Overview

overview

6

Static

static

3

spsetup134.exe

windows10-2004-x64

6

spsetup134.exe

windows11-ltsc_2024-x64

6

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows11-ltsc_2024-x64

3

$_112_/lang-1026.dll

windows10-2004-x64

1

$_112_/lang-1026.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1031.dll

windows10-2004-x64

1

$_112_/lang-1031.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1034.dll

windows10-2004-x64

1

$_112_/lang-1034.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1035.dll

windows10-2004-x64

1

$_112_/lang-1035.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1036.dll

windows10-2004-x64

1

$_112_/lang-1036.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1037.dll

windows10-2004-x64

1

$_112_/lang-1037.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1038.dll

windows10-2004-x64

1

$_112_/lang-1038.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1040.dll

windows10-2004-x64

1

$_112_/lang-1040.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1041.dll

windows10-2004-x64

1

$_112_/lang-1041.dll

windows11-ltsc_2024-x64

1

$_112_/lang-1043.dll

windows10-2004-x64

1

$_112_/lang-1043.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    spsetup134.exe
  • Size 20.5MB
  • Sample260801-xjp4estfpd
  • SHA256 a7f525daeb124f90d2a07d2975f40b9ee568d56244902d3418728ce6dfd737f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • spsetup134.exe
    .exe 20.5MB
  • $PLUGINSDIR/INetC.dll
    .dll 23KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $_112_/lang-1026.dll
    .dll 80KB
  • $_112_/lang-1031.dll
    .dll 80KB
  • $_112_/lang-1034.dll
    .dll 88KB
  • $_112_/lang-1035.dll
    .dll 84KB
  • $_112_/lang-1036.dll
    .dll 85KB
  • $_112_/lang-1037.dll
    .dll 67KB
  • $_112_/lang-1038.dll
    .dll 83KB
  • $_112_/lang-1040.dll
    .dll 82KB
  • $_112_/lang-1041.dll
    .dll 57KB
  • $_112_/lang-1043.dll
    .dll 84KB
  • $_112_/lang-1045.dll
    .dll 83KB
  • $_112_/lang-1046.dll
    .dll 80KB
  • $_112_/lang-1049.dll
    .dll 78KB
  • $_112_/lang-1050.dll
    .dll 86KB
  • $_112_/lang-1051.dll
    .dll 75KB
  • $_112_/lang-1052.dll
    .dll 81KB
  • $_112_/lang-1053.dll
    .dll 81KB
  • $_112_/lang-1055.dll
    .dll 76KB
  • $_112_/lang-1058.dll
    .dll 80KB
  • $_112_/lang-1059.dll
    .dll 80KB
  • $_112_/lang-1060.dll
    .dll 78KB
  • $_112_/lang-1062.dll
    .dll 82KB
  • $_112_/lang-1066.dll
    .dll 77KB
  • $_112_/lang-1067.dll
    .dll 77KB
  • $_112_/lang-1068.dll
    .dll 78KB
  • $_112_/lang-1071.dll
    .dll 80KB
  • $_112_/lang-1079.dll
    .dll 82KB
  • $_112_/lang-1102.dll
    .dll 78KB
  • $_112_/lang-2052.dll
    .dll 42KB
  • $_112_/lang-2070.dll
    .dll 79KB
  • $_112_/lang-2074.dll
    .dll 80KB
  • $_112_/lang-3098.dll
    .dll 80KB
  • $_112_/lang-5146.dll
    .dll 77KB
  • $_112_/lang-9999.dll
    .dll 77KB
  • $_87_/$_87_/pfBL.dll
    .dll 13.7MB
  • $_87_/Speccy.exe
    .exe 17.8MB
  • $_87_/Speccy64.exe
    .exe 21.9MB
  • Lang/lang-1026.dll
    .dll 80KB
  • Lang/lang-1031.dll
    .dll 80KB
  • Lang/lang-1034.dll
    .dll 88KB
  • Lang/lang-1035.dll
    .dll 84KB
  • Lang/lang-1036.dll
    .dll 85KB
  • Lang/lang-1037.dll
    .dll 67KB
  • Lang/lang-1038.dll
    .dll 83KB
  • Lang/lang-1040.dll
    .dll 82KB
  • Lang/lang-1041.dll
    .dll 57KB
  • Lang/lang-1043.dll
    .dll 84KB
  • Lang/lang-1045.dll
    .dll 83KB
  • Lang/lang-1046.dll
    .dll 80KB
  • Lang/lang-1049.dll
    .dll 78KB
  • Lang/lang-1050.dll
    .dll 86KB
  • Lang/lang-1051.dll
    .dll 75KB
  • Lang/lang-1052.dll
    .dll 81KB
  • Lang/lang-1053.dll
    .dll 81KB
  • Lang/lang-1055.dll
    .dll 76KB
  • Lang/lang-1058.dll
    .dll 80KB
  • Lang/lang-1059.dll
    .dll 80KB
  • Lang/lang-1060.dll
    .dll 78KB
  • Lang/lang-1062.dll
    .dll 82KB
  • Lang/lang-1066.dll
    .dll 77KB
  • Lang/lang-1067.dll
    .dll 77KB
  • Lang/lang-1068.dll
    .dll 78KB
  • Lang/lang-1071.dll
    .dll 80KB
  • Lang/lang-1079.dll
    .dll 82KB
  • Lang/lang-1102.dll
    .dll 78KB
  • Lang/lang-2052.dll
    .dll 42KB
  • Lang/lang-2070.dll
    .dll 79KB
  • Lang/lang-2074.dll
    .dll 80KB
  • Lang/lang-3098.dll
    .dll 80KB
  • Lang/lang-5146.dll
    .dll 77KB
  • Lang/lang-9999.dll
    .dll 77KB
  • cpuidsdk.dll
    .dll 3.0MB

spsetup134.exe

  • IMPHASH 61259b55b8912888e90f516ca08dc514
  • SHA256 a7f525daeb124f90d2a07d2975f40b9ee568d56244902d3418728ce6dfd737f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:4windowsx86arch:x86
Digest
11:0e:2d:29:1e:fc:cb:4f:24:cc:75:b7:a4:5b:c4:31:e1:97:af:38:39:82:e0:e9:a9:e5:d6:f9:04:7f:0e:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Gen Digital Inc.,O=Gen Digital Inc.,ST=Arizona,C=US
Minor OS version
0
Major OS version
4
Entry point
13888
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths