Errors

Reason
scan timeout

General

  • Target
    SETUP_FILE_(PASS_KEY=9094).zip
  • Size 39.2MB
  • Sample260704-hptapsct5x
  • SHA256 906eb1f1a8d6f5d9b73f4ef418c5287e67ef30642d9083fb7c547b4034831096
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • SETUP_FILE_(PASS_KEY=9094).zip
    .zip 39.2MB
  • PASS KEY.png
    .png 7KB
  • 𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
    .zip 39.2MB
  • SETUP.zip
    .zip 40.2MB
  • BvWinFsp.dll
    .dll 697KB
  • Scripts/Annual Sales.csx
    .js 1KB
  • Scripts/Customers Geographical Distribution.csx
    .js 1KB
  • Scripts/DevExpress.XtraBars.v24.1.dll
    .dll 6.7MB
  • Scripts/DevExpress.XtraCharts.v24.1.Extensions.dll
    .dll 40KB
  • Scripts/DevExpress.XtraCharts.v24.1.dll
    .dll 5.2MB
  • Scripts/Montly Sales.csx
    .js 3KB
  • Scripts/Order License.csx
    .js 1KB
  • Scripts/Sales Comparison.csx
    .js 2KB
  • Scripts/Sold Licenses.csx
    .js 1KB
  • Setu.exe
    .exe 100KB
  • e_sqlite3.dll
    .dll 1.2MB
  • python315.dll
    .dll 831.8MB
  • runtimes/win-arm/native/Microsoft.Data.SqlClient.SNI.dll
    .dll 373KB
  • runtimes/win-arm/native/e_sqlite3.dll
    .dll 1.1MB
  • runtimes/win-arm64/native/Microsoft.Data.SqlClient.SNI.dll
    480KB
  • runtimes/win-arm64/native/e_sqlite3.dll
    1.4MB
  • runtimes/win-arm64/native/sni.dll
    170KB
  • runtimes/win-x64/native/Microsoft.Data.SqlClient.SNI.dll
    .dll 493KB
  • runtimes/win-x64/native/e_sqlite3.dll
    .dll 1.6MB
  • runtimes/win-x64/native/sni.dll
    .dll 156KB
  • runtimes/win-x86/native/Microsoft.Data.SqlClient.SNI.dll
    .dll 404KB
  • runtimes/win-x86/native/e_sqlite3.dll
    .dll 1.2MB
  • runtimes/win-x86/native/sni.dll
    .dll 133KB
  • runtimes/win/lib/net6.0/Microsoft.Data.SqlClient.dll
    .dll 1.6MB
  • runtimes/win/lib/net6.0/System.Runtime.Caching.dll
    .dll 89KB
  • runtimes/win/lib/net8.0/System.Diagnostics.EventLog.Messages.dll
    .dll 782KB
  • runtimes/win/lib/net8.0/System.Diagnostics.EventLog.dll
    .dll 169KB
  • runtimes/win/lib/net8.0/System.Management.dll
    .dll 304KB
  • runtimes/win/lib/netcoreapp2.1/System.Data.SqlClient.dll
    .dll 1002KB
  • vcruntime140.dll
    .dll 88KB
  • x64/Babel Blue.zip
    .zip 173KB
  • x64/Babel Dark.zip
    .zip 173KB
  • x64/Babel Light.zip
    .zip 174KB
  • x64/Babel.zip
    .zip 173KB
  • x64/DevExpress.DataVisualization.v24.1.Core.dll
    .dll 79KB
  • x64/DevExpress.Drawing.v24.1.dll
    .dll 997KB
  • x64/DevExpress.Images.v24.1.dll
    .dll 8.4MB
  • x64/DevExpress.Map.v24.1.Core.dll
    .dll 2.0MB
  • x64/DevExpress.Office.v24.1.Core.dll
    .dll 3.5MB
  • x64/DevExpress.Pdf.v24.1.Core.dll
    .dll 5.0MB

SETUP_FILE_(PASS_KEY=9094).zip

  • SHA256 906eb1f1a8d6f5d9b73f4ef418c5287e67ef30642d9083fb7c547b4034831096
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
9094