SecuriteInfo[.]com[.]generic[.]ml[.]28832[.]5563

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.generic.ml.28832.5563
Size 703KB
Sample220824-vb858ahda3
SHA256 df06ee14dcd8d18eae4a818033bd9c3a2971adcf7c0fe9a2ee563a95e975286f
MD5 59a1161fe436923764b751a8d606d7c4
SHA1 862aedc2a4497f613a173d45fc2f585521e4b069
SHA512 b7133cf1c34067c6ede305cf45c2d47fe66e5be9c8ad4b871e3cc9ff51656f210b34e6cab8402bec989e0f6732aa33a5c35116094cff04d9ef9dac28137f877b
SSDEEP 12288:CkDMUcdPxNwxbZquT5GABx8Uh5JuY6ug7h0jtxP2M:CkPcd0xbZNVGABOUEYvKSf2M
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

SecuriteInfo.com.generic.ml.28832.5563

.exe 703KB

SecuriteInfo.com.generic.ml.28832.5563

IMPHASH b78ecf47c0a3e24a6f4af114e2d1f5de
SHA256 df06ee14dcd8d18eae4a818033bd9c3a2971adcf7c0fe9a2ee563a95e975286f
MD5 59a1161fe436923764b751a8d606d7c4
SHA1 862aedc2a4497f613a173d45fc2f585521e4b069
SHA512 b7133cf1c34067c6ede305cf45c2d47fe66e5be9c8ad4b871e3cc9ff51656f210b34e6cab8402bec989e0f6732aa33a5c35116094cff04d9ef9dac28137f877b
SSDEEP 12288:CkDMUcdPxNwxbZquT5GABx8Uh5JuY6ug7h0jtxP2M:CkPcd0xbZNVGABOUEYvKSf2M
MD5 SHA1 SHA512 SSDEEP

windows x86

NSIS installer

installer

PE Signature issue

Digest

ff:db:d1:01:98:40:b5:3f:91:58:4c:8e:f2:14:ea:08:3b:95:e6:54:a2:a5:4b:c6:03:46:5d:09:89:52:68:c0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

PE Signature issue

Digest

d8:d5:5a:c6:01:70:22:4a:aa:5d:1c:42:a3:97:22:75:de:2c:5b:b6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Subject

CN=Skrydede Torskefiskeriet\ ,OU=Instruktionsfelts Overartificial Deckhouses\ ,O=Tillodontidae,L=Raymond,ST=Maine,C=US,1.2.840.113549.1.9.1=#0c17536172746f7269616e40456c6f637574696f6e732e4661

Serial Number

40:f8:53:75:48:e2:d9:1e

Issuer

CN=Skrydede Torskefiskeriet\ ,OU=Instruktionsfelts Overartificial Deckhouses\ ,O=Tillodontidae,L=Raymond,ST=Maine,C=US,1.2.840.113549.1.9.1=#0c17536172746f7269616e40456c6f637574696f6e732e4661

Timespan

Jul 8, 2022 - Jul 7, 2025

Subject

CN=Skrydede Torskefiskeriet\ ,OU=Instruktionsfelts Overartificial Deckhouses\ ,O=Tillodontidae,L=Raymond,ST=Maine,C=US,1.2.840.113549.1.9.1=#0c17536172746f7269616e40456c6f637574696f6e732e4661

Serial Number

40:f8:53:75:48:e2:d9:1e

Issuer

CN=Skrydede Torskefiskeriet\ ,OU=Instruktionsfelts Overartificial Deckhouses\ ,O=Tillodontidae,L=Raymond,ST=Maine,C=US,1.2.840.113549.1.9.1=#0c17536172746f7269616e40456c6f637574696f6e732e4661

Timespan

Jul 8, 2022 - Jul 7, 2025

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

12505

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA GetFileAttributesA SetFileAttributesA GetWindowsDirectoryA GetTempPathA GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA ExitProcess GetFullPathNameA GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA ReadFile WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress CloseHandle SetCurrentDirectoryA MoveFileA CompareFileTime GetShortPathNameA SearchPathA lstrcmpiA SetFileTime lstrcmpA ExpandEnvironmentStringsA GlobalUnlock GetDiskFreeSpaceA GlobalFree FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GetExitCodeProcess WaitForSingleObject GlobalAlloc

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegEnumValueA RegDeleteValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance