install[.]exe[.]zip

Resubmissions

18/08/2023, 09:22

230818-lcavdaaa9w8

17/08/2023, 20:37

230817-zemhvaeg7w8

Sharing

Copy URL Twitter E-mail

General

Target
install.exe.zip
Size 3.5MB
Sample230818-lcavdaaa9w
SHA256 9fdb81a04844e08ea6bc057535486c705327cd631cc5683a4b5c9c05648ed7da
MD5 2e1d8dc7e2e14a78a7df67efbeda9901
SHA1 8a4e74861f243ea9c5858b0f16300ec213142f70
SHA512 61e2f0caa3c78700529d5b9e4adf220676d570d472653bc6e8b370b0c78b4a523bc64d493218a11483bf7a85c5228accd7ed9dedc5176b34c5e2cacf6cb1a223
SSDEEP 24576:baCYinu1pAgCjX7TuvMzClhnhDB3FkaMyvmlpQunc1TVlmbCYhAUw2LvMuLZ/:uCYKF72vwInhDBpXcpQucTVLyAUw2M8/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

install.exe.zip

.zip 3.5MB
__MACOSX/._install.exe

472B
install.exe

.exe 302.7MB

install.exe.zip

SHA256 9fdb81a04844e08ea6bc057535486c705327cd631cc5683a4b5c9c05648ed7da
MD5 2e1d8dc7e2e14a78a7df67efbeda9901
SHA1 8a4e74861f243ea9c5858b0f16300ec213142f70
SHA512 61e2f0caa3c78700529d5b9e4adf220676d570d472653bc6e8b370b0c78b4a523bc64d493218a11483bf7a85c5228accd7ed9dedc5176b34c5e2cacf6cb1a223
SSDEEP 24576:baCYinu1pAgCjX7TuvMzClhnhDB3FkaMyvmlpQunc1TVlmbCYhAUw2LvMuLZ/:uCYKF72vwInhDBpXcpQucTVLyAUw2M8/
MD5 SHA1 SHA512 SSDEEP

install.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 250fe7be536bb8674dd7e0e7c4de2ca1e3311ed657181d950dda6590a3bded51
MD5 04afbe50e00b829f468945cf33f2039d
SHA1 0a72d25fd9fe254a77c54bc75a77effbbfe4d31c
SHA512 a9a319eb4565cd9bcf1a8959344de0f95367965f02d687882b1020b8538222c1e74009e18e445f5300425a7ee97ab228a1a618f1d18ee8094cf3ffa57a106629
SSDEEP 49152:Z2gujmmf6sqHeHuAqgJ8ICvgYTau6tjcKWjrXKPtVABwce5ppppppppppppppppC:ZLxBwa
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

3c:e0:62:2a:b3:d0:0f:d6:4e:9e:64:0a:bc:5d:e7:e3:e5:4c:ba:18:f6:57:be:85:2c:1d:5b:be:49:72:4a:d3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=45324891,CN=ТОВ \"Айтипути\",O=ТОВ \"Айтипути\",L=Dnipro,ST=Dnipropetrovsk Oblast,C=UA,1.3.6.1.4.1.311.60.2.1.3=#13025541,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Aug 17, 2023

Subject

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Serial Number

56:b6:29:cd:34:bc:78:f6

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 31, 2017 - May 30, 2042

Subject

Serial Number

1c:63:32:76:c7:07:54:ee:e9:5f:71:36:90:90:e7:2e

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 16, 2023 - Aug 15, 2024

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 26, 2019 - Mar 22, 2034

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 9, 2022 - Dec 6, 2032

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Serial Number

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 11, 2018 - Sep 11, 2023

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

2212942

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

install.exe.zip

__MACOSX/._install.exe

install.exe

PE Signature issue

mscoree