Predictor7.6.3.rar
- SHA256 582fdb7c59c3d2f029b94ccb3fb8c8be2d905d6ba3bd70715fe7954c9d7530c5
Password
1234
Static task
static1
Behavioral task
behavioral1
Sample
Predictor7.6.3.rar
Resource
win10v2004-20250207-en
windows10-2004-x64
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
Predictor7.6.3/Check this Before Open!.png
Resource
win10v2004-20250207-en
windows10-2004-x64
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
Predictor7.6.3/Predictor7.6.3.msi
Resource
win10v2004-20250207-en
windows10-2004-x64
23 signatures
900 seconds
Behavioral task
behavioral4
Sample
Predictor7.6.3/Sounds/VisualStudioSetup.exe
Resource
win10v2004-20250207-en
windows10-2004-x64
10 signatures
900 seconds
General
- Target Predictor7.6.3.rar
- Size 6.9MB
- Sample250209-d2a8favrbl
- SHA256 582fdb7c59c3d2f029b94ccb3fb8c8be2d905d6ba3bd70715fe7954c9d7530c5
- MD5 7ec2cc85a11571242df2cfa7bf1356cc
- SHA1 2ed744b4f8db3b39c9731585bd326e6e7651c8d2
- SHA512 1850c3ecf79e2d81b3f16cd290c1f207071dde8af203f82037be0e32b71cf7744a2a0e8ffdc03db12c8c2a82746cacdfe819fe99493d50239ada318f0ad0faf2
- SSDEEP 196608:N/BfEBFj7rREFEXdsfJfaeddIRNYAFv0t:rEBFX9EOktZ+f2t
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
Predictor7.6.3.rar.rar 6.9MB
-
Predictor7.6.3/Check this Before Open!.png.png 106KB
-
Predictor7.6.3/Predictor7.6.3.msi.msi 2.9MB
-
Predictor7.6.3/Sounds/VisualStudioSetup.exe.exe 4.2MB
Predictor7.6.3/Check this Before Open!.png
- SHA256 83471a3c48abf4f11c7a920ab907efcd183e058801f8711e467e9c2efa8b1ad8
- MD5 2aaf9dcbef5f0fb02725b516163d71fa
- SHA1 77a4f69078a4fb5e258c3196b42ec319589f60da
- SHA512 ddc353c3fbc469dee34ee69d33be80997170194aaf8d580df0f044125698cdec6239f736e11e1dd01e2abd7c3a7e09f5d370f1a9d2f7bb43f6fdafa2ea0d5396
- SSDEEP 3072:K5GDgY9gZCAnoiicqJUcs6WOw91co1FpSOqycoiCq:OGtKZ7ozcAWOwPpHiB
- MD5 SHA1 SHA512 SSDEEP
Password
1234
Predictor7.6.3/Predictor7.6.3.msi
- SHA256 f286d2b89eaebb2e1e6e23a44bc92dae7c058348286810549f4c7514c9ea61ad
- MD5 ae5b94abf028388af1454ed76806cc6f
- SHA1 ef013c7eec6fc6c14ccd414b5eb87abf1476566a
- SHA512 b88c3c160b68b0bdc03780a6848001aef7baa5532b815071eb4f26ff1caa87f71b2401b0c507db5389d14517310bae758aaa17f6fe7aa508f2de38cdbcac1fe2
- SSDEEP 49152:TL51ahTWxFOlm43he+4Xkt1i1XkIZ9fm5urK7olHgnIxQQ6brit:p8h8ME4xr461ckZPoxgnsSa
- MD5 SHA1 SHA512 SSDEEP
Predictor7.6.3/Sounds/VisualStudioSetup.exe
- IMPHASH 01b29b0304f316768e6c21448e7b24b7
- SHA256 2e4e7be2891916f6158f45dad8ff5300ee2f78fc7df0d00a031cd5f86693e7ac
- MD5 588266fd79a4a51b4fd501d11eabc372
- SHA1 e980ac3a93c89e67d1f33d86fffa391c5ba7ff06
- SHA512 e5d49e85f911b0646e067f67523cb7e40e9b6e6c13c31dd82294c4afcc270ae9c91f4728c722bc5e5ad9bdbb5cdd21b81747693960d53bbd07554db6a85c6115
- SSDEEP 98304:IEbiDMuEbMHwTFSEAlODcXQ874QDdqiJXM8ux:kB+MQTFSLlOsrRMiJXq
- MD5 SHA1 SHA512 SSDEEP
Password
1234
PE Signature issue
Digest
04:61:5e:34:f9:6c:f5:6b:e2:ab:b3:6f:a3:fa:9e:0d:13:d3:9f:c8:d9:46:c7:39:62:65:ce:f7:f8:c0:d5:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=C2RService,O=C2RService,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2025
PE Signature issue
Digest
04:61:5e:34:f9:6c:f5:6b:e2:ab:b3:6f:a3:fa:9e:0d:13:d3:9f:c8:d9:46:c7:39:62:65:ce:f7:f8:c0:d5:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2025
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=C2RService,O=C2RService,L=Redmond,ST=Washington,C=US
Serial Number
15:e2:29:fe:14:35:70:74:b6:6a:98:f8:0b:49:59:7c
Issuer
CN=C2RService,O=C2RService,L=Redmond,ST=Washington,C=US
Timespan
Feb 17, 2017 - Dec 31, 2039
Minor OS version
1
Major OS version
5
Entry point
122832
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\a\_work\1\s\src\BoxStub\bin\Release\Win32\boxstub.pdb
ole32
CoInitializeEx
comctl32
ord17
rpcrt4
UuidCreate
UuidToStringW
RpcStringFreeW
shell32
SHGetPathFromIDListW
CommandLineToArgvW
ShellExecuteExW
SHBrowseForFolderW
shlwapi
PathRemoveExtensionW
user32
GetWindowLongW
SetWindowLongW
PostQuitMessage
EndDialog
SetWindowTextW
DialogBoxParamW
SendMessageW
GetWindow
GetWindowThreadProcessId
GetTopWindow
MessageBoxW
GetDlgItem
LoadStringW
PostMessageW
advapi32
RegCloseKey
CryptGenRandom
CryptReleaseContext
DecryptFileW
RegOpenKeyExW
RegQueryValueExW
CryptAcquireContextW
kernel32
FileTimeToDosDateTime
FileTimeToLocalFileTime
MoveFileExW
GlobalFree
GlobalAlloc
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
GetFileAttributesW
DeleteFileW
FileTimeToSystemTime
GetSystemInfo
CreateEventA
GetModuleHandleW
GetEnvironmentVariableW
GetTickCount
SetEnvironmentVariableW
GetLastError
ExpandEnvironmentStringsW
Sleep
GetProcessId
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventW
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
lstrlenW
CompareStringW
LocalFree
CreateDirectoryW
GetTempPathW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
SetDefaultDllDirectories
FreeLibrary
WaitForMultipleObjects
ExitThread
SetLastError
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetTimeZoneInformation
FormatMessageW
lstrlenA
GetComputerNameW
GetLocalTime
GetVersionExW
CreateFileA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFilePointer
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
FreeLibraryAndExitThread
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
DecodePointer
CreateFileW
WriteConsoleW
DuplicateHandle
FindFirstFileW
SetEndOfFile
cabinet
ord23
ord22
ord20
oleaut32
VariantClear
SysAllocString
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
bcrypt
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
?dwPlaceholder@@3PAEA
Name
.text
Size
222KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.boxld01
Size
512B
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
176KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=28900,
count=144, id=261, version=28900,
count=43, id=261, version=26706,
count=19, id=260, version=26706,
count=20, id=259, version=26706,
count=21, id=260, version=28900,
count=25, id=257, version=28900,
count=204, id=1, productName=Unmarked objects,
count=71, id=265, version=27051,
count=1, id=256, version=27051,
count=1, id=255, version=27051,
count=2, id=151,
count=1, id=258, version=27051,