Firefox[.]ver[.]3[.]6[.]28[.]Russian[.]exe

Resubmissions

22/08/2026, 14:26

260822-rrx64sfc52

22/08/2026, 14:21

260822-rpe8hsvgkb7

Sharing

Copy URL Twitter E-mail

General

Target
Firefox.ver.3.6.28.Russian.exe
Size 8.5MB
Sample260822-rrx64sfc52
SHA256 72926d9190438eebc9d0bd393e40f06991ed6ae51a734dc7cdc7152ca980d14a
MD5 31a4dd11c74b4297d28976ab9bb36a25
SHA1 2ff80e64b501d46f77a873e27b9293a49a24001d
SHA512 84e1ea486c46f0e15bdad805f1f661a9ed75eb038d5d2adde170ffd7925dc174e09e58bdb198bbe1fa336e37098f14e18fde8262f2bf65cb718c291e5e5dd26b
SSDEEP 196608:co1hyKgcxF2CqxYbKZIk//HDJZDCjPhkweHJVVwstzHB5:vvyKgcxLqybKZIa/HDJZmlkwiGsBB5
TLSH
T10E9633967ED605A6F685DA3849E10BA8D9102D7BC7C752876B33FF22F8B103891724F4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/out.upx

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Firefox.ver.3.6.28.Russian.exe

File Explorer

Firefox.ver.3.6.28.Russian.exe

.exe 8.5MB
out.upx

.exe 119KB

Firefox.ver.3.6.28.Russian.exe

SHA256 72926d9190438eebc9d0bd393e40f06991ed6ae51a734dc7cdc7152ca980d14a
MD5 31a4dd11c74b4297d28976ab9bb36a25
SHA1 2ff80e64b501d46f77a873e27b9293a49a24001d
SHA512 84e1ea486c46f0e15bdad805f1f661a9ed75eb038d5d2adde170ffd7925dc174e09e58bdb198bbe1fa336e37098f14e18fde8262f2bf65cb718c291e5e5dd26b
SSDEEP 196608:co1hyKgcxF2CqxYbKZIk//HDJZDCjPhkweHJVVwstzHB5:vvyKgcxLqybKZIa/HDJZmlkwiGsBB5
TLSH
T10E9633967ED605A6F685DA3849E10BA8D9102D7BC7C752876B33FF22F8B103891724F4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d8:f8:d6:43:18:63:90:34:c7:bb:a6:a9:cd:c3:78:d0:e2:a5:29:08

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Mozilla Corporation,OU=Release Engineering,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Chains

Mar 6, 2012

CN=Mozilla Corporation,OU=Release Engineering,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Serial Number

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Timespan

Aug 1, 1996 - Dec 31, 2020

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Mozilla Corporation,OU=Release Engineering,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Serial Number

6b:26:c6:4d:4e:d9:d8:2a:ab:ef:de:3c:f9:9c:02:15

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Timespan

Oct 7, 2011 - Oct 29, 2012

Subject

Serial Number

33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 17, 2006 - Dec 30, 2020

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Serial Number

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

138496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 8980dc0c179dd12207060f229c4bc9f895fd3af24cd9e91a3fa4e957c0dbd0b3
MD5 3b57fa649db9399fe66608b896371b30
SHA1 c5fcf1681bd51da40011ef2817136d1a4b8358b3
SHA512 33a3848193c2ab406b554668935bc5ac09c372d2c891c22870603ec71c7dfcb01b3540262e4807711276c0d8be7bf46e3abb2205784a088109f2890bff6bd321
SSDEEP 3072:IPrt4hSey15PuSmSCxIhaSPxX1bsSQhsmSRDbbNUEI:IPrehzm5WSmSYXSPxmnh3YDbBU7
TLSH
T114C35B113AE8C5F1E2520431CE9E7BF5D1F1DE784E61492333983E2DAE7A546C20AE6D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

73535

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Firefox.ver.3.6.28.Russian.exe

PE Signature issue

generic

out.upx

generic