0FF1C3 2016-2025 Latamhack.zip
- SHA256 999eb2969108960db0e4c97cba4b1483fab1c099d6cd732c7f9cb1cce8114c21
Overview
overview
10Static
static
50FF1C3 201...ll.exe
windows10-2004-x64
100FF1C3 201...ll.exe
windows11-ltsc_2024-x64
70FF1C3 201...pp.exe
windows10-2004-x64
10FF1C3 201...pp.exe
windows11-ltsc_2024-x64
10FF1C3 201...00.dll
windows10-2004-x64
10FF1C3 201...00.dll
windows11-ltsc_2024-x64
10FF1C3 201...pp.exe
windows10-2004-x64
30FF1C3 201...pp.exe
windows11-ltsc_2024-x64
30FF1C3 201...00.dll
windows10-2004-x64
30FF1C3 201...00.dll
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
0FF1C3 2016-2025/OInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
0FF1C3 2016-2025/OInstall.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
0FF1C3 2016-2025/files/x64/cleanospp.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
0FF1C3 2016-2025/files/x64/cleanospp.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
0FF1C3 2016-2025/files/x64/msvcr100.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
0FF1C3 2016-2025/files/x64/msvcr100.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
0FF1C3 2016-2025/files/x86/cleanospp.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
0FF1C3 2016-2025/files/x86/cleanospp.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
0FF1C3 2016-2025/files/x86/msvcr100.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
0FF1C3 2016-2025/files/x86/msvcr100.dll
Resource
win11ltsc2024-20260709-en
| resource | yara_rule |
|---|---|
| static1/unpack001/0FF1C3 2016-2025/OInstall.exe | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/out.upx |
| unpack001/0FF1C3 2016-2025/files/x64/cleanospp.exe |
| unpack001/0FF1C3 2016-2025/files/x86/cleanospp.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/0FF1C3 2016-2025/OInstall.exe |
| unpack001/0FF1C3 2016-2025/files/x64/msvcr100.dll |
| unpack001/0FF1C3 2016-2025/files/x86/msvcr100.dll |
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
Jan 1, 0001
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=185, version=30716,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=69, id=1, productName=Unmarked objects,
count=14, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=188, version=30716,
count=1, id=187, version=30716,
count=3, id=189, version=30716,
count=1, id=186, version=30716,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Feb 19, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=187, id=1, productName=Unmarked objects,
count=501, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=34, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=52, id=175, version=40219,
count=185, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=171, productName=VS2010 build 30319, version=30319,
count=6, id=185, version=30716,
count=3, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=70, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=188, version=30716,
count=3, id=189, version=30716,
count=1, id=186, version=30716,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Feb 19, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=179, id=1, productName=Unmarked objects,
count=490, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=85, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=52, id=175, version=40219,
count=184, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,