74ac514a05e55f992cb38d2bf37eafb5232a1cee026c378da1cb9fa4a2e7289a

Sharing

Copy URL Twitter E-mail

General

Target
74ac514a05e55f992cb38d2bf37eafb5232a1cee026c378da1cb9fa4a2e7289a
Size 4.3MB
Sample260916-nb4r6stv9m
SHA256 74ac514a05e55f992cb38d2bf37eafb5232a1cee026c378da1cb9fa4a2e7289a
MD5 49895659766c12e9a1c328ae9241feb3
SHA1 4f19a5e5e0c048216588085e2f7b0b15867e4037
SHA512 9c6db6e5598b807d4eb09b08e79ab6a55429800b14f72461e60b66c06c89b17f675815a10cbb09ec7d5132ff95f516ff67bb4846afdee36a93593f9e0fcb9ca8
SSDEEP 98304:/YU5hnuOajWwMPdCpepI3GrwrA+J/333AMg:pxuHjWfZIzMMg
TLSH
T1B8266D03B248A53EE4771A3A583BA280983F7F213925CD4B6BF4395C8F395416D3A767
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

74ac514a05e55f992cb38d2bf37eafb5232a1cee026c378da1cb9fa4a2e7289a

.exe 4.3MB

74ac514a05e55f992cb38d2bf37eafb5232a1cee026c378da1cb9fa4a2e7289a

IMPHASH 4f3a70412c909e6e8f69020f0bee4f39
SHA256 74ac514a05e55f992cb38d2bf37eafb5232a1cee026c378da1cb9fa4a2e7289a
MD5 49895659766c12e9a1c328ae9241feb3
SHA1 4f19a5e5e0c048216588085e2f7b0b15867e4037
SHA512 9c6db6e5598b807d4eb09b08e79ab6a55429800b14f72461e60b66c06c89b17f675815a10cbb09ec7d5132ff95f516ff67bb4846afdee36a93593f9e0fcb9ca8
SSDEEP 98304:/YU5hnuOajWwMPdCpepI3GrwrA+J/333AMg:pxuHjWfZIzMMg
TLSH
T1B8266D03B248A53EE4771A3A583BA280983F7F213925CD4B6BF4395C8F395416D3A767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

01:48:97:c0:23:a8:59:be:5c:43:2c:2f:86:16:35:ba:9a:40:1b:61:de:e7:1b:08:c2:cc:46:08:e5:90:3e:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Kopetra Ltd,O=Kopetra Ltd,L=Tel Aviv-Yafo,C=IL

Chains

Apr 24, 2026

CN=Kopetra Ltd,O=Kopetra Ltd,L=Tel Aviv-Yafo,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Kopetra Ltd,O=Kopetra Ltd,L=Tel Aviv-Yafo,C=IL

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=Kopetra Ltd,O=Kopetra Ltd,L=Tel Aviv-Yafo,C=IL

Serial Number

0b:6e:1c:2b:8b:e1:f0:e8:a7:f4:b6:55:5f:90:4f:06

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 12, 2025 - May 11, 2026

Minor OS version

Major OS version

Entry point

3847784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

mpr

WNetEnumResourceW WNetGetUniversalNameW WNetGetConnectionW WNetCloseEnum WNetOpenEnumW

shlwapi

SHAutoComplete

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW

comdlg32

GetSaveFileNameW GetOpenFileNameW

comctl32

ImageList_GetImageInfo FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add FlatSB_SetScrollProp ImageList_GetDragImage ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB ImageList_Copy FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_LoadImageW ImageList_Draw ImageList_Remove ImageList_ReplaceIcon ImageList_SetOverlayImage

shell32

SHGetFileInfoW SHChangeNotify Shell_NotifyIconW SHAppBarMessage ShellExecuteW ShellExecuteExW

user32

MoveWindow CopyImage SetMenuItemInfoW GetMenuItemInfoW DefFrameProcW ScrollWindowEx GetDlgCtrlID FrameRect RegisterWindowMessageW GetMenuStringW FillRect SendMessageA EnumWindows ShowOwnedPopups GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList OemToCharBuffA LoadBitmapW EnumChildWindows SendNotifyMessageW GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture ShowCaret CreatePopupMenu GetMenuItemID CharLowerBuffW PostMessageW SetWindowLongW IsZoomed SetParent DrawMenuBar GetClientRect IsChild IsIconic CallNextHookEx ShowWindow GetWindowTextW SetForegroundWindow IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC ExitWindowsEx GetClassLongW CharToOemBuffA SetScrollRange DrawTextW PeekMessageA MessageBeep SetClassLongW SetRectEmpty RemovePropW GetSubMenu DestroyIcon IsWindowVisible DispatchMessageA UnregisterClassW GetTopWindow SendMessageW SendMessageTimeoutW LoadStringW CreateMenu CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount GetSysColorBrush GetWindowDC DrawTextExW ReplyMessage GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState ValidateRect GetCursor KillTimer WaitMessage TranslateMDISysAccel GetWindowPlacement CreateIconIndirect CreateWindowExW GetMessageW GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW MapVirtualKeyW OffsetRect IsWindowUnicode DispatchMessageW CreateAcceleratorTableW DefMDIChildProcW WaitForInputIdle GetSystemMenu SetScrollPos GetScrollPos InflateRect DrawFocusRect ReleaseCapture LoadCursorW ScrollWindow GetLastActivePopup GetSystemMetrics CharUpperBuffW SetClipboardData GetClipboardData ClientToScreen SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout GetParent MonitorFromRect InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW EmptyClipboard AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect GetKeyboardState ScreenToClient DrawFrameControl SetCursor CreateIcon RemoveMenu AppendMenuW GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CallWindowProcW CloseClipboard DestroyCursor CopyIcon PostQuitMessage ShowScrollBar LoadImageW EnableMenuItem HideCaret FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowLongW GetWindowRect InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW GetKeyboardLayout DeleteMenu

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

SafeArrayPutElement LoadTypeLib GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate SafeArrayGetElement GetActiveObject SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound RegisterTypeLib VariantCopyInd VariantChangeType

wtsapi32

WTSUnRegisterSessionNotification WTSRegisterSessionNotification

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW RegSetValueExW RegConnectRegistryW OpenThreadToken GetUserNameW RegQueryInfoKeyW RegUnLoadKeyW RegSaveKeyW EqualSid RegReplaceKeyW GetTokenInformation RegCreateKeyExW SetSecurityDescriptorDacl RegLoadKeyW RegEnumKeyExW AdjustTokenPrivileges RegDeleteKeyW LookupPrivilegeValueW RegOpenKeyExW OpenProcessToken AllocateAndInitializeSid FreeSid RegDeleteValueW RegFlushKey RegQueryValueExW RegEnumValueW ConvertSidToStringSidW RegCloseKey InitializeSecurityDescriptor RegRestoreKeyW

msvcrt

memcpy memset

winhttp

WinHttpGetIEProxyConfigForCurrentUser WinHttpSetTimeouts WinHttpSetStatusCallback WinHttpConnect WinHttpReceiveResponse WinHttpQueryAuthSchemes WinHttpGetProxyForUrl WinHttpReadData WinHttpCloseHandle WinHttpQueryHeaders WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpOpen WinHttpWriteData WinHttpSetCredentials WinHttpQueryDataAvailable WinHttpSetOption WinHttpSendRequest WinHttpQueryOption

kernel32

SetFileAttributesW SetFileTime GetACP GetExitCodeProcess CloseHandle LocalFree GetCurrentProcessId SizeofResource VirtualProtect TerminateThread QueryPerformanceFrequency SetHandleInformation IsDebuggerPresent FindNextFileW GetFullPathNameW VirtualFree GetProcessHeap ExitProcess HeapAlloc WriteProfileStringW GetCPInfoExW CompareStringOrdinal GetLongPathNameW RtlUnwind SetFilePointerEx GetCPInfo EnumSystemLocalesW GetStdHandle GetTimeZoneInformation FileTimeToLocalFileTime GetModuleHandleW FreeLibrary TryEnterCriticalSection HeapDestroy CompareFileTime ReadFile CreateProcessW TransactNamedPipe GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW OpenMutexW CreateThread CompareStringW CopyFileW GetFileSizeEx CreateMutexW LoadLibraryA GetVolumeInformationW ResetEvent MulDiv FreeResource GetDriveTypeW GetVersion RaiseException MoveFileW GlobalAddAtomW GetSystemTimeAsFileTime FormatMessageW OpenProcess SwitchToThread GetExitCodeThread GetCurrentThread GetLogicalDrives LocalFileTimeToFileTime SetNamedPipeHandleState LoadLibraryExW TerminateProcess LockResource FileTimeToSystemTime GetShortPathNameW GetCurrentThreadId UnhandledExceptionFilter MoveFileExW PeekNamedPipe GlobalFindAtomW VirtualQuery GlobalFree VirtualQueryEx Sleep EnterCriticalSection SetFilePointer ReleaseMutex FlushFileBuffers LoadResource SuspendThread GetTickCount WritePrivateProfileStringW GetTempFileNameW GlobalDeleteAtom GetStartupInfoW GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetSystemWindowsDirectoryW GetThreadPriority GetCurrentProcess GlobalLock SetThreadPriority VirtualAlloc GetTempPathW GetCommandLineW GetSystemInfo DuplicateHandle LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate GetWindowsDirectoryW DeviceIoControl LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage lstrlenW QueryPerformanceCounter SetEndOfFile lstrcmpW HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW EnumResourceNamesW GetSystemDirectoryW DeleteFileW FormatMessageA GetEnvironmentVariableW GetLocalTime WaitForSingleObject GetFileInformationByHandle WriteFile SetFileInformationByHandle CreateNamedPipeW ExitThread CreatePipe DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode GetComputerNameW IsValidLocale TlsSetValue CreateDirectoryW GetOverlappedResult GetSystemDefaultUILanguage EnumCalendarInfoW GetProfileStringW LocalAlloc GetUserDefaultLangID RemoveDirectoryW CreateEventW GetPrivateProfileStringW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

ole32

StgCreateDocfileOnILockBytes CoCreateInstance CLSIDFromString CoUninitialize IsEqualGUID OleInitialize CoFreeUnusedLibraries CreateILockBytesOnHGlobal CLSIDFromProgID CoInitializeEx OleUninitialize CoDisconnectObject CoInitialize CoTaskMemFree CoTaskMemAlloc StringFromCLSID

gdi32

Pie SetBkMode CreateCompatibleBitmap GetEnhMetaFileHeader RectVisible AngleArc ResizePalette SetAbortProc SetTextColor StretchBlt RoundRect SelectClipRgn RestoreDC SetRectRgn GetTextMetricsW RemoveFontResourceW GetWindowOrgEx CreatePalette PolyBezierTo CreateICW CreateDCW GetStockObject CreateSolidBrush Polygon MoveToEx PlayEnhMetaFile Ellipse StartPage GetBitmapBits StartDocW AbortDoc GetSystemPaletteEntries GetEnhMetaFileBits AddFontResourceW GetEnhMetaFilePaletteEntries CreatePenIndirect CreateFontIndirectW PolyBezier EndDoc GetObjectW GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo Arc SelectPalette ExcludeClipRect MaskBlt SetWindowOrgEx EndPage DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt LineDDA SetEnhMetaFileBits Rectangle SaveDC DeleteDC BitBlt FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox IntersectClipRect Polyline CreateBitmap SetWinMetaFileBits CombineRgn GetStretchBltMode CreateDIBitmap SetStretchBltMode GetDIBits CreateDIBSection LineTo GetRgnBox EnumFontsW CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW SetBkColor CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx GetNearestPaletteIndex GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetPixel EnumFontFamiliesExW StretchDIBits GetPaletteEntries

ntdll

_allshl _aullshr

Name

.text

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

44KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

110B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

92B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

306KB

Virtual Size

305KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

227KB

Virtual Size

227KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

74ac514a05e55f992cb38d2bf37eafb5232a1cee026c378da1cb9fa4a2e7289a

mpr

shlwapi

winspool.drv

comdlg32

comctl32

shell32

user32

version

oleaut32

wtsapi32

advapi32

msvcrt

winhttp

kernel32

ole32

gdi32

ntdll

generic