bifrosft by SpY--HackeR pass 123.rar
- SHA256 1f00e560c76fb28ca406f6d0e76941a79d97b671687734a4fcf56df919e369ad
Password
123
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bifrosft by SpY--HackeR/Bifrost By SpY--HackeR.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bifrosft by SpY--HackeR/Bifrost By SpY--HackeR.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
bifrosft by SpY--HackeR/سيرفر خــام/Sever.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
bifrosft by SpY--HackeR/سيرفر خــام/Sever.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target bifrosft by SpY--HackeR pass 123.rar
- Size 623KB
- Sample260928-xts8ts1gpb
- SHA256 1f00e560c76fb28ca406f6d0e76941a79d97b671687734a4fcf56df919e369ad
- MD5 f5cfeefe111107da01c2e05ae3a23f81
- SHA1 e4e0aefd7f88625b94e8dbea620dac9a382a9899
- SHA512 10b31b8758f05003c01358764ee94da0e4326a61cb6788f042bd76b436299c2f750c77efcb093414764054ee1191e2fcc13c18e0ae99e0db15411925be7e21e8
- SSDEEP 12288:kCZ+jktRrCaLnBxGRSnhykt78lTKQJX4GWiB/C23pNf05w+OdgDpdsFARxB:kCZ+QtRLBuLkUGI/CsN85iWmAR7
- TLSH T16AD423A6D43D6EA2AD03CCB9FC9695D53EDF40C884D61ED8FA3F4122239643E885B314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/bifrosft by SpY--HackeR/Bifrost By SpY--HackeR.EXE unpack001/bifrosft by SpY--HackeR/سيرفر خــام/Sever.exe
File Explorer
-
bifrosft by SpY--HackeR pass 123.rar.rar 623KB
-
bifrosft by SpY--HackeR/Bifrost By SpY--HackeR.EXE.exe 1.4MB
-
bifrosft by SpY--HackeR/سيرفر خــام/Sever.exe.exe 30KB
-
bifrosft by SpY--HackeR/قبل الدخول الى البرنامج .txt32B
bifrosft by SpY--HackeR/Bifrost By SpY--HackeR.EXE
- SHA256 786dfa6e1226ff1d05a8cd994acdf75eca880b618a66b11dee8f1aa7672ef677
- MD5 cac195bd39291b4780c70dad1f360cbb
- SHA1 2a870f5bdcc30b9cf42a6cfa3e77f3796066b829
- SHA512 77275a7bfc0c869641951eddb3f8f2b4e16c0a59741dadf885fa5d6744b0a9b16e2d1d029c305bc1fc050e6c9aa8d0022db05316dbab7207a5f21ceb58c85ee3
- SSDEEP 24576:fVcvpec5e0mZf9LhaesZIXFK46Uwb9eS/CoohD3m:fVcvpec5e0mZfOeyVUwbI4CoohD3m
- TLSH T19B658D113F99C0BAC22A127348A6E3366263BD256B345AC35BD13E5EFE345C2BC39745
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
4
Entry point
447689
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
568KB
Virtual Size
568KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
w53sk045
Size
144KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
379KB
Virtual Size
378KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
bm6olccv
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
hhi.jblo
Size
236KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
bifrosft by SpY--HackeR/سيرفر خــام/Sever.exe
- IMPHASH 8afbf9211984274dc7a21b630ecae242
- SHA256 3f3ab939a64a326fe1538a7b9098b48424c5ff9b5f47416adc6542ba42f9e6a6
- MD5 e754d001e0ff7067993ae078387f40d6
- SHA1 b564b4d99550910107c7f1c85c49044e80ed1f0c
- SHA512 1124622ec33b001ff629fb25472eee5699cb095f8e7cd8e61d6ae7867ad3dbe66fbea708ae295001e90fc4930be9093f524c491364aacc674059f9dc2c22a107
- SSDEEP 768:zIPfXOhlKoLxtCt74y/842kGim5admgS0CX0Mu:4CKoLD+h/84UimkdxMu
- TLSH T1FBE2E157469C41A2C59B03BFE067DB852C2AD65083E98F252AFC1B253D73E308F98357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
4
Entry point
31881
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Name
.text
Size
27KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
bifrosft by SpY--HackeR/قبل الدخول الى البرنامج .txt
- SHA256 dc901ca0afe585ccef1f818d24729d76f6455a03fb13e7b748ed5a772906fa31
- MD5 5c60f6f4db513df8882ac5563658e64b
- SHA1 42100649acd3a0b0ae04780cabc7756892de566a
- SHA512 257d181656de7e8aac83aa319e2b6b150d77fee27f57f4b677e8b0574c49d44c930fde6964c54e85234fa5dd50a6392fcbd55577cb7e75b368e2a39b9db1b130
- MD5 SHA1 SHA512