file.zip
- SHA256 4d0b36692f572c628f2e14eb0caabf6790aa486ec28d7573a28c9d0463ec6215
Static task
static1
Behavioral task
behavioral1
Sample
README.html
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
README.html
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
UEMSAgent.msi
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
UEMSAgent.msi
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral5
Sample
setup.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
setup.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target file.zip
- Size 59.5MB
- Sample260915-hlg39sshkh
- SHA256 4d0b36692f572c628f2e14eb0caabf6790aa486ec28d7573a28c9d0463ec6215
- MD5 18659868a92652a7a9b1b8781b21baba
- SHA1 f661f37cee39db948e8ea3e0289f36648f89554e
- SHA512 e9c7de27f48baae60c1e1676e818309b5aa47b6b46aabeac9ba71441f0548a8d9d6e6454dc584381245224878346622d843a6aa8b91d2d6e9ae5c495e2b5a05c
- SSDEEP 1572864:wf+13RICQsGJIx1mM2PARXTbMZZrmel8gE3kqhrlxY5GxBN5XG579SmmL:wmrIG0Ix1JVRbMrrmzgEU2lxc+ZG9SmO
- TLSH T14FD733EB9458CB9AC89ED01049D83F4C5D1A06E1D0A8813FFB657BDDA0D8FC2716D2B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
file.zip.zip 59.5MB
-
DCAgentServerInfo.json4KB
-
DMRootCA-Server.crt1KB
-
DMRootCA.crt1KB
-
README.html.html 1KB
-
UEMSAgent.msi.msi 60.3MB
-
UEMSAgent.mst20KB
-
setup.bat2KB
DCAgentServerInfo.json
- SHA256 ec7cac9eab79c5236ffb0be7e5a9a9925ae1a3c9856f09d93fc13bc8dc829aec
- MD5 b85fcc747ffb1d89132a3141aab6376e
- SHA1 9b9b4935e2f3ecb843f979f896545056c735c553
- SHA512 920bbda5a943bc3d6e57f374898eb1fd0f74280936cd1a80a48d80121cfb4bb4b45a9c55611106d3789b25dc300288f7e24ffa7cc966597881af2f45f47bad7c
- SSDEEP 96:vc0mwcz6vL/DZOvRQtGVgYgS37edFfUCeo41M2stkdAZl7+xWlYPgnxP9:vrTYI7DZzAgzUm4S2sioQM66xP9
- TLSH T1CFA12D62C6823D745BCBC34CE8AD9CD7543506368EC952920BAA3E84FCDE20567FC4B5
- MD5 SHA1 SHA512 SSDEEP TLSH
DMRootCA-Server.crt
- SHA256 4961d9f87d992116902719726e0e1dcbaef67395dd0ff4cbc8f6a61981269c1d
- MD5 91b56071382de99ed235f7655f73b1a0
- SHA1 52ddb099093e11e943f1dbc546093882bca13919
- SHA512 eb39ea94797570efff667ee6fe683bd43696e7bae76c67f4b1dcd9c5f235d65c8c8fc23cc2e989472d1e68cc6f42ace9826bc4d9fd1f02091e881d0127aae710
- TLSH T12021E9C687A2AC34E687C384EC9F591F14530F378CC877761A692E26ED9750D05BD4C5
- MD5 SHA1 SHA512 TLSH
DMRootCA.crt
- SHA256 c32c8d84f7120e3a66e6ef38ab119e0a9a7c45d1170e52f71f71d7736b01bbdd
- MD5 d829c0a2f36bae190d6a1b6e6a1acb18
- SHA1 482c588005f4d1a7b331a14b42f99a15cc2ade82
- SHA512 98c9a7d5376550029834590117fa00b4e8fd756fbfa99aa908af43351473d43ca9a37b726f32307edf19452a1f7e6e8a96bdd9418938a5ef206a44ace490e653
- TLSH T1CB21E9248D443834A8478788EE5D6D855C310B7B9AE933E219AB3E00B5DA6B673BC4D5
- MD5 SHA1 SHA512 TLSH
README.html
- SHA256 02595856ad354a47e9c664a55dc428aad19ce73a00fe95228bbe590cfca944d8
- MD5 2d939d7afe37b02f77e4eb4d5e5916fc
- SHA1 7aaea8ffacef9986f3c99c9a172763fc90c71217
- SHA512 26df83433c38890b4e5bfe29b508666257b3abd562568c5fe7558925128c28d89d237420aa872db4710ef7d511b478e867751cb6426679a52554dc7b89ac948a
- TLSH T10021FEB3C2526B3AB563034E305BD6D42F12F28150545F5C72B640DAB8CA227B41B3DE
- MD5 SHA1 SHA512 TLSH
UEMSAgent.msi
- SHA256 9392dabf5b4a1d41329143c232e5130ad56e4ce1b5973372623e7982f683bbe2
- MD5 71e42f702ef3eb9906143f754ef85697
- SHA1 af484ae5b616abac8e33e8c5ca22d84252c8caed
- SHA512 a70b2b76e8a002d5a283301a64314378972724777b76dea9313ecb92b06da8a522ac7727ee2bac21f5c02faac16f2738759d7a659c74d6e646942f2f00bd36a2
- SSDEEP 1572864:kZO+GDQ9qACZ6Xbg+K+s5jZnKLY73TI2pOwAt++jlzfcj8ztlF96h1+vSK:k0PDC46Xbg4E9GYDTIvwAE6zf+aX0+vS
- TLSH T172D73323B8888136D59ED1300AB96F2D4E7E0C50877880D7E764BD6F51B5FC1A3793AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6fc2d14e9f4802ac326e8fe31e6b7a3d77e13afb4bea8b9a1e3a1b0769c316cd
Digest Algorithm
sha256
Digest Matches
Trusted
Prehash
Signing Certificate
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
Chains
Aug 24, 2026
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
Serial Number
24:bb:11:9c:e7:e7:1d:59:89:e0:c6:f6
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2025 - Oct 9, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
UEMSAgent.mst
- SHA256 8dd93f43089a682cbac39c0a1f364057dcb7d08e9b1480c088f15a5dd56d8be4
- MD5 0273976d2ecf588a5514b0f5069968e5
- SHA1 b906399f51bffff670d20c5f5d66800a78b1e638
- SHA512 da06fe4cf771c3a4840ced5b95a421cbec98023766d0d382b44798fefdf04f794119d3c17eb2165f35df1745bf3ffad600af10b7f89cce24f788a57f6e67a809
- SSDEEP 24:J+U2p5gxBuP2xjl/Zd8pJPSgHiHJoxIzxhK:IU2p4gI7dyJaz
- TLSH T109927202FBA1EA16D0490A358E96C3DC0B36FC81DD42836B35E6776FBD721C54D62AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
setup.bat
- SHA256 91f784bf3dd83c0f5135ac1fd00a0fdd430720ebc57ec4c2eccb7875dbc8a90d
- MD5 9cb71612a1aa60c6a9c893bcefced81f
- SHA1 b9259cb454959dca0a42de49c5ad6f336719a384
- SHA512 3eac954bc561dd2f1ba88324acc5baaaedca2c7b3932135a6ccb7ae69b8057a8540b85a70cbd25d5b4a558254789c977bd9439ca0643b8d655a3bf802c3120eb
- TLSH T11351E0D48F112F641465CF09E46B81C3E733D0416ACA753404AC7C6F7B8D6AA3D3EAA4
- MD5 SHA1 SHA512 TLSH