BrutoForce Seed[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BrutoForce Seed.exe
Size 5.9MB
Sample260827-at49rsybme
SHA256 236d81e49361b1f78f96fedbb6a3c36e11988da1932b6ec1486f15b13846f6c8
MD5 b3868c088380ef51c98159f890c24682
SHA1 0526ddbce09a2c2e89b4e61f6be35a0890859393
SHA512 20a47aa7735cb29ef0c35bddc89dad8a32ace975a65ed9ca9320862d325d2ed1b60717db880700c89f3665f6ee0f15fa59c8e7a3a0df8a82a40b3b4c2556927a
SSDEEP 49152:e9QDZUyJ9u3/allkIO2L8W30Uzo3aNlMGZNC6tarGfn2YxJhC3q+gHdehhg+gzFZ:eSQWYQlk68HKoWVF7AmgDu
TLSH
T143562A117B4A99ACC06AC470824687725A317CCB1B35AAFF41D4B9753FBAAF01F39358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BrutoForce Seed.exe

File Explorer

BrutoForce Seed.exe

.exe 5.9MB

BrutoForce Seed.exe

IMPHASH a6a95b520e829e470536c83fe1a5fb6c
SHA256 236d81e49361b1f78f96fedbb6a3c36e11988da1932b6ec1486f15b13846f6c8
MD5 b3868c088380ef51c98159f890c24682
SHA1 0526ddbce09a2c2e89b4e61f6be35a0890859393
SHA512 20a47aa7735cb29ef0c35bddc89dad8a32ace975a65ed9ca9320862d325d2ed1b60717db880700c89f3665f6ee0f15fa59c8e7a3a0df8a82a40b3b4c2556927a
SSDEEP 49152:e9QDZUyJ9u3/allkIO2L8W30Uzo3aNlMGZNC6tarGfn2YxJhC3q+gHdehhg+gzFZ:eSQWYQlk68HKoWVF7AmgDu
TLSH
T143562A117B4A99ACC06AC470824687725A317CCB1B35AAFF41D4B9753FBAAF01F39358
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3623512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Crypto_Hunter.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

user32

MapVirtualKeyExW GetKeyState GetAsyncKeyState GetKeyboardState SetWindowLongW SendMessageW GetSystemMenu DestroyAcceleratorTable DestroyIcon IsProcessDPIAware GetActiveWindow IsIconic GetCursorPos GetDC PostQuitMessage ShowWindow AppendMenuW CreateMenu CheckMenuItem SetMenuItemInfoW EnableMenuItem SendInput SetForegroundWindow SetWindowDisplayAffinity GetWindowTextW GetWindowTextLengthW SetWindowTextW GetRawInputData ReleaseCapture ClientToScreen SetCursorPos GetForegroundWindow CreateIcon MonitorFromPoint DestroyWindow ValidateRect EnumDisplayMonitors PostThreadMessageW SystemParametersInfoA VkKeyScanW CreateAcceleratorTableW GetUpdateRect RedrawWindow MapVirtualKeyW GetKeyboardLayout GetMessageW GetAncestor TranslateAcceleratorW DefWindowProcW GetWindowLongPtrW IsWindowVisible ClipCursor GetClipCursor ShowCursor AdjustWindowRectEx GetMenu GetWindowRect SetCapture SetWindowLongPtrW MsgWaitForMultipleObjectsEx RegisterRawInputDevices RegisterClassExW RegisterWindowMessageA ToUnicodeEx SetMenu EnumChildWindows GetClientRect GetMessageA DispatchMessageA PostMessageW InvalidateRgn SetWindowPos RegisterTouchWindow GetSystemMetrics IsWindow CreateWindowExW DispatchMessageW TranslateMessage GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW GetMonitorInfoW MonitorFromWindow CloseTouchInputHandle ScreenToClient GetTouchInputInfo GetWindowLongW TrackMouseEvent MonitorFromRect SetCursor LoadCursorW FlashWindowEx PeekMessageW

kernel32

GetUserDefaultUILanguage ReleaseSRWLockExclusive FormatMessageW CloseHandle GetCurrentThreadId AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent RtlUnwindEx RtlPcToFileHeader RaiseException lstrlenW WaitForSingleObject EncodePointer LCIDToLocaleName HeapAlloc GetProcessHeap CreateMutexA WaitForSingleObjectEx GetTempPathW GetFullPathNameW CreateThread HeapFree GetLastError FreeLibrary WideCharToMultiByte WriteConsoleW MultiByteToWideChar ExitProcess GetProcAddress GetFinalPathNameByHandleW FindFirstFileW CreateDirectoryW GetFileInformationByHandleEx CreateFileW FindClose ReleaseMutex GetFileAttributesW GetModuleFileNameW OutputDebugStringA OutputDebugStringW DeleteCriticalSection GetModuleHandleW LoadLibraryExW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue GetEnvironmentVariableW GetSystemInfo LoadLibraryA LoadLibraryW Sleep GetModuleHandleA GetFileInformationByHandle GetConsoleMode HeapReAlloc AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread CreateWaitableTimerExW SetWaitableTimer QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetLastError GetCurrentDirectoryW SetEnvironmentVariableW QueryPerformanceFrequency GetCommandLineW SetFileInformationByHandle GetCurrentProcess TerminateProcess GetCurrentProcessId GetStdHandle TlsFree

gdi32

CreateRectRgn DeleteObject GetDeviceCaps

dwmapi

DwmEnableBlurBehindWindow

ole32

RevokeDragDrop CreateStreamOnHGlobal CoTaskMemFree CoInitializeEx CoUninitialize CoCreateInstance CoTaskMemAlloc OleInitialize RegisterDragDrop

comctl32

SetWindowSubclass RemoveWindowSubclass TaskDialogIndirect DefSubclassProc

shell32

DragFinish ShellExecuteW DragQueryFileW SHGetKnownFolderPath SHCreateItemFromParsingName SHAppBarMessage

oleaut32

SysFreeString GetErrorInfo SetErrorInfo SysStringLen

uxtheme

SetWindowTheme

advapi32

SystemFunction036 EventRegister EventSetInformation EventWriteTransfer EventUnregister RegOpenKeyExW RegGetValueW RegCloseKey RegQueryValueExW

bcrypt

BCryptGenRandom

ntdll

NtWriteFile RtlNtStatusToDosError

api-ms-win-crt-math-l1-1-0

pow __setusermatherr floor round trunc

api-ms-win-crt-string-l1-1-0

wcsncmp _wcsicmp strcpy_s wcslen

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol

api-ms-win-crt-runtime-l1-1-0

_initterm __p___argc _c_exit _initialize_narrow_environment _initterm_e _configure_narrow_argv exit _register_onexit_function _cexit _get_initial_narrow_environment _crt_atexit _exit _set_app_type terminate _seh_filter_exe abort __p___argv _register_thread_local_exe_atexit_callback _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free calloc _callnewh _set_new_mode malloc