General
- Target DSigntool.zip
- Size 1.7MB
- Sample260714-ss1jash191
- SHA256 dc9dd00be3cdcc0c90340e3430188965fbcaf378a6eec30c15c627b4a3a80c90
Score
8/10
Malware Config
Targets
-
- Target CSignTool.exe
- Size 1.1MB
- SHA256 5dd5fe56bc2799300a9bf1aa6f01d26b144ff3844d121d5a51be3696d63e81eb
Score3/10 -
- Target DSignTool.exe
- Size 2.9MB
- SHA256 0268bc99876354a91907d92b3ac0a2ffe16061d25de12fe7589acef89873573d
Score3/10 -
- Target EVRootCA.crt
- Size 1KB
- SHA256 1f0a7c723d98e4209f6b8a2f7b718a69c6b7aff56f5d53a1a7760d73b6492f75
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target EVRootCA.reg
- Size 11KB
- SHA256 c8fd81746cb7f33a0400a1f4fc36f6d0f7a3a96880e6bbea872601a72f4819c8
Score1/10 -
- Target HookSigntool.dll
- Size 45KB
- SHA256 5434a9a6d953284f697bfaa80844aef1a4439ecef8c520b5903008feabd3caf9
Score3/10 -
- Target hook.ini
- Size 497B
- SHA256 6d6eb571c11d3d56a9689c1200b8612929ca391739b85cee70de931226ac34e5
Score1/10