DMRootCA.zip
- SHA256 6ae1890733bc70a08b6b4300608235d708ed7bb6b430844ad782e7dfb720d71b
Overview
overview
8Static
static
1Optimizein...on.vbs
windows10-2004-x64
8Optimizein...on.vbs
windows11-ltsc_2024-x64
8README.html
windows10-2004-x64
3README.html
windows11-ltsc_2024-x64
3UEMSAgent.msi
windows10-2004-x64
7UEMSAgent.msi
windows11-ltsc_2024-x64
7setup.bat
windows10-2004-x64
3setup.bat
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Optimizeinstallation.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
30 signatures
150 seconds
Behavioral task
behavioral2
Sample
Optimizeinstallation.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
28 signatures
150 seconds
Behavioral task
behavioral3
Sample
README.html
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
README.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral5
Sample
UEMSAgent.msi
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral6
Sample
UEMSAgent.msi
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral7
Sample
setup.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
setup.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target DMRootCA.zip
- Size 31.4MB
- Sample260919-s8e8astvgt
- SHA256 6ae1890733bc70a08b6b4300608235d708ed7bb6b430844ad782e7dfb720d71b
- MD5 c9a4335d248ccb9733a9ba845d985ab6
- SHA1 3c08034b430a30fe0b7d2cf040616f1073e25d47
- SHA512 e69c25a0bbe25a9826af36d5fe657160873dacdcda5fdd44ce99741997c7d53a5bc73a4295d194a0ea395b0a9ccdb897279f4bd1c793befdd40968588deb7356
- SSDEEP 786432:vE23VQ7djuPEnYfNEauGILcHcYY8Tuqvs4IKa86:cuVQ7lusYfNnuJHR4IB86
- TLSH T1D67733D587E9812BA5C3F950CB095784F5C880EEB9B8FAB3FB1A1BD4C7871D14263A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
DMRootCA.zip.zip 31.4MB
-
DCAgentServerInfo.json1KB
-
DMRootCA-Server.crt1KB
-
DMRootCA.crt1KB
-
Optimizeinstallation.vbs.vbs 9KB
-
README.html.html 1KB
-
UEMSAgent.msi.msi 31.8MB
-
UEMSAgent.mst20KB
-
setup.bat2KB
DCAgentServerInfo.json
- SHA256 215998acba058b73965acc7b9a07f920190043149dfd00bf201e8c4348d5ef3d
- MD5 e63c6a652ecf2cbe67b7f549ceae0e26
- SHA1 6960f7cfa109312d25903c1a88fe2d165885861a
- SHA512 dbd13f8b7885f6ebe316a3745b82a6d51d217dbfbaedc538e9c931b36efb08e2ad707b73f1e782fe44f4dfcfff345a7d7a93ba440c0b9dcfe6a843051ae41907
- TLSH T15231CDA4D9130E2756DE9D59945C281562B8083F0C147888775CA4DFBF9E70F23F312D
- MD5 SHA1 SHA512 TLSH
DMRootCA-Server.crt
- SHA256 7a3db49401a759edebf231bb3bb74099a9af8a9482fc2444c2e2a72c5c58ca0c
- MD5 412cebdc6f727c32cb9b6ec86202781c
- SHA1 430a718c67c65fb3053806e594d8704240d2f198
- SHA512 09a54f1547996bdee96617d504a197e11825b648996384b7308146039696694f57c1fba0c49a1682310b5d81d11fbe05c7cdbedd1a9c0ddba37754f292dbb89e
- TLSH T19B212BF11F202D9D9063F94CC4CC92550C44860BAFDDD1116BDD3613EB05C070E5A80C
- MD5 SHA1 SHA512 TLSH
DMRootCA.crt
- SHA256 87b988ac70021c6ccbf25e702a3aaac0d278219c9bc5e86b73985000c72f602a
- MD5 b2b42933ee4848f93bff18f04edf5992
- SHA1 48ffa9f0090e5b3143af0964d90c14fd041735d5
- SHA512 6e480dbf9b2910fd1141023c1c74b99d0dae6ceb9472bd6ede6641380174cfc0a283814fdec14cbcfdc85b5332d5b670e339ad71a92fac04e7f8c1a26f056665
- TLSH T1FF3187082E433CADF507F5E8D16A354A9D1A92AB5C3F71B224CE7523D38A242125D5AC
- MD5 SHA1 SHA512 TLSH
Optimizeinstallation.vbs
- SHA256 c076f8e222e25225c68700e807d998a18da8d6cdec61686cdd13098b2641b681
- MD5 2ad9b66d959054f019a7058eb3bc4b65
- SHA1 9215d7a0a214de88e0fc89db919e5e89fafc4c89
- SHA512 aeb435073f793ced3df699327499c7858bde34f69cb00c184e09a3fe307699f572fc99babc618d41714924d8a87134e582cd5569639f949a884335fd52594647
- SSDEEP 192:uTuT9NjcUR18X3n0VHJkiLjJlLYNgAF21dhCz7ES1xa:vpZ9R18X3n0VHJki3JlLYNgAkhCz7EA4
- TLSH T16212020053ED1548B1F26A04EEB68119CB23BDA5A879DD0D45EC098E5BBB904DCF7F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
README.html
- SHA256 02595856ad354a47e9c664a55dc428aad19ce73a00fe95228bbe590cfca944d8
- MD5 2d939d7afe37b02f77e4eb4d5e5916fc
- SHA1 7aaea8ffacef9986f3c99c9a172763fc90c71217
- SHA512 26df83433c38890b4e5bfe29b508666257b3abd562568c5fe7558925128c28d89d237420aa872db4710ef7d511b478e867751cb6426679a52554dc7b89ac948a
- TLSH T10021FEB3C2526B3AB563034E305BD6D42F12F28150545F5C72B640DAB8CA227B41B3DE
- MD5 SHA1 SHA512 TLSH
UEMSAgent.msi
- SHA256 92f68fc7f6d0f544a750bf67b4903d1a4062d1372b7f98ab5c2f698eb61359bb
- MD5 db7ca603d463a06806ff1660979f406d
- SHA1 823ade4e43d36416436a115c48ba562d94fa696f
- SHA512 8e2527478514cf5ec8b40fa0ffc53d91ae72a1ba75a8c96800e06282b5e76e2f2f61f4b9e979c15f691591ee4f926b17aa07aebf31de68638b13e94db702b8d5
- SSDEEP 786432:juvkjbX98hUIlkZpqcvX4kp1h1HnX6Jx5L3gxKF:ivk3X98hUUspqcvokD3yxU6
- TLSH T1FD77337234438836D5C26CB095E6C364D2A60D508EB42453A677B2BBDAF37C296F73E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5907cc74cfd6f61cc5c75c3a151bcaa165ff25eab727055ecb774c19ea0c5482
Digest Algorithm
sha256
Digest Matches
Trusted
Prehash
Signing Certificate
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
Chains
Jul 15, 2024
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
Serial Number
51:32:af:90:cc:55:1e:68:5b:1b:6b:ab
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 20, 2023 - Oct 9, 2026
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
UEMSAgent.mst
- SHA256 180195558475b32abedb88b3103c06ee464148809986b78de32d8fdba897c516
- MD5 0509fd12bad30c0cbe679a18bcb2042a
- SHA1 6c933d6b00da0a63621e646912a1079b2af5e0e5
- SHA512 9593e50f7c91fb06701938376255e3a50985a2b7559340f1f17d801026a2f5b8ef1348857b80a0d9b6559768525d68f148b372a50597b0ec8aac15309db800ee
- SSDEEP 48:k7xLm2JQMPTjbJc3GgCP/p/vvrdGRFXfJJa8:kdJQyNGo/JRST
- TLSH T14E924D4AF622E93ACA494A329D53C3CC0731BC01CD82425B76D8B7DFBC7A1841B165EC
- MD5 SHA1 SHA512 SSDEEP TLSH
setup.bat
- SHA256 91f784bf3dd83c0f5135ac1fd00a0fdd430720ebc57ec4c2eccb7875dbc8a90d
- MD5 9cb71612a1aa60c6a9c893bcefced81f
- SHA1 b9259cb454959dca0a42de49c5ad6f336719a384
- SHA512 3eac954bc561dd2f1ba88324acc5baaaedca2c7b3932135a6ccb7ae69b8057a8540b85a70cbd25d5b4a558254789c977bd9439ca0643b8d655a3bf802c3120eb
- TLSH T11351E0D48F112F641465CF09E46B81C3E733D0416ACA753404AC7C6F7B8D6AA3D3EAA4
- MD5 SHA1 SHA512 TLSH