7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82[.]zip

General

Target
7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82.zip
Size 556KB
Sample260512-ypeejsgy2v
SHA256 7fc50576c4ff7a6d0c883a8b0c0ff20092da1fd456113e7989131da2c08b88b9
MD5 52c0ba39ff54bb537425288573942bd1
SHA1 27fbdf38834613090846cdf30b2445695681df52
SHA512 a9cdf5ce4131253f9c3c2f0651ac3e7c2672202eadd3f97c30662953fa81083fbc772ff27cd4c1f75ff5c802bc26601f6d41ef1cb8f3caa794240c79be98232a
SSDEEP 12288:F/P/MYO3X6llsp4BdjrOT6b1tvoyjix2p:BnMd3Klls6HOTK1Oyjyo
TLSH
T155C433A791CD34C3769F25EE9D478A3D42443194A0FBC324A1636CD4CCAEE27D1DA1EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82.exe

File Explorer

7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82.zip

.zip 556KB
7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82.exe

.exe 693KB

7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82.zip

SHA256 7fc50576c4ff7a6d0c883a8b0c0ff20092da1fd456113e7989131da2c08b88b9
MD5 52c0ba39ff54bb537425288573942bd1
SHA1 27fbdf38834613090846cdf30b2445695681df52
SHA512 a9cdf5ce4131253f9c3c2f0651ac3e7c2672202eadd3f97c30662953fa81083fbc772ff27cd4c1f75ff5c802bc26601f6d41ef1cb8f3caa794240c79be98232a
SSDEEP 12288:F/P/MYO3X6llsp4BdjrOT6b1tvoyjix2p:BnMd3Klls6HOTK1Oyjyo
TLSH
T155C433A791CD34C3769F25EE9D478A3D42443194A0FBC324A1636CD4CCAEE27D1DA1EA
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82.exe

SHA256 7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82
MD5 95daa771a28eaed76eb01e1e8f403f7c
SHA1 cdd5717fd3bfd375c1c34237c24073e92ad6dccc
SHA512 cb7258f8c7d5e77be30df63f73a16667be839a51613509012a41d90cd8456400c237c681d1cdae10213b83e2e2315760c2f4acee02e55f1430c0e90bc69eb35c
SSDEEP 12288:q/tJbVY7R6CCJ5RqRhoS2KMPKZb8VEtiWYbn8wBNsavTduK14UqMs5+p6uaYwsjE:q/XuwyZAVEEhbnNBNgfUjs5+8RsXsx
TLSH
T1D0E4D0ADFD4A8960D553F5BCBE1EB49153017AB80F39A2B7740925E10E738D83AB13C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:0 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

6a:2b:28:a7:ef:40:f5:71:b4:e0:75:ca:f1:dc:9c:b1:45:f4:ff:dd:42:fc:c5:e7:a6:21:21:eb:33:de:78:32

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=BorgWarner,OU=Engineering,O=BorgWarner,L=Clementi,C=SG,1.2.840.113549.1.9.1=#0c136365727440626f72677761726e65722e636f6d

Chains

May 8, 2026

CN=BorgWarner,OU=Engineering,O=BorgWarner,L=Clementi,C=SG,1.2.840.113549.1.9.1=#0c136365727440626f72677761726e65722e636f6d

Minor OS version

0

Major OS version

0

Entry point

99728

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing