SETUP_FILE_(PASS_2003).zip
- SHA256 03348e712bd0289fb38580ffc49b66393b8079e6da00e922d4882bc1bf3d631b
Password
2003
Overview
overview
7Static
static
3SETUP_FILE...3).zip
windows10-2004-x64
1SETUP_FILE...3).zip
windows11-ltsc_2024-x64
1PASSW0RD.png
windows10-2004-x64
1PASSW0RD.png
windows11-ltsc_2024-x64
1𝟎𝙋�...��.zip
windows10-2004-x64
1𝟎𝙋�...��.zip
windows11-ltsc_2024-x64
1SETUP.zip
windows10-2004-x64
1SETUP.zip
windows11-ltsc_2024-x64
1Setup.exe
windows10-2004-x64
7Setup.exe
windows11-ltsc_2024-x64
7Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SETUP_FILE_(PASS_2003).zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
SETUP_FILE_(PASS_2003).zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
PASSW0RD.png
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
PASSW0RD.png
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
𝟎𝙋𝙀𝙉_𝙎𝙀𝙏𝙐𝙋.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
𝟎𝙋𝙀𝙉_𝙎𝙀𝙏𝙐𝙋.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
SETUP.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
SETUP.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
16 signatures
150 seconds
General
- Target SETUP_FILE_(PASS_2003).zip
- Size 1.3MB
- Sample260802-2hdffsgn8s
- SHA256 03348e712bd0289fb38580ffc49b66393b8079e6da00e922d4882bc1bf3d631b
- MD5 abcaffef9f6c837c014028b77f321b24
- SHA1 7edf7b7b9214b1f978ac5f48256e0ced016ee9c9
- SHA512 d0b061e807f2614a120f403d338a2754f89df347dc3a0e26e030eb58343e3664ffaf1b15904cc675354886a0685f97d2560d1ddc1a4a25c5b69abedeb4a07e84
- SSDEEP 24576:G+o4PxeZyWK3sp+6TlhRYsOfanYGYQce7Pfym7M+9Z31yQuZ1439MmNmC/m0DIfI:GT6Wtp+65hsfgYGYcJ9ZFu14NJNEnw
- TLSH T1C555333EB382021B13AC02A4E3475ACC469F95EF0459C529576B6C7D233C7AABFB5C58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack004/Setup.exe
File Explorer
-
SETUP_FILE_(PASS_2003).zip.zip 1.3MB
-
PASSW0RD.png.png 21KB
-
𝟎𝙋𝙀𝙉_𝙎𝙀𝙏𝙐𝙋.zip.zip 1.3MB
-
SETUP.zip.zip 1.3MB
-
Setup.exe.exe 3.2MB
PASSW0RD.png
- SHA256 a791c6e17ce50fda6b94298a8aba8c8a387ccc2ed96eff3861ea7f04684cb148
- MD5 6dfe6f3893c5fbe28b0bb7fd0a8a8b40
- SHA1 7703d74952786138dedb366ef90a7b4fd286b6f6
- SHA512 b499c847fbecc6c476353579c396319666d59514768651e6223dcb5e8cc97f9c27fd0217fe819cd37346517049b54c152f3555e2aea3a8995daea9d4f5a9804d
- SSDEEP 384:0m8m8m8m8m8m8m8m8m8m8m8m8m8m8m8m8riHfDSoPlYx3HAGq9zKE9FRP1aftHGJ:f3333333333333338MlYL4uWFRP1afNK
- TLSH T18BA25F4AD746487BB32E981B7C0200738A845D33B496DE9525CB7B5F4B17FB88C3AE85
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2003
𝟎𝙋𝙀𝙉_𝙎𝙀𝙏𝙐𝙋.zip
- SHA256 c9d7b53725a85d3ad4ef5f2b33db7989de137585af3841f7071b602bd36053d9
- MD5 f0c4e40df7ebdd511af1f9c6f1591e8c
- SHA1 f59087607c0df59051836be01dacfc9a6ead56a3
- SHA512 6858b8ecd731920f6940617922a347958133590a529537a4066090934d0c3fd079875bd9639c66c5bc00edd1f742f5c2ae6f576487840891056f698894e18176
- SSDEEP 24576:D+o4PxeZyWK3sp+6TlhRYsOfanYGYQce7Pfym7M+9Z31yQuZ1439MmNmC/m0DIfD:DT6Wtp+65hsfgYGYcJ9ZFu14NJNEnr
- TLSH T1BC55333EB282021F13BC0299D3475ACC469F95EF0459C42957A76C7D223C7AABFB9C58
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2003
SETUP.zip
- SHA256 1b5246f606cf9bf74c1aa26c1dce6860d25e1676e9d0d73d9221fa02c8fb59ae
- MD5 1154d70923c70d822b168a7a50da7bee
- SHA1 8cf4b9eba50f4c387ae2434896750fb94aaceea5
- SHA512 f27bfe2aeb0c4a32aaf89f3339b630ae7f16e20d445ef8e2341333d663bd0588a6f12d3be06ce2ca946a619ea15e28850268ec6b11eeddb70f1b29f0eb94d5e5
- SSDEEP 24576:tG3g1E3MlD55bVqPH6Y6411KG/A913f0MhjdVTf5RHu9UaFqPrdmJVS1ZImceaR:k3g1SMpfVqPaYv11KG/y3dVTBROunPr6
- TLSH T12A5533A7F6B1FD981C7160F6F2155C5642A9F4B820818E2054BEBAEC46290BBD75F0CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2003
Setup.exe
- IMPHASH 1aae8bf580c846f39c71c05898e57e88
- SHA256 6fd0c7b03b53ba0a9c59145888aa1eefe2dfd87233074f2c226ffd4dfff2f022
- MD5 d597b63f12bf7b1ce35454e575cca055
- SHA1 67e24f1591e67960509c24d95d5646ee0210d3d7
- SHA512 4d787361b139bfff729695a4301a2cdbf43c64f5e4a45d52d58e71dfdac32dfc163195ea6ba715e0f5873b479154ef2fd03af2a054c74c968fa0c7794011913d
- SSDEEP 49152:iNOnxS0kx8W+7z4mAwGfEy20JIT+ZRY5hUwbQS0:wixS0kx+7h+Zz/S
- TLSH T1EEF55C02FEC784F6D5476A3594EB627F2338A9040B35D753EF443ABAE9772920833649
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
2003
PE Signature issue
Digest
cd:db:0c:52:d1:0f:2a:bb:e1:7b:d1:64:b4:49:07:14:ea:bc:d2:89
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=kayewavil.org,O=eeqUwqQKmlEJ4j,L=zORAHT,ST=uPKhkRtr,C=US
Chains
Jul 31, 2026
CN=kayewavil.org,O=eeqUwqQKmlEJ4j,L=zORAHT,ST=uPKhkRtr,C=US
Subject
CN=kayewavil.org,O=eeqUwqQKmlEJ4j,L=zORAHT,ST=uPKhkRtr,C=US
Serial Number
0b:fd:8b:b3:a3:67:b2:30
Issuer
CN=kayewavil.org,O=eeqUwqQKmlEJ4j,L=zORAHT,ST=uPKhkRtr,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 2, 2026 - Aug 2, 2027
Minor OS version
1
Major OS version
6
Entry point
480928
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
43KB
Virtual Size
189KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ