2036377a1656073ae9484770e15834bced45cc3d
- SHA256 6b313fae80a9226c4293f5b5bb57129f1bc4f2a8c46bdabb7a577a08e47672b9
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
setup/AISetup-Crack.exe
Resource
win7-20241010-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup/AISetup-Crack.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
setup/Pre-Activated-Setup.exe
Resource
win7-20240903-en
windows7-x64
9 signatures
150 seconds
General
- Target 2036377a1656073ae9484770e15834bced45cc3d
- Size 4.4MB
- Sample241108-tssdcsxpgj
- SHA256 6b313fae80a9226c4293f5b5bb57129f1bc4f2a8c46bdabb7a577a08e47672b9
- MD5 b46a7b7788783baf852a3e2d217395a5
- SHA1 2036377a1656073ae9484770e15834bced45cc3d
- SHA512 4a85032604b63a6a4571f029aba42e324354522968007806d44aa52aeb99bef391d6cd8f6b8e46f00dfe355c8e406e2df50cce785fc06f08f4b853a5a57125d3
- SSDEEP 98304:3mSsCwPee+SN9vYbzrLEFjUZVIVgbIYSSXRZ2dozGFKimh:2SxEe89wfsFwIVgbIYSSXRZ2doaKia
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
2036377a1656073ae9484770e15834bced45cc3d.zip 4.4MB
-
f6c2aabe054b15f6de905da4073abf147627bb156bda1e635061d0ba26b9f80d.zip 5.1MB
-
setup/AISetup-Crack.exe.exe 2.4MB
-
setup/Pre-Activated-Setup.exe.exe 397.6MB
f6c2aabe054b15f6de905da4073abf147627bb156bda1e635061d0ba26b9f80d
- SHA256 f6c2aabe054b15f6de905da4073abf147627bb156bda1e635061d0ba26b9f80d
- MD5 0e75ebe024ce037278850523029d7543
- SHA1 8876facac261342e8f0fceb49bfc7359c0641d47
- SHA512 9b852f19f5712d90bd89c2218ce762dc53744ae2915f3139596f5d13c61ea6686b3c04763ad7a06cafadfa32615513bb4f98bdf0fa7d40310d5d6ae491a1d49a
- SSDEEP 98304:ArL0fZ/5KrISf4n2bwed0ef6ibJySnkRsfCvBm0OeQLN:ArL0bKvgPevB5apjUN
- MD5 SHA1 SHA512 SSDEEP
setup/AISetup-Crack.exe
- IMPHASH a8ed6cd4a919571459fdef8972c1855c
- SHA256 9871a54a96e578971bde616e6110d08c60d1644734f72358ef04885d16c73d99
- MD5 be7879386bb4db5b6c8415166db67ef8
- SHA1 ddd3021057a36b9f3298abc2844c3905652a9429
- SHA512 4b0d06d882df5badbcd6d4445f8d3d4fc4db1fe7ec87018c316e9a0cf49e3e04c9c1459150d18613e5af0327b42d7f42a3eef174e35af6a436d2b903373bd9cc
- SSDEEP 49152:edDbG2xgZPfpsRl0OoktUFYbwlEU3AEN6yOVjevmndG:edDbZgZPf2hoktUFYbw23Gvm8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ed:6b:a3:34:b2:95:92:43:17:23:4e:00:d1:98:e2:5e:01:c4:47:39:70:c5:39:3a:c2:f8:f7:db:96:a6:75:15
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Apr 28, 2021
SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2018 - May 14, 2021
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
2240512
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetModuleHandleW
user32
CreateCursor
advapi32
RegisterEventSourceW
mscoree
_CorExeMain
comctl32
PropertySheet
shell32
PathMakeUniqueName
Name
.shared
Size
Virtual Size
240KB
Characteristics
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
DATA
Size
101KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
setup/Pre-Activated-Setup.exe
- IMPHASH c4d179fd7c3fb3536dc3261464e3c3dc
- SHA256 330aeaaf79d476459e8808ccf795879e94d6892a1610cf4460958e790e0d0b25
- MD5 c011c5bad19774ebf56ec031387998a7
- SHA1 df8a65c3b049e81f5633086ea5f66b8a5b82f435
- SHA512 3a393844490f399e6d851c9fbd0aa5ab5284ebc5e6cdac7094e7fb88dbed01856c0e777db619437925e6e0d4b5df700a3641b498d8e4df504f862013eab1bdb3
- SSDEEP 49152:tYhJSaBmN9w/QZKRy7bRkBPoyN041j+lav0v1L8EhlV:ehJSJ5cRy7G/1s8OyulV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2e:fe:21:62:a2:0c:1b:04:d0:f4:f3:c0:68:21:2b:5a:94:43:6b:70:ed:f6:65:bb:94:6a:a5:65:d0:61:0a:03
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Apr 28, 2021
SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=529991119,CN=Ledger SAS,O=Ledger SAS,STREET=1 rue du Mail,L=Paris,ST=Ile de France,C=FR,1.2.840.113549.1.9.1=#0c0f696e667261406c65646765722e6672,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
21:c9:a6:da:ff:94:2f:2d:b6:a0:61:4d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2018 - May 14, 2021
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
8187904
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetModuleHandleW
user32
CreateWindowExW
advapi32
RegQueryValueA
comctl32
ImageList_Create
shell32
SHGetDiskFreeSpaceExW
gdiplus
GdipSaveImageToFile
Name
.edata
Size
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.ctors
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
455KB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.CRT
Size
101KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE