Luxembourg-Swiss-French.zip
- SHA256 5963260ab8a16a88b0ca927b469d83a28920e87c4ca2cd6dbcd7a7f3c2170bcb
Overview
overview
7Static
static
3Luxembourg...lu.dll
windows10-2004-x64
1Luxembourg...lu.dll
windows11-ltsc_2024-x64
1Luxembourg...64.msi
windows10-2004-x64
7Luxembourg...64.msi
windows11-ltsc_2024-x64
7Luxembourg...86.msi
windows10-2004-x64
6Luxembourg...86.msi
windows11-ltsc_2024-x64
6Luxembourg...lu.dll
windows10-2004-x64
3Luxembourg...lu.dll
windows11-ltsc_2024-x64
3Luxembourg...up.exe
windows10-2004-x64
1Luxembourg...up.exe
windows11-ltsc_2024-x64
1Luxembourg...lu.dll
windows10-2004-x64
3Luxembourg...lu.dll
windows11-ltsc_2024-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Luxembourg-Swiss-French/amd64/aqlu.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Luxembourg-Swiss-French/amd64/aqlu.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Luxembourg-Swiss-French/aqlu_amd64.msi
Resource
win10v2004-20260911-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral4
Sample
Luxembourg-Swiss-French/aqlu_amd64.msi
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral5
Sample
Luxembourg-Swiss-French/aqlu_i386.msi
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
Luxembourg-Swiss-French/aqlu_i386.msi
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral7
Sample
Luxembourg-Swiss-French/i386/aqlu.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
Luxembourg-Swiss-French/i386/aqlu.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
Luxembourg-Swiss-French/setup.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Luxembourg-Swiss-French/setup.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Luxembourg-Swiss-French/wow64/aqlu.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Luxembourg-Swiss-French/wow64/aqlu.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Luxembourg-Swiss-French.zip
- Size 128KB
- Sample261113-lwt3csts2j
- SHA256 5963260ab8a16a88b0ca927b469d83a28920e87c4ca2cd6dbcd7a7f3c2170bcb
- MD5 de0657a06bd5241c128d6446a08c00c6
- SHA1 1c12ea27c379f01a768db658a21c317f82f14553
- SHA512 8cc6a7e3b22f112a8ec9f7480bf8091661e98e453427656c115205e07b56e74cfdc95fc6e89e88a8d9711a45dfb14bfd53774c7ddd247539d0f69caeed448d75
- SSDEEP 3072:IOGfSWmNFZDZdp0pD6R2urs11w634PiSxP65GSs1u:IdKFTldM6R2uYm6Qfu
- TLSH T1D4D30269D3C0BEC1C1BBEB7E3A789EDEE95223415627B5490A1D03F6C1562C5B900BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned MSI 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Luxembourg-Swiss-French/aqlu_i386.msi - Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Luxembourg-Swiss-French/amd64/aqlu.dll unpack001/Luxembourg-Swiss-French/i386/aqlu.dll unpack001/Luxembourg-Swiss-French/setup.exe unpack001/Luxembourg-Swiss-French/wow64/aqlu.dll
File Explorer
-
Luxembourg-Swiss-French.zip.zip 128KB
-
Luxembourg-Swiss-French/LICENSE1KB
-
Luxembourg-Swiss-French/README.txt3KB
-
Luxembourg-Swiss-French/THIRD_PARTY_NOTICES.md790B
-
Luxembourg-Swiss-French/amd64/aqlu.dll.dll 7KB
-
Luxembourg-Swiss-French/aqlu_amd64.msi.msi 128KB
-
Luxembourg-Swiss-French/aqlu_i386.msi.msi 128KB
-
Luxembourg-Swiss-French/i386/aqlu.dll.dll 6KB
-
Luxembourg-Swiss-French/practice.txt5KB
-
Luxembourg-Swiss-French/practice/long.txt1KB
-
Luxembourg-Swiss-French/practice/medium.txt2KB
-
Luxembourg-Swiss-French/practice/short.txt1KB
-
Luxembourg-Swiss-French/setup.exe.exe .ps1 67KB
-
Luxembourg-Swiss-French/wow64/aqlu.dll.dll 7KB
Luxembourg-Swiss-French/LICENSE
- SHA256 d030d980cd4649cefce0aa603c1b67f2cc7c4537d976569eb90d0f018ce5a95e
- MD5 39a3af8ea03a8d22937ade8d9d192fee
- SHA1 b73ff5b0b2085b06e178e3a208c46a18b249942d
- SHA512 55e862ddef95867f88c3d5f14c62c46685b06dc4bdcd6226ebc453bb465179d9ae3ae4c64ced8d3fa59c6ff4b8959a01a55fb02ff776baa2d180f4d9bec4643e
- TLSH T12211421E72510BA2289B23605578ACD5B22BB25A7A5F2A84246DF345233A06CC5FB840
- MD5 SHA1 SHA512 TLSH
Luxembourg-Swiss-French/README.txt
- SHA256 a8363397ee83cd22e9db4c8c21e58a74272a4a5526ef1a617ef9d2b28d3ebd7f
- MD5 fa9c5e93c1cdae4b40603d64c75da13f
- SHA1 cffe10ea9c949e7bfd38892e377520984801842e
- SHA512 47fb5966c37675bbc1f9e1d144cf2a2914fafe7347441238a754403ba29c87bd007cbcce6e7eda08bf9ff8d6e6ce352a7ce25a4b2547628a4008739b48427d72
- TLSH T10971C62D62B423E39AD213DBF30AD583CD3481645147E24A49B7439053AB4DCE28BBD8
- MD5 SHA1 SHA512 TLSH
Luxembourg-Swiss-French/THIRD_PARTY_NOTICES.md
- SHA256 97627d8ec0a56a75689b92d7035ba9e3d9eacbda693f268da8dd1ee09ef063ec
- MD5 1f5b0b63d2b06774fa1e96adcbcebc91
- SHA1 2808081d83e90e1745a980323b645903b4a69265
- SHA512 974a4843cf784056922ea3b5a206722a8499d0af2c48741f8f52744a716656af1d1641e0ea9898c516f86c3122cbd80a1a22e573d4ae1b48484e5d8083e9b308
- TLSH T13701CE1BD219B6626F9321E6920C6F57F55F62E72B46CFE01006408AA66328AC19B24B
- MD5 SHA1 SHA512 TLSH
Luxembourg-Swiss-French/amd64/aqlu.dll
- SHA256 de2970c5119038a5bb6eca0bce2a5f58b8772cfc29d0d464882edcd100e41d9f
- MD5 a72e89afe2bfba00a96ecd7fdbb2b72c
- SHA1 522f520c22d71294e9e12aafdb3aeaa780085167
- SHA512 64dfca60c6d5e6c413535ad8a2f8f0b1ef8b68564a1429de261a7a44a407acf1b3251fe723cac577325d08786b9c23e811e329d1e742f6fb982271f6e06db570
- SSDEEP 96:xifDX6s1+fpvRaVlV2tl3Mt54OuH4h6gcl0GT/WWvP8vv:0bX6s+RvC235ONTA/WOs
- TLSH T100F14004EEF4908DF2BBCA38A9B75D26781AFD224032CA5D1180152F4D7B3455F5AB3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
KbdLayerDescriptor
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
214B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Luxembourg-Swiss-French/aqlu_amd64.msi
- SHA256 329aaab9293d0a5cbb8e8f4c2a84c0ec8c021b3a569ae5b2d14ed86f542a8c17
- MD5 2048e5caf6dcc83f07fd7ca458c2420d
- SHA1 4feaf7def55df642e1a2861ce03257fdae8fdb65
- SHA512 ff0a0a4abd131a371642fd187527d62e4222a5e3a02f3ab2de49e28a7b5b138d6bfdc2ebafe6908979e90b69c19f5ea738b03b2dfe682d815798f9c040d74b23
- SSDEEP 1536:yx8fEfvIjLBjvg2g+VXJ3lIMW10i2AinCNu0Vy:cjXInVvngCPIMViG
- TLSH T154D36D0777448333D5C20232452FD7E29F3A9CA84B728513A19EB26D2DB2BD4E6B72D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Luxembourg-Swiss-French/aqlu_i386.msi
- SHA256 8c0aef28463a14c6caad05473a35fe1bd6eb2e2a23c529e1b5f2f3857842af0f
- MD5 726e5ca14c69b6b1124ce53a6de2cdad
- SHA1 745eee4ab508c098b48b8ae65b39efad3c841497
- SHA512 6d5909fc193e25d66d74a8678351f38f0c07e1d3dcb21cdc68c35bdf82d2d5625a5b27a98d02f65fe0a2040ca41f3910c892c538bc5fecb663731e9943c3e7b0
- SSDEEP 1536:Dx8fEfvIjLQvgg+VXJ3lIMW10i2AinCNu0Vz:1jXInQvggCPIMViv
- TLSH T17AD35C1777448333D5C20232852FE7E14F3AACA84B724513A19EB26D2CB1BD4E6B76D5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned MSI
Checks for missing Authenticode signature.
Luxembourg-Swiss-French/i386/aqlu.dll
- SHA256 9e1267e512eca8531e193416e5b862e0692741511fc3cdafc90e3fad93b633de
- MD5 8fb5c6f102508892cfcf3d150780af45
- SHA1 c9f96dfc90fe8d1c68aa4ca8f80dbcda0dac402e
- SHA512 ebfbc938183c5c1df29851754a185ca71d5f6216e0d8843ea88f7b3dbbc9f8efe6670de5922de9ec41ffca246e97db55c1b835a5a27ecd4af577bf2e7246f900
- SSDEEP 48:q2joAAgyncRaarbIIRMaMltvxMSkO3HYcW3W3jHk+oWURvE671rDE082SsqJiy8j:Mcoa/2tl3K32QlO67VEmH/9n
- TLSH T19AD15180DFF5805DF2FFC63C59B661266863BE2291F2CD5D0580195B486F600AF1EB39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KbdLayerDescriptor
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
206B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Luxembourg-Swiss-French/practice.txt
- SHA256 3c61c2548c1b20b4d91a776db3b2bacd291ccde059e01508630c69080bed5b3e
- MD5 883bfd7c9dc3147a853fcde493572966
- SHA1 05ec5f09cbc9ed6f3e97e74d700c1e249f1e8c56
- SHA512 cd10c1545723387f99162702ac92f765a0b0d60f923dd410630ccf6f7352e4354b1db30ee2b7681f336cb3752fc51ef1cf0b8d8492f90a94c22ffdb4ba8bb925
- SSDEEP 96:jAxZltI3nNaYBo692IbsULlDxNw7q1hT2no/9Qeuc16swFj0I:jgZltqNaOo6E6sULlDxNSq1hT2no/SeM
- TLSH T173C1953697C112AEE4C61A54B30DBBA3FC148F6DE15CF224D8B613DE038F458A68DD88
- MD5 SHA1 SHA512 SSDEEP TLSH
Luxembourg-Swiss-French/practice/long.txt
- SHA256 16d2aa02ea3e8a182d4fe5e0d22811fcee9defbd25b87d8d7d226be75115921f
- MD5 d14f4e659321355122705ac67bfb8ea9
- SHA1 93e6ab36b8bcf2a7df9684b0850fe97d81997dde
- SHA512 ad58246ba54f2ca5318d3cb15ec49747a1e2cd325aafb28f9e4cbf69b8a0a488162e68a3c6c1e5b3206c321c977047f243b1804dbc22de1bfeb9104bb2cb1b82
- TLSH T15D317736B3C2125A69C50925730E7EABFD10477FE6A8F214C4F107EF138B458A24CA48
- MD5 SHA1 SHA512 TLSH
Luxembourg-Swiss-French/practice/medium.txt
- SHA256 96eb0011b780eb43608c10767b68534c55b8f633d087e0e325a6ca71be9cb10e
- MD5 d1d1b5a96d46a1dc8c8db0705dd24a3d
- SHA1 e7451ba60fea0ef8ea36787ae9d8b9049a431302
- SHA512 0ebe7c3fa52e7385dedba2f65ddd343e94e3955a3be80e38663f9cbcd701769a9c4e8f542f85a2a71198edf21863bcbc86ee47c9ae01286e163019f16ba70174
- TLSH T15F415321A7C513B8D8C51B94B208A7E3F814966DF44CD1549AB913DD178A48DEB4DE84
- MD5 SHA1 SHA512 TLSH
Luxembourg-Swiss-French/practice/short.txt
- SHA256 d13c37fa777b394171c985d72e2488fb57938f5256723e4d254e4758f65b9d28
- MD5 4b6bac2d122a4cf95f12fc6af873187d
- SHA1 fa8dbbcf61d0342afdc834cf7c859b1c4577aac3
- SHA512 2487f93e712f053ec1cc97ed2eae3e0b33830b091925defbe6e8ff4c610534e5bb42a3f55e9abc6efdc95592307c8495808458541ead0afc3516dd8ce56af976
- TLSH T17031423B069501AFD4C62659B74CF313AC1EDE5C9109F120ECBAB6D9038F86432DAC8C
- MD5 SHA1 SHA512 TLSH
Luxembourg-Swiss-French/setup.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d75f3530e538227d297618f4dd401e08ebb76f4a4b6f49a80adfcb0e260437ca
- MD5 06d4479b76c418343445cfbf8b43b067
- SHA1 971cd6211de5dda55738f0ca1a3af5ddbf130fb5
- SHA512 8ce784629950c0891104564a88b2d8c56a6049d5b251cbb68b7f0d6596ab80324c65431a6da19aa87e6f4e101f00e9d22c072792762f7a0a8cdb29d209058f3c
- SSDEEP 768:bb3so/NiW2QNJHea1PPGzmSn03wVuvz7niEDXTe+7mL62dmXYwDoCAeMqEoVW0eR:v3n3GzZGbDaGg62kYwDoCAexEI6f
- TLSH T10F630652E64A04B5D9F2433EE9432A01FE66517F424133077AFE849D2FFB114836BBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
74478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Luxembourg-Swiss-French/wow64/aqlu.dll
- SHA256 258af58643817c39ecbf804b36396cc35302d50390f18627c97f1afd3d2df484
- MD5 57f8c576cd08044807d421e35822be25
- SHA1 75496dd5d1a473313c6898552bf03f17797cfe7b
- SHA512 63bebf1d8982936a34eaef6479d3673b324d14c4ea36042b8af35f54394606b5933fcfb557f61bbc8175d556f5b3489d11803a019d08048af1d94fd0056d2be6
- SSDEEP 48:qyNoAAgynkyarrIIRMaMltvxMSkOt8ah69elmnVwI4qq6Nk+oWURv9a671rDE084:2PaP2tl3L8WtlmiS1ilO67VEmu/WEX
- TLSH T149F15300DFF4A17DF2FFE63CA8B25226B853BD2241F5D95D0180199B543B600AF5AB3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KbdLayerDescriptor
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,