Resubmissions

30/05/2023, 15:41

230530-s473hsad67 3

General

  • Target

    SetupFile.rar

  • Size

    21.3MB

  • MD5

    9ba940e567a92f260f22ccd36d9f28c7

  • SHA1

    b87ce74f5956075b5fe7e594d354a7f064d78945

  • SHA256

    e7c6fb0837c62f4bd7bf75e1a664fe789415d3b473e21b88d27bf8c4f16d2d49

  • SHA512

    bad053be5fc4a5d1ae47a55fa2d3f3b1f56b78e3f4c9a1e687eaf283948e884a1e7d52edf52399bf4ccdcadf095e81f6d8c220719e366abefd8c4583f814b411

  • SSDEEP

    393216:yqdgagyuzGxkp2BTpgghMbqOJHyH1xqSJuzQ0pUX0mkzkEtUIXX5E:/g3yMGxT/umRH1vJ49pUX0vzP5E

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • SetupFile.rar
    .rar
  • SetupFile/About/ActiveXInstallService.admx
  • SetupFile/About/AddRemovePrograms.admx
  • SetupFile/About/AppCompat.admx
  • SetupFile/About/AppXRuntime.admx
    .xml
  • SetupFile/About/AppxPackageManager.admx
  • SetupFile/About/AttachmentManager.admx
  • SetupFile/About/AuditSettings.admx
    .xml
  • SetupFile/About/AutoPlay.admx
  • SetupFile/About/Biometrics.admx
  • SetupFile/About/CEIPEnable.admx
  • SetupFile/About/COM.admx
  • SetupFile/About/CipherSuiteOrder.admx
  • SetupFile/About/ControlPanel.admx
  • SetupFile/About/Cpls.admx
  • SetupFile/About/CredUI.admx
  • SetupFile/About/CredentialProviders.admx
  • SetupFile/About/CtrlAltDel.admx
  • SetupFile/About/DCOM.admx
  • SetupFile/About/DFS.admx
  • SetupFile/About/DWM.admx
  • SetupFile/About/DeviceCompat.admx
  • SetupFile/About/DeviceSetup.admx
  • SetupFile/About/DigitalLocker.admx
  • SetupFile/About/DiskDiagnostic.admx
  • SetupFile/About/DiskNVCache.admx
  • SetupFile/About/DiskQuota.admx
  • SetupFile/About/DistributedLinkTracking.admx
  • SetupFile/About/EAIME.admx
  • SetupFile/About/EarlyLaunchAM.admx
  • SetupFile/About/EdgeUI.admx
  • SetupFile/About/EncryptFilesonMove.admx
  • SetupFile/About/Engine.dll
    .dll windows x64

    Password: 2023

    84f0be4fead8f529deb9fc674f592461


    Headers

    Imports

    Exports

    Sections

  • SetupFile/About/EventForwarding.admx
    .xml
  • SetupFile/About/EventViewer.admx
  • SetupFile/About/Explorer.admx
  • SetupFile/About/ExternalBoot.admx
    .xml
  • SetupFile/About/FileHistory.admx
  • SetupFile/About/FileRecovery.admx
  • SetupFile/About/FileRevocation.admx
  • SetupFile/About/FileServerVSSProvider.admx
  • SetupFile/About/FileSys.admx
    .xml
  • SetupFile/About/FolderRedirection.admx
  • SetupFile/About/FramePanes.admx
  • SetupFile/About/GameExplorer.admx
  • SetupFile/About/GroupPolicy-Server.admx
  • SetupFile/About/Help.admx
  • SetupFile/About/HelpAndSupport.admx
  • SetupFile/About/IIS.admx
  • SetupFile/About/InkWatson.admx
  • SetupFile/About/Kerberos.admx
  • SetupFile/About/LanmanServer.admx
  • SetupFile/About/LeakDiagnostic.admx
  • SetupFile/About/LinkLayerTopologyDiscovery.admx
  • SetupFile/About/LocationProviderAdm.admx
  • SetupFile/About/MMC.admx
  • SetupFile/About/MMCSnapIns2.admx
  • SetupFile/About/MSDT.admx
  • SetupFile/About/MediaCenter.admx
  • SetupFile/About/MobilePCMobilityCenter.admx
  • SetupFile/About/MobilePCPresentationSettings.admx
  • SetupFile/About/Msi-FileRecovery.admx
  • SetupFile/About/NAPXPQec.admx
  • SetupFile/About/NCSI.admx
  • SetupFile/About/NetworkIsolation.admx
  • SetupFile/About/NetworkProjection.admx
  • SetupFile/About/P2P-pnrp.admx
  • SetupFile/About/ParentalControls.admx
  • SetupFile/About/PeerToPeerCaching.admx
  • SetupFile/About/PenTraining.admx
  • SetupFile/About/PerformanceDiagnostics.admx
  • SetupFile/About/Sharing.admx
  • SetupFile/About/Shell-CommandPrompt-RegEditTools.admx
  • SetupFile/About/ShellWelcomeCenter.admx
  • SetupFile/About/Sidebar.admx
  • SetupFile/About/SkyDrive.admx
    .xml
  • SetupFile/About/Snis.admx
  • SetupFile/About/Snmp.admx
  • SetupFile/About/SoundRec.admx
  • SetupFile/About/SystemRestore.admx
  • SetupFile/About/TPM.admx
  • SetupFile/About/TaskScheduler.admx
  • SetupFile/About/Thumbnails.admx
  • SetupFile/About/TouchInput.admx
  • SetupFile/About/W32Time.admx
  • SetupFile/About/WCM.admx
  • SetupFile/About/WDI.admx
  • SetupFile/About/WPN.admx
  • SetupFile/About/WinCal.admx
    .xml
  • SetupFile/About/WinInit.admx
  • SetupFile/About/WinLogon.admx
  • SetupFile/About/WindowsAnytimeUpgrade.admx
  • SetupFile/About/WindowsBackup.admx
  • SetupFile/About/WindowsColorSystem.admx
  • SetupFile/About/WindowsConnectNow.admx
  • SetupFile/About/WindowsFileProtection.admx
  • SetupFile/About/WindowsMail.admx
  • SetupFile/About/WindowsMediaDRM.admx
  • SetupFile/About/WindowsMessenger.admx
  • SetupFile/About/WindowsProducts.admx
  • SetupFile/About/WindowsRemoteShell.admx
  • SetupFile/About/WindowsServer.admx
  • SetupFile/About/Winsrv.admx
  • SetupFile/About/WordWheel.admx
  • SetupFile/About/WorkFolders-Client.admx
  • SetupFile/About/WorkplaceJoin.admx
    .xml
  • SetupFile/About/data
  • SetupFile/About/en-US/ActiveXInstallService.adml
    .xml
  • SetupFile/About/en-US/AppXRuntime.adml
    .xml
  • SetupFile/About/en-US/AppxPackageManager.adml
    .xml
  • SetupFile/About/en-US/AuditSettings.adml
    .xml
  • SetupFile/About/en-US/AutoPlay.adml
    .xml
  • SetupFile/About/en-US/Biometrics.adml
    .xml
  • SetupFile/About/en-US/CEIPEnable.adml
    .xml
  • SetupFile/About/en-US/COM.adml
    .xml
  • SetupFile/About/en-US/Cpls.adml
    .xml
  • SetupFile/About/en-US/CredUI.adml
    .xml
  • SetupFile/About/en-US/CredentialProviders.adml
    .xml
  • SetupFile/About/en-US/CtrlAltDel.adml
    .xml
  • SetupFile/About/en-US/DCOM.adml
    .xml
  • SetupFile/About/en-US/DFS.adml
    .xml
  • SetupFile/About/en-US/DWM.adml
    .xml
  • SetupFile/About/en-US/DeviceCompat.adml
    .xml
  • SetupFile/About/en-US/DigitalLocker.adml
    .xml
  • SetupFile/About/en-US/DiskDiagnostic.adml
    .xml
  • SetupFile/About/en-US/DiskNVCache.adml
    .xml
  • SetupFile/About/en-US/DistributedLinkTracking.adml
    .xml
  • SetupFile/About/en-US/EarlyLaunchAM.adml
  • SetupFile/About/en-US/EdgeUI.adml
    .xml
  • SetupFile/About/en-US/EncryptFilesonMove.adml
    .xml
  • SetupFile/About/en-US/EventForwarding.adml
    .xml
  • SetupFile/About/en-US/EventViewer.adml
    .xml
  • SetupFile/About/en-US/Explorer.adml
    .xml
  • SetupFile/About/en-US/ExternalBoot.adml
    .xml
  • SetupFile/About/en-US/FileHistory.adml
    .xml
  • SetupFile/About/en-US/FileRecovery.adml
    .xml
  • SetupFile/About/en-US/FileRevocation.adml
    .xml
  • SetupFile/About/en-US/FileServerVSSProvider.adml
    .xml
  • SetupFile/About/en-US/FileSys.adml
    .xml
  • SetupFile/About/en-US/FramePanes.adml
    .xml
  • SetupFile/About/en-US/GameExplorer.adml
    .xml
  • SetupFile/About/en-US/GroupPolicy-Server.adml
    .xml
  • SetupFile/About/en-US/HelpAndSupport.adml
    .xml
  • SetupFile/About/en-US/IIS.adml
    .xml
  • SetupFile/About/en-US/InkWatson.adml
    .xml
  • SetupFile/About/en-US/LeakDiagnostic.adml
    .xml
  • SetupFile/About/en-US/LinkLayerTopologyDiscovery.adml
    .xml
  • SetupFile/About/en-US/LocationProviderAdm.adml
    .xml
  • SetupFile/About/en-US/MMC.adml
    .xml
  • SetupFile/About/en-US/MMCSnapIns2.adml
    .xml
  • SetupFile/About/en-US/MSDT.adml
    .xml
  • SetupFile/About/en-US/MediaCenter.adml
    .xml
  • SetupFile/About/en-US/MobilePCMobilityCenter.adml
    .xml
  • SetupFile/About/en-US/MobilePCPresentationSettings.adml
    .xml
  • SetupFile/About/en-US/Msi-FileRecovery.adml
    .xml
  • SetupFile/About/en-US/NAPXPQec.adml
    .xml
  • SetupFile/About/en-US/NCSI.adml
    .xml
  • SetupFile/About/en-US/NetworkProjection.adml
    .xml
  • SetupFile/About/en-US/ParentalControls.adml
    .xml
  • SetupFile/About/en-US/PenTraining.adml
    .xml
  • SetupFile/About/en-US/PerformancePerftrack.adml
    .xml
  • SetupFile/About/en-US/PreviousVersions.adml
    .xml
  • SetupFile/About/en-US/PswdSync.adml
    .xml
  • SetupFile/About/en-US/RacWmiProv.adml
    .xml
  • SetupFile/About/en-US/Radar.adml
    .xml
  • SetupFile/About/en-US/ReAgent.adml
    .xml
  • SetupFile/About/en-US/Reliability.adml
    .xml
  • SetupFile/About/en-US/Securitycenter.adml
    .xml
  • SetupFile/About/en-US/Sensors.adml
    .xml
  • SetupFile/About/en-US/ServerManager.adml
    .xml
  • SetupFile/About/en-US/Servicing.adml
    .xml
  • SetupFile/About/en-US/Setup.adml
    .xml
  • SetupFile/About/en-US/SharedFolders.adml
    .xml
  • SetupFile/About/en-US/Sharing.adml
    .xml
  • SetupFile/About/en-US/Shell-CommandPrompt-RegEditTools.adml
    .xml
  • SetupFile/About/en-US/ShellWelcomeCenter.adml
    .xml
  • SetupFile/About/en-US/Sidebar.adml
    .xml
  • SetupFile/About/en-US/SkyDrive.adml
    .xml
  • SetupFile/About/en-US/Snis.adml
    .xml
  • SetupFile/About/en-US/Snmp.adml
    .xml
  • SetupFile/About/en-US/SoundRec.adml
    .xml
  • SetupFile/About/en-US/SystemRestore.adml
    .xml
  • SetupFile/About/en-US/Thumbnails.adml
    .xml
  • SetupFile/About/en-US/TouchInput.adml
    .xml
  • SetupFile/About/en-US/WDI.adml
    .xml
  • SetupFile/About/en-US/WinCal.adml
    .xml
  • SetupFile/About/en-US/WinInit.adml
    .xml
  • SetupFile/About/en-US/WindowsAnytimeUpgrade.adml
    .xml
  • SetupFile/About/en-US/WindowsBackup.adml
    .xml
  • SetupFile/About/en-US/WindowsColorSystem.adml
    .xml
  • SetupFile/About/en-US/WindowsConnectNow.adml
    .xml
  • SetupFile/About/en-US/WindowsFileProtection.adml
    .xml
  • SetupFile/About/en-US/WindowsMail.adml
    .xml
  • SetupFile/About/en-US/WindowsMediaDRM.adml
    .xml
  • SetupFile/About/en-US/WindowsMessenger.adml
    .xml
  • SetupFile/About/en-US/WindowsProducts.adml
    .xml
  • SetupFile/About/en-US/WindowsRemoteShell.adml
    .xml
  • SetupFile/About/en-US/WindowsServer.adml
    .xml
  • SetupFile/About/en-US/Winsrv.adml
    .xml
  • SetupFile/About/en-US/WordWheel.adml
    .xml
  • SetupFile/About/en-US/WorkFolders-Client.adml
    .xml
  • SetupFile/About/en-US/WorkplaceJoin.adml
    .xml
  • SetupFile/About/en-US/fthsvc.adml
    .xml
  • SetupFile/About/en-US/hotspotauth.adml
    .xml
  • SetupFile/About/en-US/iSCSI.adml
    .xml
  • SetupFile/About/en-US/msched.adml
    .xml
  • SetupFile/About/en-US/sdiageng.adml
    .xml
  • SetupFile/About/en-US/wlansvc.adml
    .xml
  • SetupFile/About/en-US/wwansvc.adml
    .xml
  • SetupFile/About/fthsvc.admx
  • SetupFile/About/hotspotauth.admx
  • SetupFile/About/iSCSI.admx
  • SetupFile/About/kdc.admx
  • SetupFile/About/msched.admx
    .xml
  • SetupFile/About/nca.admx
  • SetupFile/About/pca.admx
  • SetupFile/About/srm-fci.admx
  • SetupFile/About/wlansvc.admx
    .xml
  • SetupFile/About/wwansvc.admx
    .xml
  • SetupFile/Readme.txt
  • SetupFile/Setup_win32_64.exe
    .exe windows x86

    Password: 2023

    4a6848afc7725f7a28c717e5160939cf


    Headers

    Imports

    Sections

  • SetupFile/package/Bin/WidevineCdm/4.10.2209.0/_metadata/verified_contents.json
  • SetupFile/package/Bin/WidevineCdm/4.10.2209.0/_platform_specific/win_x86/widevinecdm.dll
    .dll windows x86

    Password: 2023

    0b5d0e0a9e6cf85570f75da0455465ed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupFile/package/Bin/WidevineCdm/4.10.2209.0/_platform_specific/win_x86/widevinecdm.dll.sig
  • SetupFile/package/Bin/WidevineCdm/4.10.2209.0/cef.pak
    .js
  • SetupFile/package/Bin/WidevineCdm/4.10.2209.0/manifest.fingerprint
  • SetupFile/package/Bin/WidevineCdm/4.10.2209.0/manifest.json
  • SetupFile/package/Bin/cef.pak
    .js
  • SetupFile/package/Engine.dll
    .dll windows x64

    Password: 2023

    84f0be4fead8f529deb9fc674f592461


    Headers

    Imports

    Exports

    Sections

  • SetupFile/package/cef.pak
    .js
  • SetupFile/package/libintl-8.dll
    .dll windows x64

    Password: 2023

    eeaab5e869156145e036dcce679fb0a9


    Headers

    Imports

    Exports

    Sections

  • SetupFile/package/libwinpthread-1.dll
    .dll windows x64

    Password: 2023

    22ec93d55773cd5a4e361857683e4a86


    Headers

    Imports

    Exports

    Sections