SeleneCore.pext
- SHA256 a943bdd71f4303e08f2354a113d9dd27bee49c463856d4ce298987e5f48025dd
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SeleneCore.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
SeleneCore.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
SeleneHelper.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
SeleneHelper.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target SeleneCore.pext
- Size 496KB
- Sample261027-wk6bcswsdv
- SHA256 a943bdd71f4303e08f2354a113d9dd27bee49c463856d4ce298987e5f48025dd
- MD5 21e462abf1643ecdd454c196b5b396c4
- SHA1 594ef29c07e501516de2b14bf1a0111d0c5c798d
- SHA512 481f9e2c7fe7dfb2632094714c4670bf835732fb788281c50becde0075feb8c16dd08c40922593542d09f26b95510e10f002b30dc01f17a9e4768e42026d0915
- SSDEEP 12288:XaIdI1v09BtdP15BBBUbpdtVkhuLf3PRWCVT1OpOt5GwYvbL4P:qrv0Vd7BBymhk3RW6qpt8P
- TLSH T1E5B423860BAF2FEE674FD2D1387BEDAA640525C641757ED1A362A78C4721A1CC3F014B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/SeleneCore.dll unpack001/SeleneHelper.exe
File Explorer
-
SeleneCore.pext.zip 496KB
-
Localization\en_US.xaml261B
-
SeleneCore.dll.dll 1.1MB
-
SeleneHelper.exe.exe 11KB
-
extension.yaml170B
-
icon.png.png 24KB
Localization\en_US.xaml
- SHA256 b65596ec56642e7bfb4fb3858ec8f2ce40df32ba37649b4e574d01908d3e4914
- MD5 1ca6aa48f44254aec78d992c76bcd199
- SHA1 e6f68352fded9e6f41985d7df50b0c97c9983b6b
- SHA512 be7a7bec5e9b54f5fb49ae6efd54652c47474871fe1baae372db7d6728c326c66c6edf0803e1bb34ff0c3727a5f290a9bcdd19d7262f997c16c4387fdd1f15f8
- TLSH T12FD0A78298158405DA37C96220C1F00070B4294B88E6E97EB8DC150C3FB51C31527E95
- MD5 SHA1 SHA512 TLSH
SeleneCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 386c21c27dff05303b12ecc77ace943ee3175f65d8a97de7365647b3d14db98d
- MD5 8b84bd636c9b3247cb95dddbdb357ff5
- SHA1 2f46844e052b24a71e913586d4d6569050ce15e1
- SHA512 49e3efb79365d8d0a98daf39fc378e2f9eca15474914d6c1b4a349e473129a1cce4dbbb51a3ea73d7e936a7e9c334b4ff4f734bfaa98a7ad6ab9129b9999603d
- SSDEEP 12288:AU730BUOwD8jVCdcOy6DZgsfK3ustrjIxPIXOR9D00niXpg3bQ:lQDVCA6DTIrjmPIeRk
- TLSH T13F452B0C67F48761DAFF5BB1B47019198B74F827D639EB8E1CC2A4DA0A66740DE04B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1196686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SeleneHelper.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f91433734a99116dae4b4a364143b4d9d3e79e3d50e77c6ef6404248eb131317
- MD5 0f62617f7ed02840994db46fa6f61e47
- SHA1 56ccf2ec94f552ee538e158e9f1ea94e89fca6aa
- SHA512 f43a86aab789d8e3f8ecb1b0fa02e4ea9071a08824874bf7a31f353a3de2124ae0aacfc74653e27719110ae107193d9ae4881ae1caad240913a16dc7938b3df5
- SSDEEP 192:vsQAjpreUol+nFsMnGJjNdvKhq/eTjOYW/j030wfA:NAjp9oGsy+j3vKQlYWbQ0wf
- TLSH T1AE322901BBEC81B1E1FE47781C731B180772FA264E6AC78D04D9657E5EB63818552BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
extension.yaml
- SHA256 191885017f8656d26a534a42c01eb324b7141d40c43672ed70444bf3d69ac498
- MD5 d366e90802c0c4665be93f214eb2c452
- SHA1 be188900196a76eaf292ad6bdc401c1123194049
- SHA512 cfd3c32e0d642d398dd5d29635f486e3ba3a4c8bf471a3bc8611c7c6596967262330f202269717bbf9d99de29da17ddcb785f67181ff91e99c61b58cf3abf747
- TLSH T125C08004A30D80207F354D5F959C5BD3E76C073CF671067425480FFC08668D486C8334
- MD5 SHA1 SHA512 TLSH
icon.png
- SHA256 64dcd6ac29cf5781d8b90bc4c02c59aae81386f5b6071c02846094c5e3435944
- MD5 896f7283ad4702e6417fb0a131eb9995
- SHA1 405ca6800d12a7385c04ee0d88a0e20d1b85f4ee
- SHA512 295dc0de6f5acaa709abf8397efdcc3a8f64e29079ed9469f46cd22d69edbdcdb297e46031f0c005030b1abf1a6afc9f21a98d89c5af84580f01dda79a2b86d0
- SSDEEP 768:1rcXNS3+BV9MeOnNrlU7+A75nDhRnwYPk:esuMNBC+kn7wYPk
- TLSH T150B2E15AF15D80B9DF05E148070BA5C3B919E9CF1BE4941BF8E49CABD3B2C1811E627E
- MD5 SHA1 SHA512 SSDEEP TLSH