customerloader | latest[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

latest.zip
Size

7.5MB
MD5

07d65ba44a202a668aa3db067af23cdf
SHA1

07b8092ba14620676df52a1b9c80129aeb367c5a
SHA256

00e03b89daa84d0c7d438a24f64659e6d21b21fd88306b79a5d07da719ffe8e8
SHA512

44e8745cced6ed3bfa25c2bc402693cc7a2c92fffaefcc72d04ea87f0f659320f0cdc1d39b599ea52e7ef1d92bd756940def9940db6bb10bc97ef9466c4446ae
SSDEEP

196608:BxR7AWB4PMBJ2UChvHmw4wW4VkfaqYoJ1BothZjNmbFJ+Ro6qJ:rR7AWB40BJ2UoH949Skf51SeFH

Score

10^/10

customerloader

Malware Config

Signatures

Customerloader family
customerloader

Files

latest.zip
.zip
Content Manager.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

25:b0:93:49:8c:5a:54:8d:49:b5:1b:2c:80:8c:ab:4f
Certificate

Issuer

CN=AcClub

Not Before

31/12/2016, 21:00

Not After

30/12/2039, 21:00

Subject

CN=AcClub

Extended Key Usages

ExtKeyUsageCodeSigning

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:97:13:35:b1:a7:55:4c:76:1f:44:2a:39:a2:71:dd:4f:14:a3:3e:08:21:e8:e2:10:a0:59:d7:b4:99:f0:62
Signer

Actual PE Digest

cb:97:13:35:b1:a7:55:4c:76:1f:44:2a:39:a2:71:dd:4f:14:a3:3e:08:21:e8:e2:10:a0:59:d7:b4:99:f0:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.2MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Manifest.json

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

25:b0:93:49:8c:5a:54:8d:49:b5:1b:2c:80:8c:ab:4fCertificate

Extended Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

cb:97:13:35:b1:a7:55:4c:76:1f:44:2a:39:a2:71:dd:4f:14:a3:3e:08:21:e8:e2:10:a0:59:d7:b4:99:f0:62Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 10.2MB - Virtual size: 10.2MB

.rsrc Size: 77KB - Virtual size: 77KB

.reloc Size: 512B - Virtual size: 12B

25:b0:93:49:8c:5a:54:8d:49:b5:1b:2c:80:8c:ab:4f
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

cb:97:13:35:b1:a7:55:4c:76:1f:44:2a:39:a2:71:dd:4f:14:a3:3e:08:21:e8:e2:10:a0:59:d7:b4:99:f0:62
Signer

.text
Size: 10.2MB - Virtual size: 10.2MB

.rsrc
Size: 77KB - Virtual size: 77KB

.reloc
Size: 512B - Virtual size: 12B