General

  • Target

    Publishing.zip

  • Size

    28.2MB

  • MD5

    29e2c1156461738eb44d4356f9864e39

  • SHA1

    1ae88311f8cdc8acbeb887330f71742614b87786

  • SHA256

    cddc6b1ff269b51ba746d923d4e7a61e8fbd232fbe3552447c51e90867b1a692

  • SHA512

    124764730b8c26c995712688af63e02827ceba890eba8190f2b9066fafacc0b328d96e1d91b7f08e80d2f7097d0b6cbed77cf7347e9e1e689930ff8156af17e4

  • SSDEEP

    786432:2jTmzviWynlhO75zNUDQjLRGGd2XIqIyy4:2jazvPClhU5zcaS

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 2 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Publishing.zip
    .zip
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/AdbWinApi.dll.deploy
    .dll windows:6 windows x86 arch:x86

    776334619bd19ec23e3a7a275473b5a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/AdbWinUsbApi.dll.deploy
    .dll windows:6 windows x86 arch:x86

    72b8c869f01047191838df5f58e88dd8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/amd64/WUDFUpdate_01009.dll.deploy
    .dll windows:6 windows x64 arch:x64

    2d556b4fd0343868b288619b2a5c9d8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/amd64/WdfCoInstaller01009.dll.deploy
    .dll windows:6 windows x64 arch:x64

    70497fec79daa5f71de3b34faee686a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/amd64/winusbcoinstaller2.dll.deploy
    .dll windows:6 windows x64 arch:x64

    8248dad30db39242289209dc3ff9aa66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/android_winusb.inf.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/androidwinusb86.cat.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/androidwinusba64.cat.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/i386/WUDFUpdate_01009.dll.deploy
    .dll windows:6 windows x86 arch:x86

    30448524ab936448298b5c1294b1bbbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/i386/WdfCoInstaller01009.dll.deploy
    .dll windows:6 windows x86 arch:x86

    a17af54bf9d379152b9c377204b35eb9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/i386/winusbcoinstaller2.dll.deploy
    .dll windows:6 windows x86 arch:x86

    8346f3fd2848988fb391cc309c0dbe66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/ADB/usb_driver/source.properties.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/QUSBEDL/qcser.cat.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/QUSBEDL/qcser.inf.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/QUSBEDL/serial/amd64/qcusbser.sys.deploy
    .sys windows:10 windows x64 arch:x64

    ba73dbba17071cb4a5b5f43893b70f3c


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/Sony_USB_Drivers/ggsomc.cat.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/Sony_USB_Drivers/ggsomc.inf.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/Sony_USB_Drivers/x64/WdfCoInstaller01009.dll.deploy
    .dll windows:6 windows x64 arch:x64

    70497fec79daa5f71de3b34faee686a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/Sony_USB_Drivers/x64/ggflt.sys.deploy
    .sys windows:10 windows x64 arch:x64

    3d3cce6795db5cf9a1c85aca5667fc7f


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Drivers/Sony_USB_Drivers/x64/ggsomc.sys.deploy
    .sys windows:10 windows x64 arch:x64

    26115ac01e6251c3e8dff8c1986912a5


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/FirehoseFinder.application
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/FirehoseFinder.exe.config.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/FirehoseFinder.exe.deploy
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/FirehoseFinder.exe.manifest
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/ForFilter.xml.deploy
    .xml
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/ForFound.xml.deploy
    .xml
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Microsoft.Bcl.AsyncInterfaces.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Microsoft.Extensions.DependencyInjection.Abstractions.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Microsoft.Extensions.Logging.Abstractions.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Newtonsoft.Json.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/NuGet.Common.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/NuGet.Configuration.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/NuGet.Frameworks.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/NuGet.Packaging.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/NuGet.Versioning.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/QSaharaServer.exe.deploy
    .exe windows:5 windows x86 arch:x86

    ba6e7d1028cd73d291b266f23866459e


    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/about.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/auth.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/auth_off.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/autolen.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/bot.txt.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/china_flags_flag_16985.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/database.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/drivers.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/exit.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/fh.ico.deploy
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/greet.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/help.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/help_en.pdf.deploy
    .pdf
    • http://ro.product.name

    • https://developer.android.com/tools/adb

    • https://developer.android.com/tools/adben-US

    • https://github.com/hoplik/AGM_Repacker_ROM/wiki/Finding-the-key

    • https://github.com/hoplik/AGM_Repacker_ROM/wiki/Finding-the-keyen-US

    • https://github.com/hoplik/Firehose-Finder/

    • https://github.com/proger10

    • https://github.com/proger10/agmx3-firmware-tools

    • https://github.com/proger10/agmx3-firmware-toolsen-US

    • Show all
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/help_ru.pdf.deploy
    .pdf
    • http://ro.product.name

    • https://developer.android.com/tools/adb

    • https://github.com/hoplik/AGM_Repacker_ROM/wiki/Finding-the-key

    • https://github.com/hoplik/Firehose-Finder/

    • https://github.com/proger10

    • https://github.com/proger10/agmx3-firmware-tools

    • https://t.me/+Suwc1u6h8PYzM2Qy

    • https://t.me/firehosefinder

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/insert.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/lensel.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/rom.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/send.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/sert.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/translate.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Resources/work.png.deploy
    .png
  • Publishing/Application Files/FirehoseFinder_24_8_5_0/SharpAdbClient.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Buffers.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.ComponentModel.Annotations.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Diagnostics.DiagnosticSource.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Drawing.Common.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.IO.Pipelines.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Memory.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Numerics.Vectors.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Runtime.CompilerServices.Unsafe.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Text.Encodings.Web.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Text.Json.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.Threading.Tasks.Extensions.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/System.ValueTuple.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/Telegram.Bot.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/adb.exe.deploy
    .exe windows:6 windows x86 arch:x86

    a08e2ecfea71c84af32023f1439d2054


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/en/FirehoseFinder.resources.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/fastboot.exe.deploy
    .exe windows:6 windows x86 arch:x86

    14fb04ca3c8fd429aed1f7a307bb90ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/fh_loader.exe.deploy
    .exe windows:5 windows x86 arch:x86

    65665b8c788d2e59869ffa5beffddf7e


    Headers

    Imports

    Sections

  • Publishing/Application Files/FirehoseFinder_24_8_5_0/zh-Hans/FirehoseFinder.resources.dll.deploy
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Publishing/FirehoseFinder.application
  • Publishing/autorun.inf
  • Publishing/publish.htm
    .js
  • Publishing/setup.exe
    .exe windows:5 windows x86 arch:x86

    367254f4e83f62f5437681fde2e55f48


    Headers

    Imports

    Exports

    Sections