stuxnet | 0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373[.]dll

Resubmissions

06/12/2025, 19:56

251206-yn6seadp8z10

10/10/2025, 19:33

251010-x9klmasjs310

Sharing

Copy URL Twitter E-mail

General

Target
0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373.dll
Size 25KB
Sample251010-x9klmasjs3
SHA256 0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373
MD5 22154b113327f1c3a399d4cb19610a6f
SHA1 fed3575c7840f916f11197d9df11f6822041c74d
SHA512 8181f892538f23882e506e08fb4d0590a4c4de3baaf635319295cdc939a33fe709ca14d70f0e1a1ca6e35fb4122b06edb85f497a79c5f91768b351a5a12ab46b
SSDEEP 384:1pjc0UYZy1Ttvyph2adBRd64h+Erl2zB5ls7O7hBWnqTYJLWd6jqdybz:1p4U0Lm2aKF56iBOLAmIybz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

backdoor stuxnet

Malware Config

Signatures

Detects Stuxnet 1 IoCs

backdoor

resource	yara_rule
sample	family_stuxnet

Stuxnet family
stuxnet

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373.dll

File Explorer

0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373.dll

.dll 25KB

0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373.dll

IMPHASH be2c3036d981fa5ac54d71ba4ce15c7d
SHA256 0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373
MD5 22154b113327f1c3a399d4cb19610a6f
SHA1 fed3575c7840f916f11197d9df11f6822041c74d
SHA512 8181f892538f23882e506e08fb4d0590a4c4de3baaf635319295cdc939a33fe709ca14d70f0e1a1ca6e35fb4122b06edb85f497a79c5f91768b351a5a12ab46b
SSDEEP 384:1pjc0UYZy1Ttvyph2adBRd64h+Erl2zB5ls7O7hBWnqTYJLWd6jqdybz:1p4U0Lm2aKF56iBOLAmIybz
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Detects Stuxnet

backdoor
Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

10:7c:29:ef:39:e3:f2:16:a0:72:d4:6f:18:d6:7e:8a:5b:e1:00:5d

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=RTCN,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Chains

Feb 3, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Serial Number

61:0c:12:06:00:00:00:00:00:1b

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 23, 2006 - May 23, 2016

Subject

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=RTCN,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Serial Number

5e:6d:dc:87:37:50:82:84:58:14:f4:42:d1:d8:2a:25

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 15, 2007 - Jun 11, 2010

Minor OS version

Major OS version

Entry point

7712

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP IMAGE_FILE_DLL

PDB paths

0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373.dll

PE Signature issue

psapi

kernel32

user32

generic