DS-Setup[g1FZab4Ro][.]exe

Sharing

Copy URL Twitter E-mail

General

Target
DS-Setup[g1FZab4Ro].exe
Size 73.1MB
Sample260821-qlacesfj6s
SHA256 9a3f6e69c12cb814c45862219ecb17e9ab7744877c9da1c49f3ea046437f8fca
MD5 c0ecbd201cc92afd09b901758de2e529
SHA1 4f856902c6dee18ddbe1807ebce2cabe459f5117
SHA512 3dc9693163406227cde8945878e3f99a772c16d67ca6054d0924d614743fe5ef5d480785f7ce200878abf2c24f0b04d1b78906e72b8fac8082dda33c094af618
SSDEEP 1572864:yvx2Ft+xSqwsuoT/Pqqeqe5Swa3SIIAgO9d9TQqd2C4r94/A90KBzRM4wdj9H3:y5Q0wboTKXP16S/adCqd2CmUotz0
TLSH
T1A9F733C145D8360AE02F893425755532C9C9EFC778A0F2B66A20B7E3ABF19C1A7D315E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

DS-Setup[g1FZab4Ro].exe

.exe 73.1MB

DS-Setup[g1FZab4Ro].exe

IMPHASH b54e7ff1939073bd8f2f9020c83b7462
SHA256 9a3f6e69c12cb814c45862219ecb17e9ab7744877c9da1c49f3ea046437f8fca
MD5 c0ecbd201cc92afd09b901758de2e529
SHA1 4f856902c6dee18ddbe1807ebce2cabe459f5117
SHA512 3dc9693163406227cde8945878e3f99a772c16d67ca6054d0924d614743fe5ef5d480785f7ce200878abf2c24f0b04d1b78906e72b8fac8082dda33c094af618
SSDEEP 1572864:yvx2Ft+xSqwsuoT/Pqqeqe5Swa3SIIAgO9d9TQqd2C4r94/A90KBzRM4wdj9H3:y5Q0wboTKXP16S/adCqd2CmUotz0
TLSH
T1A9F733C145D8360AE02F893425755532C9C9EFC778A0F2B66A20B7E3ABF19C1A7D315E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Password

naughty

Digest

e8:84:25:26:aa:ca:71:7c:d1:b9:26:69:b8:b0:0c:a8:21:e1:77:d7:db:3b:2e:77:34:44:b5:53:4b:c0:5b:ec

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=39638734,CN=Grand Media\, TOV,O=Grand Media\, TOV,L=Odesa,C=UA,1.3.6.1.4.1.311.60.2.1.3=#13025541,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 28, 2026

SERIALNUMBER=39638734,CN=Grand Media\, TOV,O=Grand Media\, TOV,L=Odesa,C=UA,1.3.6.1.4.1.311.60.2.1.3=#13025541,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=SSL.com EV Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

SERIALNUMBER=39638734,CN=Grand Media\, TOV,O=Grand Media\, TOV,L=Odesa,C=UA,1.3.6.1.4.1.311.60.2.1.3=#13025541,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

37:57:da:28:c0:6f:24:2c:e3:9b:a1:84:5b:04:cf:87

Issuer

CN=SSL.com EV Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2025 - May 24, 2028

Subject

CN=SSL.com EV Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6e:dd:4f:25:e7:31:7d:39:81:57:31:34:cf:c1:dc:a0

Issuer

CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 7, 2019 - Mar 3, 2034

Subject

CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Serial Number

2c:29:9c:5b:16:ed:05:95

Issuer

CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 12, 2016 - Feb 12, 2041

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

17140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegDeleteKeyExW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ord147 SHFileOperationW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree CoCreateInstance

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

DispatchMessageW SystemParametersInfoW SetClassLongPtrW GetWindowLongPtrW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW RegisterClassW PeekMessageW GetMessagePos CharNextW ExitWindowsEx LoadCursorW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongPtrW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharPrevW MessageBoxIndirectW CallWindowProcW SetWindowTextW

gdi32

GetDeviceCaps SetBkColor CreateBrushIndirect SetTextColor SetBkMode SelectObject DeleteObject CreateFontIndirectW

kernel32

RemoveDirectoryW WriteFile WaitForSingleObject CreateDirectoryW GetUserDefaultUILanguage WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceExW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode GetTempPathW GetExitCodeProcess GetCommandLineW GetModuleFileNameW GetTickCount GetLastError GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW GetTempFileNameW MoveFileExW CreateProcessW GetSystemDirectoryW GetModuleHandleA GetProcAddress lstrcatW SetEnvironmentVariableW

Sharing

General

Malware Config

Signatures

File Explorer

DS-Setup[g1FZab4Ro].exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic