423dd6ea270685a9497f775cc7b5eda9c6def177c9e3456e56da4b0aacbfba08[.]exe

resource
423dd6ea270685a9497f775cc7b5eda9c6def177c9e3456e56da4b0aacbfba08.exe

423dd6ea270685a9497f775cc7b5eda9c6def177c9e3456e56da4b0aacbfba08.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 423dd6ea270685a9497f775cc7b5eda9c6def177c9e3456e56da4b0aacbfba08
MD5 972336a0bbf109327cc30e2f6f4e331e
SHA1 43efd945d14525952b1058bad114304be386c229
SHA512 a3f7eb551d884d26df55dd7c827a4c316e0d4e5b2f2ac11264d547590638a4aa043f5ae309c37b43a55446c89dd66c1bbea055583716badae04d8f88ebc52664
SSDEEP 12288:kt71Qk919aC5OT5zaxt5g7PTq3skk+kthCaG782X732JVSdw:Y7R919OTkxg7WdPkjE8Y2JVSdw
TLSH
T1EAE42340B311F06ADAE70D70856BDA764EFB7D21B5A527129308760F7AF53E1E80E643
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

97:5b:26:45:ca:ec:12:e4:06:9e:37:41:fc:99:49:bd:ad:3f:13:08:41:53:74:7e:88:16:99:37:ec:e8:65:6d:f6:f3:67:bf:53:78:56:82:b0:95:06:f8:d2:b9:cc:de

Digest Algorithm

sha384

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Svrvgtsboksere,L=Saint-Loup-sur-Semouse,ST=Bourgogne-Franche-Comté,C=FR,1.2.840.113549.1.9.1=#0c1a4f646f7269766563746f72404865617468656e736869702e4772

Chains

Aug 21, 2026

CN=Svrvgtsboksere,L=Saint-Loup-sur-Semouse,ST=Bourgogne-Franche-Comté,C=FR,1.2.840.113549.1.9.1=#0c1a4f646f7269766563746f72404865617468656e736869702e4772

Minor OS version

0

Major OS version

4

Entry point

13136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Bagtalelsernes.ini

SHA256 8b407676c9a6a2166026c932e18a5eb67018297cb9cfc6ef3e01839a369b2420
MD5 91f079a9357131b62bc38e03b293915d
SHA1 15186f4ed2bcb3ab11e9629afcf9119516735461
SHA512 18153176e680ae642e27f71ba246651c8b33c5b53dc585c854172a5b780733c4aad22734a91f9f8bdd380d51348047393372f413738cc6defa6a072df5263288
TLSH
T1AFE06188D7511B5C058BE25358605E825275793484657906F3F6878EC0855DC06F085A
MD5 SHA1 SHA512 TLSH

Mudderplen/Shirvan/ringworm.ini

SHA256 3e59919852e82ea1672835466c705bd3be72dda34400c42a064c3a3ea7f457a9
MD5 6f35e5cf0e8399e4343a01ff541959ec
SHA1 151606b33ca5a20e2569ea6642adad5eebefc244
SHA512 a9be833477d6a7021b47f6a90453a88b3096b329ccc5cfe9897d2e05fc7f71fe5c7286667e219945e74c8cca4bc143571bbc47f5c59bdad716646b96cb553606
TLSH
T1D8F00201CE155BD5D46F175D7E235E43466DCDD2020A024852CB2F2C2911D6C83FF525
MD5 SHA1 SHA512 TLSH

Mudderplen/Shirvan/storeslemmernes.oph

SHA256 595bd7f382329496c19d553e1717c2dc7d2b07126e08493fa4260baee61eb779
MD5 86d2d2707b9ee8944bb56acd36466195
SHA1 e13e97db685e1edfdea885fe0e80f478a58cf75e
SHA512 323b939e2e5e70ee68e81a125bc74388e396fd530793e141a0699b813c05c02cf6d7da9e23df7b1894c57c5caadce3fca31d685961cef7dd30064c8c22dcf22b
SSDEEP 3072:t2g7Byzdg2xLxaj9vV9tULGBK2oiIQPh61TDmI5NqyKTavMsU5tTYrzCel:2
TLSH
T15C5502781D2792389BFFDE5A8D540468AC48940343A76C3BD482B0C2DFCD7EA9176B54
MD5 SHA1 SHA512 SSDEEP TLSH

Mudderplen/Shirvan/ticca.sle

SHA256 adb99b275dcd4d657735380ccf7a23318aec8b097b9fb72a4f6f76faa282e4d4
MD5 52b2d6d01f08f75ebc1c5cb49655389d
SHA1 a7d4798265d7d69d268df8c18aedbfc7b371898d
SHA512 e431c8bb2f92c98219920e800c85a38f0ca22337a8e3f7f743f292726b5bf4bb9a440357c07827dfb4c1def954e4b772f10a4f7b9ccc36b293e68b129a3db6c8
SSDEEP 1536:nZEKQzQ26bppj70WaC9f8D4k4i9anQwdxtTWM2DHroHHYOOYHe7gYfjoFlC7SFpH:ipE7
TLSH
T1A9261221681A8B7467260E13A0F73462905292CBA1D6D2811F27FE5F71D19B12CBF6FB
MD5 SHA1 SHA512 SSDEEP TLSH

Mudderplen/Shirvan/uhaandgribelighed.res

SHA256 652b1365671f1e1fa35d22d4517352cad1797b3e3a889f2278f0109c7b69d010
MD5 aa302e8deddfada0b44d76a325a66548
SHA1 4ef4bf662303c1d156bd854d281a1085c164f500
SHA512 71a5213f6edc3587f50cdd659c1a2057da83ac4ffe06076582af59b95dc8f88eae5d827b9a3dee24b2e05f547c2a0271d0b418f5d91e7ac3eb87c685d51bff14
SSDEEP 192:fMm6exW2ZMp1X7bmDdbltPYMxQY/EsFFdCP8OwRWSugofH/PR2UKIR3+EKF/E8kc:RAkKj43VKFw/aLZO
TLSH
T17BF512B590B929CBE562F309833222DE1DD734917E845F86E24163FF3A192501FCE6B6
MD5 SHA1 SHA512 SSDEEP TLSH

Mudderplen/kollokviums.fib

SHA256 0e40cb962b115f702a4af620fad8c86c16bdffb7d556f5e97b0a0ee84f8aa6fc
MD5 3b9b3748564ae033f8ecb964f6474359
SHA1 bafabce6de1b38a255c7330cc440a41da55d7a02
SHA512 a714a130b62a82a3a01485dff8a0c2b152d4837ba23f97509a13750ac74f8df2e5f3503e482c870e884e9d60582b34fc73d78963923271615f96f484266b127b
SSDEEP 48:WO/s5zRArrc733IQHDbIeKBQv3u90V+yICjBKYn0Riw3PEPsYpAf6yrX0b9NovH:oFSr04QHfIeK6vu90V+yRMU4i8es14M
TLSH
T162D37D1ED236074E29B786F479934C142A6006438B1827E87FF75A207458DB562154CF
MD5 SHA1 SHA512 SSDEEP TLSH

Unsparing.Eng

SHA256 3bdd6b4dc9ffcb4e21c264ad9ec236abbab24c7b12b5134cc110430fafd8d942
MD5 71e57e94d78f8893767b559715423dd6
SHA1 d48564e774504c2e879ae54d4399ab87cbd8130a
SHA512 6aa6519d2c91f6be673e19bf142c4703b3edf087d3c07d8fb82cdf233d7939fb607a01b0a8d8d27bcdda684bd7196fc6a410dae3f49beaa08c3e37e653b28fee
SSDEEP 6144:2eysXIzhekU75AxvFdq/+cJ8otjrFXbXs4LCO7hIMphIimpS39ED3z:2eysfk6exNU2C8EFXbXUO7hIMpe/Lz
TLSH
T123B401C811487D87652BE7E49C3ADD1F82E07C7A0EB2C66595B6EFDC5426B483088B73
MD5 SHA1 SHA512 SSDEEP TLSH

delsystemet.ini

SHA256 4f0a8bdae27e9bcd4a846dead50c5a65304878c533aef567d99df10dc2b7c5cc
MD5 985fb81233ab3d27e98e6731ce7c65dc
SHA1 7d8bdbe994c061df8ccfa40b1d372ef7383896a5
SHA512 0a59045cc6e7ae71fbe15e4abbb020692d2d7eb9aaf39522cd46a036634fa2731ae0e612e7ef0946355862934bcf057707bcbb8598eb2a90a516fbc92baeb208
TLSH
T1A911B310CAA989F01C223F56FC049F1263BD6604E9208240DA9763AC0080EBCC33DE2D
MD5 SHA1 SHA512 TLSH

eftertragtelsens.Fly

SHA256 465e4fa59cb46acbaf0942200d1e5dcf6ab258cc198561751f4faea56e9bcfcb
MD5 bd4981d29c5d52884d69c7f57b6a62e3
SHA1 7a2f8ee3edebad1dc8edeeb4776c8d4e3aad3cc4
SHA512 fe8ec7a20f0db4d6330216b2fca423f9596935ea718c7c50622490100f103d2af7c633cb7d6fefd9a15177d6e89a7e04e794798197b47c43c159c6611341fdec
SSDEEP 1536:VQV1vdaji5vLrFyBP3u2aEwJneLpTW6NLvjvE3JcQlJDddqdgtsy:VQVNcjEcxQY5JVj86QfJd
TLSH
T1EE33E06CBB6DA16C4A6131696E2608422F64CD7C42B9D5A3D76F23B631C105E23BC6BC
MD5 SHA1 SHA512 SSDEEP TLSH

fascisticize.txt

SHA256 f2b3e1db86eba4ff7370624e1409de8eb75127744e3c94b0763f3d2735562508
MD5 65aa94f7638b22b3b3e48493177fed1f
SHA1 845d2b663e233496a9db2e5a91013427d17de9e9
SHA512 5a195bb3d6c158a3c78508803ae10837252149f3dde4a4b213d63f156c89f3b958dca41804cba903e395ef2d02037b90846dedcc863cef9d826bfb2b21463106
TLSH
T180F0C05455942D2C3A0D15ED7D5904989345C56A4E24F08ED1655F0AB63A85D8BA9F00
MD5 SHA1 SHA512 TLSH

innage.pro

SHA256 6458c28a785baab98918dd51d3b92bd8d22dfc3f3ee3ceb1de46f2f946bf0f3f
MD5 de5e50bb373923e2d8c6e7f083cd802e
SHA1 ba94c324bbe7237d6cbea6c79b798699d82a068c
SHA512 e9cde6b6b47ab95f63c0d5cf5135c773781571e6d2b0dc51e77348dcca291709a0b748c0f50cf645eef74b66dd87b90afc00de77bca4dafea3fef74799b5af85
SSDEEP 768:N9AYVTyaJB4DTdq3Ac76bwfeLsQrNxs6lb5O3YCoWW7t8UVJeWr:N9AYVTTGTQ76bT9rTKYzLK3Wr
TLSH
T10905E1D968375DA7089BF273BADB1671400B39A401083649795ED22D3D2BF1C9DB831C
MD5 SHA1 SHA512 SSDEEP TLSH

katrinka.jpg

SHA256 0818d97b7d1ad05e418d2f292604b76a9a7d6a2cba44e752789dedfdd55499bf
MD5 22f4a02a4a45fefde866a6f8bebbb8f2
SHA1 c8ad98a2990ddb7e332ce386a8b51025feb82a9f
SHA512 2afc0a82d2af4a747fb853da0a5b71a58573763de8a8a5718843c4e81baf8f7424b33da00925dd4dc57f8579b5778b722af05317003db2da56c0a8e61d11910d
SSDEEP 384:z6zGM6L2m3yhzIU4s4ejpgZxZYo0d8uKmxmiyt52rAfn:ezGMO2mChzJhXpYS48sXP
TLSH
T19B42CF4B82C9E1F363300A7FB0D9691A7F4A576A559C30B587DBA373B409DB4F892234
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer