home

kelk _2013.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from islamictech.slfup.com.
MD5:
375e106f7a1e907e1efbe55b5d1d8245

SHA-1:
87378131e2524e5e782abe0a2e30b9609de18264

SHA-256:
d1e559f08259c0735a7a050895aaf6fe59a7d1ec512e62c1bbaf2ea489805c2c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 9:06:52 AM UTC  (today)

File size:
14.1 MB (14,764,980 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\kelk _2013.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
393216:uWrfmwLU8ypBDLMPAIoGrLPs066IIlM7UB8z6Jy:uWrfjLUjjLMvoG3s08wBrU

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 6B, 55, 2D, 42, 47, E9, 6C, FC, D1, 8D, 1A, 02, E4, 4D, 3D, 02, 0C, 00, 00, 00, 53, 61, 6D, 70, 6C, 65, 31, 45, 2E, 65, 78, 65, EC, 3A, 6D, 74, 14, 55, 96, D5, E9, EA, 4E, 85, 34, A9, 42, 1B, 88, D2, 40, D4, C2, 65, 27, 19, C8, DA, A8, 68, 87, 4C, 33, A6, 43, F3, 11, E8, 24, 74, 37, 06, 92, C8, 8A, 8A, 88, E8, 64, AA, 24, 38, 09, 10, 3B, AD, 79, FD, A6, D1, 99, 71, 77, 3E, 76, 8F, B3, 7B, CE, EE, 1E, D7, 99, B3, CE, 1E, DD, 18, DD, 39, BB, DD, 69, 48, 27, 7C, 49, C2...
 
[+]

Entropy:
7.9972  (probably packed)

The file kelk _2013.exe has been seen being distributed by the following URL.

https://islamictech.slfup.com/.../kelk _2013.exe

Scan kelk _2013.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.