SETUP_FILE_(PASS_KEY=2114).zip
- SHA256 76b6f1f0d24ca319e19e4ac99b003060026db129618b2c9ddfd4068a50794b83
Password
2114
Overview
overview
7Static
static
3SETUP_FILE...4).zip
windows10-2004-x64
1SETUP_FILE...4).zip
windows11-ltsc_2024-x64
1PASS KEY.png
windows10-2004-x64
1PASS KEY.png
windows11-ltsc_2024-x64
1𝟎𝐏�...��.zip
windows10-2004-x64
1𝟎𝐏�...��.zip
windows11-ltsc_2024-x64
1SETUP.zip
windows10-2004-x64
1SETUP.zip
windows11-ltsc_2024-x64
1setup.exe
windows10-2004-x64
7setup.exe
windows11-ltsc_2024-x64
7Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SETUP_FILE_(PASS_KEY=2114).zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
SETUP_FILE_(PASS_KEY=2114).zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
PASS KEY.png
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
PASS KEY.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
SETUP.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
SETUP.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
14 signatures
150 seconds
General
- Target SETUP_FILE_(PASS_KEY=2114).zip
- Size 1.4MB
- Sample260812-sy5efade73
- SHA256 76b6f1f0d24ca319e19e4ac99b003060026db129618b2c9ddfd4068a50794b83
- MD5 9fb55171f9a8338f6b16a1ab37112be9
- SHA1 b75dd67554695a5ca919044f408a04eacfcf4475
- SHA512 8dc0a9311e411d2cce22f9b1afe21eb97b823b1de2599512b6bf40e8682022ad2141d13a87a08264ece87b633dc8f495028488bd32be534dcfdfba1c93e90691
- SSDEEP 24576:Xa6n1ERKSzVrgn/ezPI298PnuFXsMEku6Kcfyfokhe44biN/nMrZUDJVB7MEikq:XBn1ERTrgGT9H9fhkzMg/FMnkq
- TLSH T110653368F9CD5287FE5819226A94020EA0E6805DBF17F93A8794707477CE4DE23CB5B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack004/setup.exe
File Explorer
-
SETUP_FILE_(PASS_KEY=2114).zip.zip 1.4MB
-
PASS KEY.png.png 7KB
-
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip.zip 1.3MB
-
SETUP.zip.zip 1.4MB
-
setup.exe.exe 4.7MB
PASS KEY.png
- SHA256 4c98958e90393ded39b89bc5339fc9d8de31732403e9b37739eaaadfc59ad6e2
- MD5 6e7a7594ac43cc9f0d9a38626687e33c
- SHA1 18f3f0402c96b1337006968dca9575f9a8fe2059
- SHA512 2ffdf448bdd5ceaee7fbe8e32f3685ba5759c1063c6eb93aff79e572c8f05dc53f4b512a9f74c161fb0833d989c96bcf28a0e187ecc97dc13f98dd0451828c47
- SSDEEP 192:SS4SSSSSSStSSSSSSSL3X3K2BN3DrFLIUrEUoA4SkqFJSSSSSSSSgSSSSSSSSSSi:SS4SSSSSSStSSSSSSSL3HKIN33FUUrEw
- TLSH T1A8E18E92D396C99BC068D161F1A73E9C10F5274AF1F0DB5A90570BBC3228D3BEE96582
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2114
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
- SHA256 da1687474ece6ff9c0561a0c06f5d16445da9238507242f4c156b5e3ed0425ee
- MD5 640ecc057dd9fdd347cc8e418aa4284e
- SHA1 0710ca08fa2ff297dcc10425dfcc2c0fda2891d3
- SHA512 5dde10c070f65f1e0b7529f53e4108aad67e8168cce5f2d68cf93d4834ad948b529f6d19ed9196e904d4aeee795a9bae634a99fc5b0fd07e6a16ee4756aa1651
- SSDEEP 24576:wo6T1IzKy39rcLVenvI29QPxuFXYMIUu4KcRyfASpo42bkN/FKrZU1JpB7GEik:wrT1IzVrcE39pvRpSvKc3FGnk
- TLSH T15F653368F9CD428BFE5819126A54020EA0EA805DAF17F93E8794707477CE4DE63CB5B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2114
SETUP.zip
- SHA256 686c4245724b8bc07ad5084c4904eea27efa72b3abc63021251a6bd45382acf1
- MD5 898f90837dba0ae3ae78b7808fd82a35
- SHA1 d1861930f2c7d75a299af7ff69734f2412fdec0e
- SHA512 cb66fa316852400cae29370ba20aa3caf1f46a703a2603ac8f8b5002ac4e808ff0aa8a82aca498a871ca8d6e7c8b0f2ca9f88fa2a37a1bb4a61b57b40c5ec888
- SSDEEP 24576:By8yETEPvgovZhhE/nlqM9kanzPxUdrQnUv3AtTSyQ8oDNtjFJEYRE0erlkKE:BybtPvgovZhGjnTxYrQnUv3UTjQ/xtjT
- TLSH T10065332735D46BA1701764305AEF17AE391C6B67B07EB255CCD1C139D03A372CA35B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2114
setup.exe
- IMPHASH 1aae8bf580c846f39c71c05898e57e88
- SHA256 f1cb8444675f9a1e517ec3f81bc1344ff98223d25842eb3c72d75b455c9d1fe5
- MD5 12cd966cf7b04a60b6ec4294b7926c32
- SHA1 1ec35df95ddd57518ae9f882a0d1db8c901c65dc
- SHA512 298791cc65f103f8a01907b45ea6a585bcccef0e5cee03d6f8a80310ada314fc19ce99fe1dd64cf1d922341308b84f7eb0c6bf92c337eb1c4eefbb5add74939d
- SSDEEP 49152:wjY3YtNUtDs77I6INLjDYwoJD59Gtm7bQxKxZbE:w7tNU1KMhg9stxoZo
- TLSH T19C363A11EECA84F6E4032A3550E763AF233DA9054F369B53EE54397AEA736921C33744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
2114
PE Signature issue
Digest
56:c2:2e:7e:da:7a:58:f6:51:3e:8e:c1:dc:90:e5:79:ba:dc:43:25
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=seven.it,O=bA7Be7cP,L=NIL9z,ST=wBOD5O,C=US
Chains
Aug 6, 2026
CN=seven.it,O=bA7Be7cP,L=NIL9z,ST=wBOD5O,C=US
Subject
CN=seven.it,O=bA7Be7cP,L=NIL9z,ST=wBOD5O,C=US
Serial Number
07:cf:5e:f2:52:74:70:6e
Issuer
CN=seven.it,O=bA7Be7cP,L=NIL9z,ST=wBOD5O,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 12, 2026 - Aug 12, 2027
Minor OS version
1
Major OS version
6
Entry point
479776
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.1MB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
37KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ