mc_installer[.]exe

Resubmissions

28/08/2026, 01:05

260828-bftfsaek9t

28/08/2026, 00:55

260828-a9zzzssbqf8

28/08/2026, 00:44

260828-a31yps1zct8

28/08/2026, 00:39

260828-azr7dsbd898

Sharing

Copy URL Twitter E-mail

General

Target
mc_installer.exe
Size 324KB
Sample260828-bftfsaek9t
SHA256 cc07a04e1bf966f1761c878f27d8583cde2f08d083e1c9fd87d3c72f4a1d562c
MD5 f7934a8276202917a1874e9e918669ce
SHA1 4c4cda827d8e1caac5d5a156c1a87ba7439d24e4
SHA512 442aa41f6343cfb86a31b0819d75479531c8b690fce4bf040e0225cb1c20858aced2026138aa3ebaaec848611a9916fc1f972fbc342242748627017c6ecff92d
SSDEEP 6144:iSasDB81fc0DHbabT778+4oYC4XOUUwUHdj:iSzB8CEHbI8+4T
TLSH
T15D647D3BF7A344F8C16BC17497D3D7B26071FC1803246A5F16A5D3363E26A940FAA968
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mc_installer.exe

File Explorer

mc_installer.exe

.exe 324KB

mc_installer.exe

IMPHASH 99322ded5d6407d6515a12613ae3924c
SHA256 cc07a04e1bf966f1761c878f27d8583cde2f08d083e1c9fd87d3c72f4a1d562c
MD5 f7934a8276202917a1874e9e918669ce
SHA1 4c4cda827d8e1caac5d5a156c1a87ba7439d24e4
SHA512 442aa41f6343cfb86a31b0819d75479531c8b690fce4bf040e0225cb1c20858aced2026138aa3ebaaec848611a9916fc1f972fbc342242748627017c6ecff92d
SSDEEP 6144:iSasDB81fc0DHbabT778+4oYC4XOUUwUHdj:iSzB8CEHbI8+4T
TLSH
T15D647D3BF7A344F8C16BC17497D3D7B26071FC1803246A5F16A5D3363E26A940FAA968
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AllocConsole CloseHandle CreateDirectoryW CreateEventA CreateFileW CreateProcessW CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FlushConsoleInputBuffer FormatMessageA FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileAttributesW GetFileSizeEx GetLastError GetModuleHandleA GetProcAddress GetProcessAffinityMask GetStartupInfoA GetStdHandle GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount InitializeCriticalSection IsDBCSLeadByte LeaveCriticalSection LoadLibraryA LocalFree MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetConsoleTitleW SetConsoleWindowInfo SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFile

api-ms-win-crt-convert-l1-1-0

mbsrtowcs strtoul

api-ms-win-crt-environment-l1-1-0

__p__environ getenv

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

__C_specific_handler __intrinsic_setjmp longjmp memchr memcmp memcpy memmove strchr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p__acmdln _assert _beginthreadex _cexit _configure_narrow_argv _crt_atexit _endthreadex _errno _exit _initialize_narrow_environment _set_app_type _initterm _initterm_e _set_invalid_parameter_handler abort exit signal strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf _fileno _read _setmode fflush fputc fputs fwrite setvbuf

api-ms-win-crt-string-l1-1-0

_strdup memset strcmp strlen strncmp wcslen

api-ms-win-crt-utility-l1-1-0

rand_s

ole32

CoCreateInstance CoInitialize CoUninitialize

shell32

SHGetFolderPathW ShellExecuteW

user32

wsprintfW

Name

.text

Size

182KB

Virtual Size

181KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

672B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

104KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

mc_installer.exe

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

ole32

shell32

user32

generic