Overview

overview

10

Static

static

3

tmpf3mxqrbj.exe

windows10-ltsc_2021-x64

10

tmpf3mxqrbj.exe

windows10-2004-x64

10

tmpf3mxqrbj.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpf3mxqrbj
  • Size 4.0MB
  • Sample260602-mpf3lact4r
  • SHA256 a2d2a7677b7e0306f02ba20acc0495e72c7e6f0aa073c56df3bef313750dfda8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • tmpf3mxqrbj
    .exe 4.0MB

tmpf3mxqrbj

  • IMPHASH fde0517e64b0a7c2ff3801bc28f267be
  • SHA256 a2d2a7677b7e0306f02ba20acc0495e72c7e6f0aa073c56df3bef313750dfda8
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
61:92:9a:ac:e5:da:49:a0:55:3f:ed:54:85:75:8d:dc:30:7c:75:bb:80:07:9a:9b:05:a5:f3:74:97:c3:c7:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
POSTALCODE=10305
Minor OS version
0
Major OS version
5
Entry point
21572
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\vemuzadojodun_ye.pdb