBlOkhjjSVTvOKdVrpWPN1f/qGWCNthRr:uXpnSVTvz/C12CNtLr
- TLSH T19FD6337606DF9DBBF698823565F3D433D73692ACC1ABD5F9598970C1A2B9380C68F008
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13770606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Dev\code-my\VideoConverter\src\NReco.VideoConverter\obj\Release\NReco.VideoConverter.pdb
mscoree
_CorDllMain
Name
.text
Size
13.1MB
Virtual Size
13.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2c30504710edc00a34840d23f097a575a8ea96d63c1df829a4bae31e8714d4a4
- MD5 96bc18f8dee95af3771763dee0e15986
- SHA1 b087180286743cb8666032d384a95f344f547729
- SHA512 a24fccff5024fcea88b6355563360958210211588d2ec2734fba164a83b8bec3fd151d0369b8be9cef00f054e40cc082442de2b5b0ad822750b3bcc234c7fd9e
- SSDEEP 6144:urOhJfyPHhGLjPzmHKkKm3Wri/mbr0tZzPEaN+ILWlOJn14:wO/YsCqRmmcAQrZLWl5
- TLSH T16C845B5533FC9B26E6EF6B34E03009190BF1F846A9BAE78D5E409AEB1C937504961373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
407262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Temp\Release\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
390KB
Virtual Size
389KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SLAM.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d2f89487c2a374b35ef1a84f5a7638ba8dd42b826a84810fdc042b9579d18d5f
- MD5 2540a7602aa488e4460c8d02c148a157
- SHA1 0acab41d6311672956baa8f8d7d7d2d9424a7a94
- SHA512 906c7ff3ed85eae24e5a251defa3f599954280d5bb65043fea8d30d08d59d7b8adac2270594e258efc2cde9c301151010f506ef5026abdf78c3891c85acc6e8c
- SSDEEP 3072:qgbd3BJ1/heK86rlbODDAIiRE098wcbBV8M+HBKXsLRKE4mo6wcbBV8M+HBKXsLJ:qy1/sQITF
- TLSH T17D4513D051B46667ECEA74F94B240C4426AABD88B4F396453873F60FC17368BEC6274E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
851998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
B:\Documents\GitHub\SLAM\SLAM\obj\Release\SLAM.pdb
mscoree
_CorExeMain
Name
.text
Size
824KB
Virtual Size
824KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
365KB
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
YoutubeExtractor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 63c7fc885372cad87c92830c2728a923a3adc967131885e0dbf30e13e34d9abc
- MD5 38a8f1c0d5b4c7d5dd4c0025bf44c54d
- SHA1 25eeb4985f0af21d1b9e62a4d479d8a36eb4966d
- SHA512 fc97a1970539a544b0e8be96c0cb84ae2d51debf1ea40682de40d674a77fa0e96bfa90e7819311758d3ad17d8144eba741b742dbb8ed6d88d52061412502ca9a
- SSDEEP 768:dZPDY8+cqTQSg6QkB5SZWKsk8Ii/YnAwUU:dt/+cqUS9B5SZWyK/+J1
- TLSH T107E22A0933DDE366D7FF4BF858B681640379694A7023E36A2E00A1DF6D327904A51BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Andrei\Desktop\YoutubeExtractor-master\YoutubeExtractor\YoutubeExtractor\obj\Release\Full\YoutubeExtractor.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ