device-monitoring-studio[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
device-monitoring-studio.exe
Size 14.5MB
Sample260710-ajf47act6y
SHA256 c182a1993b1f2dc41b1e073b26967e23cf2579bbf7708425376ef82fd2c78510
MD5 8055407e589d7f6cc83a73b75f5687dc
SHA1 2478ab02dae085163c2e1429ea69903f3fabea2f
SHA512 251dd4449c367b83265455b19791ff11a813d9a0bdabce7bf9b824bf64abf1026ec2b42d29bddc75379e6cd31c0b1c0ff470778f0e94d32de78e374c4821c3cd
SSDEEP 393216:ocg3MuNJG0KP3D0vap0m2EuZu2EtkGyvvetBv3C5op9exAUf7FXo:rfuNQbrgaG75qyneP3rexAwi
TLSH
T18FE6330776FA6032F429083BA675900791BEE381E545A0FF6767D4BE0FA01092797AF7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

device-monitoring-studio.exe

.exe 14.5MB

device-monitoring-studio.exe

IMPHASH fe82585f55cc5aec23a36ebeb1707415
SHA256 c182a1993b1f2dc41b1e073b26967e23cf2579bbf7708425376ef82fd2c78510
MD5 8055407e589d7f6cc83a73b75f5687dc
SHA1 2478ab02dae085163c2e1429ea69903f3fabea2f
SHA512 251dd4449c367b83265455b19791ff11a813d9a0bdabce7bf9b824bf64abf1026ec2b42d29bddc75379e6cd31c0b1c0ff470778f0e94d32de78e374c4821c3cd
SSDEEP 393216:ocg3MuNJG0KP3D0vap0m2EuZu2EtkGyvvetBv3C5op9exAUf7FXo:rfuNQbrgaG75qyneP3rexAwi
TLSH
T18FE6330776FA6032F429083BA675900791BEE381E545A0FF6767D4BE0FA01092797AF7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

9e:af:a8:45:5d:55:2a:7a:9c:af:9a:31:24:31:59:f7:ea:85:db:99:2f:fb:ec:fb:59:9d:b6:0e:7d:bc:47:92

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=P16000097897,CN=MIKOM INC,O=MIKOM INC,L=Hallandale Beach,ST=Florida,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#1307466c6f72696461,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jul 8, 2026

CN=SSL.com EV Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com EV Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6e:dd:4f:25:e7:31:7d:39:81:57:31:34:cf:c1:dc:a0

Issuer

CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 7, 2019 - Mar 3, 2034

Subject

Serial Number

6e:86:59:a0:d8:20:c0:ca:66:03:8f:3a:77:26:fc:79

Issuer

CN=SSL.com EV Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 16, 2025 - Sep 15, 2028

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

32269

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\MyProjects\Elizabeth3\out\SfxSetup.pdb

user32

MessageBoxA

shell32

ShellExecuteW

kernel32

EnterCriticalSection WriteConsoleW SetFilePointerEx GetConsoleMode GetLastError CreateFileW CloseHandle ReadFile WriteFile SetFilePointer IsProcessorFeaturePresent GetProcAddress GetModuleHandleW LoadLibraryExW FindFirstFileW FindClose SetFileAttributesW DeleteFileW FindNextFileW RemoveDirectoryW GetModuleFileNameW GetCommandLineW GetTempPathW GetTickCount GetCurrentThreadId GetCurrentProcessId CreateDirectoryW IsWow64Process GetCurrentProcess GetVersionExW SetFileTime GetCurrentDirectoryW SetCurrentDirectoryW SetEnvironmentVariableW CreateProcessW WaitForSingleObject GetExitCodeProcess QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW TerminateProcess GetConsoleCP RtlUnwind SetLastError DecodePointer LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary RaiseException GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapAlloc HeapFree FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

device-monitoring-studio.exe

user32

shell32

kernel32

generic