SetupCBBHSetupFull9.0.1.2.zip
- SHA256 48ed9ec1a64ef3c14c754ab5948dd85ff1ac5e75ee250c5fac62960a18424162
Static task
static1
Behavioral task
behavioral1
Sample
SpiderSetupAll.msi
Resource
win10v2004-20260513-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
SpiderSetupAll.msi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral4
Sample
setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
General
- Target SetupCBBHSetupFull9.0.1.2.zip
- Size 8.1MB
- Sample260731-qevpsaba39
- SHA256 48ed9ec1a64ef3c14c754ab5948dd85ff1ac5e75ee250c5fac62960a18424162
- MD5 6ad6468138db3dd67e847b24eca4b232
- SHA1 9eb319c49cb2b384561e8e6ca45d61a5104a4ef7
- SHA512 5183d9ad192e0d776adb5bc4eea701dcec6dc411b1bbedf5b03aeee44606c426fa7e077f0cf527001068834643455ea2878b7f67d9ff6686d9c2a34c76ed9a0f
- SSDEEP 196608:YNVnq4pcvmApNMgYD+D1JUcBKLvskVF9gGYO2DTTG5:KE4pcvfYUnUcEDH7KTo
- TLSH T124863338FAF391B72A15E5705BC1212309D74CA53522E85ED202EBC8C55EE9B42BCF97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
SetupCBBHSetupFull9.0.1.2.zip.zip 8.1MB
-
SpiderSetupAll.msi.msi 8.6MB
-
setup.exe.exe 607KB
SpiderSetupAll.msi
- SHA256 ed060d367539a4ad022a7fb9e3a8c6d4ce3d1192a059b68387a7fe7fb3306369
- MD5 7c337d3aa8a3fbde56b87fb9c822673d
- SHA1 75e36182b97ed8a2c733207f23a71b96ee65af0a
- SHA512 ae3ea93f806a98aa51341f0986758ea339ee5d0067d591c8c39b502437fd1d72f2ef7905296d0f5899d0873d1471094a1ece91880dc78a994fe79f7aded25a96
- SSDEEP 196608:UiqMqiKkaQvMqi+5mHaYDV1fvPMGSU0oToEdmfF+r6rp/5Yn1aB07u:eMqLkaQvTlNGPkfU0QNdG+r6rl5Y77u
- TLSH T1529633127741D133E26A06B46A7D2B7159BB6C7012E0154FE324BBDE5C323D293F8EA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ab1dd2aa9eebf43a4510b4f9aa2b2bfdc19f00310ddf1c870a4c810e4fef90ee
Digest Algorithm
sha256
Digest Matches
Trusted
Prehash
Signing Certificate
CN=Tenfore d.o.o.,O=Tenfore d.o.o.,L=Belgrade,ST=Belgrade,C=RS
Chains
Jul 28, 2026
CN=Tenfore d.o.o.,O=Tenfore d.o.o.,L=Belgrade,ST=Belgrade,C=RS
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Tenfore d.o.o.,O=Tenfore d.o.o.,L=Belgrade,ST=Belgrade,C=RS
Serial Number
33:00:03:c5:96:be:a9:61:65:0b:22:dd:8c:00:00:00:03:c5:96
Issuer
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 26, 2026 - Jul 29, 2026
Subject
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:7B1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:59:7c:da:71:e9:8d:5e:f5:c0:00:00:00:00:00:59
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 8, 2026 - Jan 7, 2027
setup.exe
- IMPHASH 81fd276d49dcfb5944ab1253641f139e
- SHA256 c67520aeb57a2d9896d08d789280fe22a5ab1e26ff39235163163ed3010a35e7
- MD5 d2865b8341bff4a2cca00f034d64a3c8
- SHA1 421b29a2f42f9e558cd419a94116caf22d26a490
- SHA512 e1d3062e3f07ff8bcab669c44dec341c6ce9409fa81bcdd26bebba3c1a48d59d38fcc1c92902360f78a14c0dea9bfdccc251a644aa1b4ce19f6023f12220ece9
- SSDEEP 12288:+DuWNvtS/PHV4c1JwX2afK+ixeCzKeMb01JQntLOCrTeM10bCE:+DlvEPTJmix5zKemrxhE
- TLSH T12FD4D72715EC7C76D07292B0AFF783E2E76CFC612520C92E22C5061D466E943B9527BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f1:03:b1:1c:d3:b3:dc:bc:12:0f:54:82:fa:25:a4:93:c4:99:1d:9b:47:d1:b6:eb:d3:3e:ce:c5:0c:3a:31:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Tenfore d.o.o.,O=Tenfore d.o.o.,L=Belgrade,ST=Belgrade,C=RS
Chains
Jul 28, 2026
CN=Tenfore d.o.o.,O=Tenfore d.o.o.,L=Belgrade,ST=Belgrade,C=RS
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Tenfore d.o.o.,O=Tenfore d.o.o.,L=Belgrade,ST=Belgrade,C=RS
Serial Number
33:00:03:c5:96:be:a9:61:65:0b:22:dd:8c:00:00:00:03:c5:96
Issuer
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 26, 2026 - Jul 29, 2026
Subject
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:7B1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:59:7c:da:71:e9:8d:5e:f5:c0:00:00:00:00:00:59
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 8, 2026 - Jan 7, 2027
Minor OS version
1
Major OS version
5
Entry point
217767
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Q:\cmd\27\out\binaries\x86ret\bin\i386\Bootstrapper\Engine\setup.pdb
kernel32
GetNativeSystemInfo
EndUpdateResourceW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetEvent
CreateEventW
LoadResource
LockResource
SizeofResource
FindResourceW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
DeleteFileW
GetFileAttributesW
GetTempFileNameW
ReadFile
OpenProcess
GetCurrentProcess
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
GetVersionExW
GetModuleFileNameW
GlobalAlloc
GlobalFree
LocalFree
FormatMessageW
CopyFileW
GetDateFormatW
GetTimeFormatW
CompareStringW
WideCharToMultiByte
RaiseException
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
Sleep
HeapSetInformation
SetFilePointer
GetDiskFreeSpaceExW
CreateFileW
DeleteCriticalSection
CreateThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrlenW
MulDiv
GetTickCount
GetExitCodeProcess
LoadLibraryW
GetTempPathW
SwitchToThread
FindNextFileW
UpdateResourceA
BeginUpdateResourceA
FindResourceA
lstrlenA
DeleteFileA
CreateFileA
UpdateResourceW
BeginUpdateResourceW
GetVersion
GetEnvironmentVariableA
HeapReAlloc
HeapSize
WriteConsoleW
ReadConsoleW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetEndOfFile
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
FindFirstFileW
FindClose
GetProcAddress
FreeLibrary
WaitForSingleObject
GetLastError
CloseHandle
WriteFile
GetStringTypeW
HeapAlloc
HeapFree
GetACP
GetModuleHandleExW
ExitProcess
MultiByteToWideChar
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
gdi32
GetStockObject
EnumFontFamiliesExW
DeleteObject
CreateFontIndirectW
GetObjectW
GetTextMetricsW
SelectObject
GetTextExtentPoint32W
GetDeviceCaps
DeleteDC
CreateCompatibleDC
ole32
CoUninitialize
CoInitialize
secur32
GetComputerObjectNameW
shell32
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
ShellExecuteA
user32
SystemParametersInfoW
IsDialogMessageW
LoadImageW
LoadIconW
LoadCursorW
SetClassLongW
ScreenToClient
GetWindowRect
GetClientRect
SetWindowTextW
ShowScrollBar
SetForegroundWindow
EnableWindow
GetFocus
SetFocus
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItem
CreateDialogIndirectParamW
CreateDialogParamW
MoveWindow
ShowWindow
DestroyWindow
SendMessageW
SendMessageA
PeekMessageW
DispatchMessageW
TranslateMessage
ExitWindowsEx
MessageBoxW
ReleaseDC
GetDC
DrawTextW
GetSystemMetrics
GetDialogBaseUnits
MessageBoxA
SetCursor
MsgWaitForMultipleObjects
crypt32
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
wininet
InternetCrackUrlW
InternetCombineUrlW
msi
ord8
ord78
ord150
ord92
_DecodePointerInternal@4
_EncodePointerInternal@4
Name
.text
Size
366KB
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
200KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=156, id=243, version=40116,
count=29, id=242, version=40116,
count=21, id=259, version=24723,
count=34, id=260, version=24723,
count=64, id=261, version=24723,
count=23, id=203, version=65501,
count=349, id=1, productName=Unmarked objects,
count=1, id=259, version=25025,
count=31, id=261, version=25025,
count=1, id=256, version=25025,
count=1, id=255, version=25025,
count=1, id=258, version=25025,