alzaabitweaksPATCHED.rar
- SHA256 dc782f9b27a89270308d5a1c7b80cc9e5f22cd2893370fa6c01ebba5ab0e66cf
Password
infected
Overview
overview
8Static
static
3alzaabitwe...ED.rar
windows10-2004-x64
1alzaabitwe...ED.rar
windows11-ltsc_2024-x64
1loader.exe
windows10-2004-x64
3loader.exe
windows11-ltsc_2024-x64
3patch/readme.md
windows10-2004-x64
3patch/readme.md
windows11-ltsc_2024-x64
3patch/remove.bat
windows10-2004-x64
8patch/remove.bat
windows11-ltsc_2024-x64
8patch/run.bat
windows10-2004-x64
8patch/run.bat
windows11-ltsc_2024-x64
8patch/server.js
windows10-2004-x64
3patch/server.js
windows11-ltsc_2024-x64
3حل مش�...خ.bat
windows10-2004-x64
8حل مش�...خ.bat
windows11-ltsc_2024-x64
8حل مش�...ث.bat
windows10-2004-x64
7حل مش�...ث.bat
windows11-ltsc_2024-x64
4حل مش�...ز.bat
windows10-2004-x64
6حل مش�...ز.bat
windows11-ltsc_2024-x64
6حل مش�...ت.bat
windows10-2004-x64
6حل مش�...ت.bat
windows11-ltsc_2024-x64
6حل مش�...ب.bat
windows10-2004-x64
8حل مش�...ب.bat
windows11-ltsc_2024-x64
8حل مش�...RU.bat
windows10-2004-x64
6حل مش�...RU.bat
windows11-ltsc_2024-x64
6Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
alzaabitweaksPATCHED.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
alzaabitweaksPATCHED.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral3
Sample
loader.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
300 seconds
Behavioral task
behavioral4
Sample
loader.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
300 seconds
Behavioral task
behavioral5
Sample
patch/readme.md
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral6
Sample
patch/readme.md
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral7
Sample
patch/remove.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
300 seconds
Behavioral task
behavioral8
Sample
patch/remove.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
300 seconds
Behavioral task
behavioral9
Sample
patch/run.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
300 seconds
Behavioral task
behavioral10
Sample
patch/run.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
300 seconds
Behavioral task
behavioral11
Sample
patch/server.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
300 seconds
Behavioral task
behavioral12
Sample
patch/server.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
300 seconds
Behavioral task
behavioral13
Sample
حل مشاكل/النسخ.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
20 signatures
300 seconds
Behavioral task
behavioral14
Sample
حل مشاكل/النسخ.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
21 signatures
300 seconds
Behavioral task
behavioral15
Sample
حل مشاكل/بلوتوث.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
300 seconds
Behavioral task
behavioral16
Sample
حل مشاكل/بلوتوث.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
300 seconds
Behavioral task
behavioral17
Sample
حل مشاكل/حل مشكله ابيك قيمز.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
300 seconds
Behavioral task
behavioral18
Sample
حل مشاكل/حل مشكله ابيك قيمز.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
15 signatures
300 seconds
Behavioral task
behavioral19
Sample
حل مشاكل/حل مشكله الواي فاي والنت.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
300 seconds
Behavioral task
behavioral20
Sample
حل مشاكل/حل مشكله الواي فاي والنت.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
11 signatures
300 seconds
Behavioral task
behavioral21
Sample
حل مشاكل/حل مشكله سطح مكتب.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
17 signatures
300 seconds
Behavioral task
behavioral22
Sample
حل مشاكل/حل مشكله سطح مكتب.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
19 signatures
300 seconds
Behavioral task
behavioral23
Sample
حل مشاكل/حل مشكله شاشه CRU.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
300 seconds
Behavioral task
behavioral24
Sample
حل مشاكل/حل مشكله شاشه CRU.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
300 seconds
General
- Target alzaabitweaksPATCHED.rar
- Size 10.8MB
- Sample260824-p5dnhsde33
- SHA256 dc782f9b27a89270308d5a1c7b80cc9e5f22cd2893370fa6c01ebba5ab0e66cf
- MD5 d9a3e72f4c0379f2ab2cc82e632d0b31
- SHA1 d64ce5b90c5b28eb4ba4c56942f71fcf911b6e5d
- SHA512 ff63c235e61d5eba0f72889275d098b3fdc2926eb3103558c2ee5605164fa54962842609746088a94ad4abb2f246f33fc6d3c12531ff9804dc0303a9cf6eb58e
- SSDEEP 196608:ByTO/mnN35rpRN2CRnN1YIJGjSCpfZbQMqBcRX9mHI/Edx5erKMvZ2xqf4pvf/Z3:BPYNJdr2CRnNOIX0ZoBDI/kXMvZn+vfJ
- TLSH T1CDB6331969FB962ED0BABC58C4B34A30FF4352971A71E5344D40003BEA66F4721FAE9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/loader.exe
File Explorer
-
alzaabitweaksPATCHED.rar.rar 10.8MB
-
loader.exe.exe 12.2MB
-
patch/readme.md1KB
-
patch/remove.bat.bat .ps1 1KB
-
patch/run.bat2KB
-
patch/server.js1KB
-
حل مشاكل/النسخ.bat.bat 3KB
-
حل مشاكل/بلوتوث.bat.bat 2KB
-
حل مشاكل/حل مشكله ابيك قيمز.bat.bat 2KB
-
حل مشاكل/حل مشكله الواي فاي والنت.bat.bat 2KB
-
حل مشاكل/حل مشكله سطح مكتب.bat.bat 2KB
-
حل مشاكل/حل مشكله شاشه CRU.bat.bat 1KB
loader.exe
- IMPHASH 284f0e5b809aed36282f5ff23aa4dd04
- SHA256 c9c6b080c27464ff92c089487b471e25338fe5f4a74d5fbc62e4d6b374c1996e
- MD5 7ff8ef7c98619b755c55b03be9773424
- SHA1 8bff898f04ab6225a78c93460d8f3868e18f13dc
- SHA512 269b69cd47f27760764bdd5ef48997ca2b3f519425fec7bb45cfef8222761c3599d820cd1342f53faa6b8093d7acc2540c22406c3bb6551bb78cfba528bb7d62
- SSDEEP 196608:8PDCzzjjdBG7HX9EmvbW7ht2068j/9t2okF6bJf+15DxkOMNV6Aojp/kKzYyZB:8Pe3LGbWblt68L9ApEbJOrHyV+mgY
- TLSH T106D623FE84C521E0E5D30A80B746A3CE72E0615E0AFD9C6D398A2D415F62D9F864DE73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
16227743
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_47
D3DCompile
winhttp
WinHttpQueryHeaders
crypt32
CryptStringToBinaryA
iphlpapi
GetAdaptersAddresses
kernel32
WideCharToMultiByte
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
IsWindowUnicode
advapi32
RegGetValueW
shell32
SHGetFolderPathW
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
setupapi
SetupDiEnumDeviceInfo
powrprof
PowerGetActiveScheme
imm32
ImmSetCompositionWindow
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-string-l1-1-0
strncpy
api-ms-win-crt-stdio-l1-1-0
fgets
api-ms-win-crt-environment-l1-1-0
_wdupenv_s
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-math-l1-1-0
ceilf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
Virtual Size
882KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.O1=
Size
Virtual Size
6.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.obJ
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bLp
Size
12.2MB
Virtual Size
12.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
patch/readme.md
- SHA256 a04a599b3d10b8d8a681cef932d22f2830c05144aa12461fbf822c9a858cae2c
- MD5 c7edb19ed87097556230e5f66ab483ac
- SHA1 dc66ae642e46ed4351f5da7776fe3ca69283b233
- SHA512 4003d0a49f18d2c0d1ec3800482ea3c78e6ac4ebac9dee0f5f19ec8d85e558ef6b61ef3cf30e437f7f4aa3d50f7754997ff5ff3419f82737a35b901621937b7f
- TLSH T12321940B5D932F3B46E3C0C9118B30AEE1EA9158B200289D91EE12F9B77CB75443C2DA
- MD5 SHA1 SHA512 TLSH
patch/remove.bat
- SHA256 1e035ad6c461cce892fce37b1c620aba2adc6fff5edca85e297215761c9bb331
- MD5 6f00dea399d4e1c3f95bd22ae494e693
- SHA1 dc82324d06fa1f87a252505cd10354aa85fd6d27
- SHA512 b1d36a9069cb031a7492d18aab05c7014c6491e797c66697a9d2376aec61aace44f5832aaf0571df7534ca6990083a89737b11bd34deb2dbbec61c6e9903e84e
- TLSH T103315062BBEAC621569388D1DFC6A12078148A8F8204ACD572D311F8F18C7E86BFD6D1
- MD5 SHA1 SHA512 TLSH
patch/run.bat
- SHA256 69ab1b1486f45b2f3cb2e066e6ea325297fe84e0ebe6f6ea10e3abcffec3af35
- MD5 61081a10ccf43c5298d1a59ffde653f1
- SHA1 ac679b9dc966e8d6f62c4bdc7a25393d2648a3dc
- SHA512 b10f75db7672bbea0c5635747b68feb4e0569b65d98c8f7616e2c647f386e5931f987f901a8474f91b2b2d498cac719f50fc009b8bdeabadbc8b506a1a92ceb5
- TLSH T1A541532237AE893AE6418651CB6661B27934C54F02180C7A72DB02F4BF4A7C49BFE6C0
- MD5 SHA1 SHA512 TLSH
patch/server.js
- SHA256 95fe3d36d3ebab43d45981f6c7ba18a01ffbe715ff6b0c116cf9e1b39ca40bb6
- MD5 2742f31dbf1268ba8859a7c037b50907
- SHA1 b7700be6076a7986137ef0096361f8c9bfc48658
- SHA512 2e8135cb7153e8f4cf55e6b0314b8df09d108acb4307b9c75913f71ffd7550908d5c213d94c1e69e369bc651e46f375ca9a588c4a735d894691bf46bff96e1f5
- TLSH T11F11869305E608BA61E6DBE30751984EC253D52F718AA782A5DD08FF9AC61B081772E0
- MD5 SHA1 SHA512 TLSH
حل مشاكل/النسخ.bat
- SHA256 02073d1376dfdac0c87c174fc2a54998924d4752b9da126da7ceaabd12b83979
- MD5 d2d4c16f6c918e8840910f8f3efee005
- SHA1 29b78e1334f2433b32de6cb7bdbb3d2a043a3e06
- SHA512 835d7bb388473174e07c1ed9b926b37ccf493374764050dca3bb4ca244d6915f2da3b8e0cef5ee4c78278e30968e8fea42a5c3c58199715184fc0d4992a12d7f
- TLSH T19381D1233C951DABD986D5245DE38221FFA165C358497FC0B6E6249810B3F4B423DACE
- MD5 SHA1 SHA512 TLSH
حل مشاكل/بلوتوث.bat
- SHA256 58735ca27e59fdaf2c89c6712c864c8a5a7aa421eb742531e861ae793a380320
- MD5 6e1562e076e9eb44645326f356cf4183
- SHA1 20096811162a6c71b027626fa87c604cd4a9841f
- SHA512 75b8f0ad0bd0a972858ceca33c6d28719169110ac2e8fc56a6fdce79e764c98041bb254472e23e3bfd6079c49e6437e45baf6e91f986bcac8974d950b201b084
- TLSH T18F41CC233D657DEAC6C2D215AFD36761FE6059C300057ED0A2E6119420E7F8A627DACD
- MD5 SHA1 SHA512 TLSH
حل مشاكل/حل مشكله ابيك قيمز.bat
- SHA256 3478c721b327da40bb84eb4f48327477d2be278ec8403fbedaf66f88c6f6e1f3
- MD5 a40d831679839adf883b7a5fd42a1d65
- SHA1 35a1194bf2ff3b0fb3c89b549ac5167148c5a2bc
- SHA512 f88c52c2de3eb8e633f60f4a8e6e4e2ba8fe87f1305bec3cc4eb26055cd96c0a39ba0e01a219d83941b65c790cdbaf2e90435cd6aae2becca25b73e19dc60046
- TLSH T19351D0033D78FC798085CAA09BE7A565ED444E8B00093DE4D4F6327BC568B8B927DD49
- MD5 SHA1 SHA512 TLSH
حل مشاكل/حل مشكله الواي فاي والنت.bat
- SHA256 ba566e050bb37e329040de4156b1e179ef0ef2534ca4508e31791603cd28c29f
- MD5 465c1637f74c4c8cbc40776af0bbd9b4
- SHA1 cd46cea010ad0ce557056de50d09e3a030f6c8fb
- SHA512 86d377cb5435e63a27f2dc76bb2450fbcb3cac307ad3118b2d56358523390301b0ea214d84a3da8b4ad76163aaeab6c00f911a4e31486dbf3711d739ca1d3aa5
- TLSH T1EF41E0133D68BC8D06C2CD42DAE76321FFA41ADB11863ED9D0E611E92122BD3D36D90D
- MD5 SHA1 SHA512 TLSH
حل مشاكل/حل مشكله سطح مكتب.bat
- SHA256 0caa0879046feed9dc4bcd54f88995929796fe141621ea6ae8d3aaa3bd1a070c
- MD5 5ab797e4558f235630b01e66712253dc
- SHA1 31a70d6db2c65e1fe99d0a7b3e1a000ea71ee58e
- SHA512 1003c0aaf9a15d776426a17fe09b1452a1cc3dbea9f86cc9978b0997042c8143956227ff5ccbccaa0eb2fd4aff1717e902091d05cce7e863ac783e611158b590
- TLSH T1FC51055B7E593D187B85C4A1D6961103EF488C4790922EE4E7DB12BC74F2BC0867EBC9
- MD5 SHA1 SHA512 TLSH
حل مشاكل/حل مشكله شاشه CRU.bat
- SHA256 799502ee36b7dd851a3843083ba16b4b2f45a45a7684185d0d733a636e734662
- MD5 7997c1826abdbe73ea16118259e71551
- SHA1 32f184a63defab57adc7df05e3da44131aabc6cf
- SHA512 0fdc01efa39194691146d98b2f93b973d4a9f646fe6d2359e3ba83692a94964a460a4fea37f26eadc9a2dbd21280f7876a7b516bf291dc6457dcc7877f8f55a3
- TLSH T1F041F1233E517D9C0682C647DAA46703FE7D1C8B10835EC5B8E242B06E62F94A27CB8D
- MD5 SHA1 SHA512 TLSH