SecuriteInfo[.]com[.]PUA[.]2144FlashPlayer[.]25693[.]13640[.]exe

General

Target
SecuriteInfo.com.PUA.2144FlashPlayer.25693.13640.exe
Size 2.2MB
Sample240904-dyndlathml
SHA256 021cdda10106e4db66873cd411ae3ea1d63ce01a0de1889f658d73c84ea00c8e
MD5 24d38f9be5d91dd78f60a42dc978a5fc
SHA1 4d557bcc18dc0519d0b31d2beb365cef4c1ccf50
SHA512 93b9c8f86dd68a2a731f232ffed8b944ac97a5fa894446d16a85ab05f0080b3c5e32cf0b586da433e07993724963fd282846196370eca1b3a9126dc71dbe4ef3
SSDEEP 49152:Ps8bA+ZQnisxtZoIJicAoDvrWCujs/jMJ41BECm7mMe59G2s+m:RKnhKIJicvjVuI/jMK1BDJ8d
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

SecuriteInfo.com.PUA.2144FlashPlayer.25693.13640.exe

.exe 2.2MB

SecuriteInfo.com.PUA.2144FlashPlayer.25693.13640.exe

IMPHASH 5aa94c7fbfc01c9462c4d62e06efe88a
SHA256 021cdda10106e4db66873cd411ae3ea1d63ce01a0de1889f658d73c84ea00c8e
MD5 24d38f9be5d91dd78f60a42dc978a5fc
SHA1 4d557bcc18dc0519d0b31d2beb365cef4c1ccf50
SHA512 93b9c8f86dd68a2a731f232ffed8b944ac97a5fa894446d16a85ab05f0080b3c5e32cf0b586da433e07993724963fd282846196370eca1b3a9126dc71dbe4ef3
SSDEEP 49152:Ps8bA+ZQnisxtZoIJicAoDvrWCujs/jMJ41BECm7mMe59G2s+m:RKnhKIJicvjVuI/jMK1BDJ8d
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

8f:6a:97:51:ea:73:e5:2f:55:2a:a3:ea:c0:ce:58:da:98:57:7f:6b:9f:91:39:d0:76:e7:bc:e8:5b:88:dd:d2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Flash Player,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Dec 7, 2021

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Flash Player,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Flash Player,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:c1:ca:c4:ac:05:dd:06:02:10:20:f8:87:7a:e7:e8

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 19, 2020 - Dec 22, 2022

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

1

Major OS version

5

Entry point

1988247

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

SecuriteInfo.com.PUA.2144FlashPlayer.25693.13640.exe

kernel32

shell32

shlwapi

userenv

gdi32

advapi32

comctl32

ole32

oleaut32

gdiplus

generic

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.PUA.2144FlashPlayer.25693.13640.exe

kernel32

shell32

shlwapi

userenv

gdi32

advapi32

comctl32

ole32

oleaut32

gdiplus

generic