ChipGenius_v4_21_0701.rar
- SHA256 3e04cdea83bdf44d66092ad39204ef87fc1a5f389ff8ced9e96dcc91483b697b
Password
usbdev.ru
Overview
overview
5Static
static
5ChipGenius...01.rar
windows10-2004-x64
1ChipGenius...01.rar
windows11-21h2-x64
1ChipGenius...01.exe
windows10-2004-x64
3ChipGenius...01.exe
windows11-21h2-x64
3ChipGenius...ps.wdb
windows10-2004-x64
3ChipGenius...ps.wdb
windows11-21h2-x64
3ChipGenius...er.exe
windows10-2004-x64
5ChipGenius...er.exe
windows11-21h2-x64
5out.exe
windows10-2004-x64
out.exe
windows11-21h2-x64
3readme.txt
windows10-2004-x64
1readme.txt
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
ChipGenius_v4_21_0701.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ChipGenius_v4_21_0701.rar
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
ChipGenius_v4_21_0701/ChipGenius_v4_21_0701.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
ChipGenius_v4_21_0701/ChipGenius_v4_21_0701.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
ChipGenius_v4_21_0701/Chips.wdb
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
ChipGenius_v4_21_0701/Chips.wdb
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
ChipGenius_v4_21_0701/FlashMaster.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
ChipGenius_v4_21_0701/FlashMaster.exe
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
out.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
out.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
readme.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
readme.txt
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
General
- Target ChipGenius_v4_21_0701.rar
- Size 821KB
- Sample260603-b44awsf16v
- SHA256 3e04cdea83bdf44d66092ad39204ef87fc1a5f389ff8ced9e96dcc91483b697b
- MD5 f86207a6626cfa1bcfc17e0682077796
- SHA1 befa4afea08aa3148021c529ccd10f6ce149de9b
- SHA512 2a0f70983ac78e39c2ad301b30dddb67358d7ad2da279b2a810868df92219235eda06c66fd3523d0c52309668e881170fd0b40cba914b7dca8ec1ada32544299
- SSDEEP 12288:bHPqDaUC9qXM0vlBIR+Ze4FZoeTDtfUbMcwQcKNmVy13fnV70DY6Zwl44AL6Dj7s:TPqetMvQRSaIs2AnNeYAwl4fLSHiL
- TLSH T18405336A0055382A26B1B10D6675190EC41BFBDDFEEF6FE81D711E245093FA52B3AF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ChipGenius_v4_21_0701/FlashMaster.exe upx - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/ChipGenius_v4_21_0701/ChipGenius_v4_21_0701.exe unpack001/ChipGenius_v4_21_0701/FlashMaster.exe unpack003/out.upx
File Explorer
-
ChipGenius_v4_21_0701.rar.rar 821KB
-
ChipGenius_v4_21_0701/ChipGenius_v4_21_0701.exe.exe 299KB
-
ChipGenius_v4_21_0701/Chips.wdb87KB
-
ChipGenius_v4_21_0701/FlashMaster.exe.exe 622KB
-
out.upx.exe 1.2MB
-
readme.txt53B
ChipGenius_v4_21_0701/ChipGenius_v4_21_0701.exe
- SHA256 8fd831c5bb24ee51f65699da378f127044314e7184042e44646b40c507d09bb4
- MD5 c225785c18c5ec684ea5a10fb3d56cc3
- SHA1 05e12f3ec7cf52f915a974213b8aa3d7f3ffe28d
- SHA512 fbdbc67c8ab522ed940c4fe448587f3000b2754443c0d504b25203858c97442ac80795fa9005e889ad2bd6610a73449eb1dd29331bfb14b7d28333c8f6ab1c36
- SSDEEP 6144:UQePa/g7rQGDa3e79hsA5XhXo9jBCSxCFLMboS5POG:UQIA6vr5XuVXCdqoS
- TLSH T105540255BA85C7C4D99D11B68DF2FA4C0E58FFA46A83415738E037AF96B9B03B084E60
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
usbdev.ru
Minor OS version
0
Major OS version
4
Entry point
1084528
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
l020
Size
Virtual Size
844KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
l021
Size
214KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
83KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=26, id=9, version=8783,
count=1, id=13, version=8964,
ChipGenius_v4_21_0701/Chips.wdb
- SHA256 3f51631bbe1181427bd0c53519cf24a53bbd06e9bf3d407fa490c55b831f1869
- MD5 911029c47b851e1f8edea7b00ae73ee0
- SHA1 dc724be45ce6c6690016be97a7cbc85530c387b1
- SHA512 1d97e29c10d83bc31a9c4e9d7fe8d76cfa9dbf37c71c36199b99d2b5261f336c73f32a6cf2533cb1486f0d46665bc85bf4027ef64d6540895d7deffb36c55631
- SSDEEP 1536:xrLQ01Pa90RWie3buP8xi1kJmA78sQ+UjQb3a/m0TN3AB:x3Q01Pa90wieruP8xi1kJmA7DUjmK/mF
- TLSH T143934C38F31B9DD02D868EFD032A65BE2AD4552DFECE259934464B330CE019645EEC6E
- MD5 SHA1 SHA512 SSDEEP TLSH
ChipGenius_v4_21_0701/FlashMaster.exe
- SHA256 d42736052810166f929b11e986a7e20a2fb3e2d686473fb07a8aa2b7e9421d38
- MD5 f90e2b5796159a7166e4c055abd3feb0
- SHA1 2d57b4e8fc144bc81d184acfa85bea834df0c238
- SHA512 8457405675576641be700be81a183073b2d2216dc7f3bed934998a306d3b27f43b616e3019124103deb3b6f89742b584d1860298b43e5959a8a8adc0246f0e94
- SSDEEP 12288:q7dxANIkHepjDsHSN23Cfh5A02RaUcdNaOk3ZQKtKED4l1Pj5:qylHepjY+h5A02R+u5/p45
- TLSH T139D4123E8DE09961F060E438AA33D53E81476D609D041B27F776FDD163BF2AB29DA805
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
usbdev.ru
Minor OS version
0
Major OS version
5
Entry point
1479184
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
884KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
557KB
Virtual Size
560KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
64KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=70, id=132, productName=VS2008 build 21022, version=21022,
count=46, id=149, productName=VS2008 build 21022, version=21022,
count=188, id=131, productName=VS2008 build 21022, version=21022,
count=8, id=150, version=20413,
count=44, id=19, version=8022,
count=21, id=19, version=8034,
count=601, id=1, productName=Unmarked objects,
count=94, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=20, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=79, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=25, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=36, productName=Unmarked objects (old),
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
out.upx
- SHA256 9632b2f83efbf0a949c2ce11f3daf61e3dd823bc304b65479c4631f425824347
- MD5 dd921f95678efb00c6f506e0a5d6bb2f
- SHA1 0f9bbd22cb9525d89a7b1793a926622299993760
- SHA512 32745e33bda3b95a663c56ce4c29b0c812decbcd101fd98a9513c3fb5d4441ebf088d4cb0325a630fd4d2fbb5cb886ba13fdef42ecbf44b702c8f74d80ed2b49
- SSDEEP 24576:60DnJcbXKJsaEoZbhsBTLa1kfxPsZmes30Wsol5:6oJcbXKJxbAa1ashd+5
- TLSH T17645BF13B582C0B2D1011A702DF7673A9B36AF670D20EBD7E3A4FD796E36241D92611E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
637833
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
789KB
Virtual Size
788KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
287KB
Virtual Size
287KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
85KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
63KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=70, id=132, productName=VS2008 build 21022, version=21022,
count=46, id=149, productName=VS2008 build 21022, version=21022,
count=188, id=131, productName=VS2008 build 21022, version=21022,
count=8, id=150, version=20413,
count=44, id=19, version=8022,
count=21, id=19, version=8034,
count=601, id=1, productName=Unmarked objects,
count=94, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=20, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=79, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=25, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=36, productName=Unmarked objects (old),
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
readme.txt
- SHA256 f786535236cbd2d55c6355baf3ed051527a3c7922943d5061f144d9d50c1d58a
- MD5 5e351db7cbc138c623a22f91d8e30af1
- SHA1 33d5f946ebb439c7a2071883c75101c207398b65
- SHA512 fcb9940af0e2a427d10fc635405ead20d7d237dbd43b6778087efee5c7ccb1ca6f88a024143bcde07e75b2f7596601dc09b4d259cf0ae63bcfcf6ecf20bb0d62
- TLSH T1049002FF04D5F5900110C194531C9217D427401999585243A552551CA0A152895514A3
- MD5 SHA1 SHA512 TLSH