Просьба проверить данные.rar
- SHA256 d6c809ede6727a13de69f5560d9fa67e198ed9bc6883a2673655ddbc71027425
Password
123
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Aкт cвepки взaимныx pacчeтoв за период три месяца.pdf.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
Образец.doc
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
4 signatures
300 seconds
General
- Target Просьба проверить данные.rar
- Size 1.5MB
- Sample260805-k1cs7stdmg
- SHA256 d6c809ede6727a13de69f5560d9fa67e198ed9bc6883a2673655ddbc71027425
- MD5 58dee79ac910c86e5d42cfcf82d6b659
- SHA1 bd88a60584db5bd69501da0aa3ff88ba04c66662
- SHA512 20fac77b4c2f4d5170e15bbe1b2d61205349214e6df971657b8e329babbb64094f8745c18effaee3776cf828c00b72c88d27f8f6ef741126694cc788b4703205
- SSDEEP 24576:jFFipfyHU0VVTY2EPbS/UHnsTe98PxFTBjYe2W7CY7uPOcmpMG+pDw+z7q37TXEy:xFkfyHU0VVTY2IaMLaVjYjtHOz+q+zWF
- TLSH T1596533FA368514C5C29B4BCF55FDE3D3CA3214813B1807D9A8259C61936AFDAAB18F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack002/Aкт cвepки взaимныx pacчeтoв за период три месяца.pdf.exe
File Explorer
-
Просьба проверить данные.rar.rar 1.5MB
-
Просьба проверить данные/Aкт cвepки.zip.zip 1.5MB
-
Aкт cвepки взaимныx pacчeтoв за период три месяца.pdf.exe.exe 1.6MB
-
Образец.doc.doc 58KB
Просьба проверить данные/Aкт cвepки.zip
- SHA256 722b2cefb885fedc22b0849044a204406794d557ff045e6f58b1f09a15509474
- MD5 4473a3fff4a66e214204d7fd70547994
- SHA1 f55b537fe4ecedf5dec046a7782e7a18de0ef8fd
- SHA512 f2be20f85edc538992b81901595408ae13a63795f093118fb1d1068a62071706b50f3885aea0c40ef8d07af4b360130a589f4dbedba45fb7c38e808628439d38
- SSDEEP 24576:+Eb3Wm76zbRnc3X13spZCFzxgbwPZqLX7gdHYAujthHyIrDFGtDyok8O2B3dJ:+Ebmm+bVuX1spMzxAYqLrgdHYxjthjB4
- TLSH T17E6533C3D150DD604CB6C93AB6A7CE8E0EA87DA7D50211474BDFCD2D3B192AD34A34A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
Aкт cвepки взaимныx pacчeтoв за период три месяца.pdf.exe
- IMPHASH 2eabe9054cad5152567f0699947a2c5b
- SHA256 cdc371e508dbd43ef2fe37bcc84889c2e11b13a29623f656d8274ca81fae61fa
- MD5 cc2fd31d2f59fb88f9a14624ae6999a9
- SHA1 b40050b70e433642805294044578b653e2a6dd28
- SHA512 43f81b9b6f36df1fca268fcd4394f4bab332952a96e475edf7a500c3a4d691fce10da7f547c3474ee9039353b5b55c220181466d4f86a4980b6ee8b6903eb0cf
- SSDEEP 24576:v4H5Wmh6yXRarrxpx6zJuyHkWqiJaagLgi+umVUnjkvWcz7G3CIW73LJGJP+R3fl:gHkm3XE5+8yHaEQL1vm6CxY9+RuA
- TLSH T1177502F1A740C465D8979679D83BD6A3B823A64E9DA8091C2D82FF0B3E73347106785F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
Password
123
PE Signature issue
Digest
e2:a8:31:d4:ed:ae:64:97:b7:0e:90:9d:b4:06:ea:39:25:c0:0a:10:33:7e:49:02:ef:c4:e0:0f:48:7c:1f:df
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US
Chains
Jul 22, 2026
CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
0e:98:2f:dd:f0:6e:93:e9:11:06:5d:03:7d:4d:d4:82
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 28, 2024 - Aug 6, 2027
Subject
CN=Dummy certificate
Serial Number
01
Issuer
CN=Unknown issuer
Key Usages
KeyUsageCertSign
Ext Key Usages
Timespan
Jan 1, 2013 - Apr 1, 2013
Minor OS version
0
Major OS version
5
Entry point
3325952
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrcpy
Name
Size
73KB
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
247KB
Virtual Size
309KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
xshxztkx
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
hqtoolik
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.taggant
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=19, id=149, productName=VS2008 build 21022, version=21022,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=112, id=1, productName=Unmarked objects,
count=48, id=132, productName=VS2008 build 21022, version=21022,
count=142, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Образец.doc
- SHA256 53941bab58471d39ef78032f9610b9c535e610fda368db5a055bcf2c83db10d5
- MD5 ec9af93fa447e8dc39748d534f3937ba
- SHA1 fea5ebada49bf3f48d370e440ec82914805db7fb
- SHA512 1482cafe440994eaa572d0c7c0a6dc71440a711830fdab64969f1548e3ef19e68ce4d1eba8fbd815dcc01ab43215a63dc98b58ebe8912137c2ff883c673fbb5c
- SSDEEP 768:Wkq9222l222H22259e222W222b222/5OoO:4j
- TLSH T12F43EF07BBD16F22F176C23694E6C7A01A93FCC1FFA9934BA19B3A2B28317551D07254
- MD5 SHA1 SHA512 SSDEEP TLSH