UltraLeve-MIST[.]zip

General

Target
UltraLeve-MIST.zip
Size 719KB
Sample260930-wwmndstsfw
SHA256 c3a69915b6d6a1131cf33c62370c2a1ba764ca883c51f779281a3d1e75058506
MD5 bcdac1acf47e7a7ab88ffdeab2509b3b
SHA1 4eea4c9f90e9afcf586a172264c9df826e68f6dd
SHA512 109666d65bbc6ae26cba4b36bcc2322a261701c0289127776266978baea74d20eda4aba3bafc16f84f0381fcf637536accb9c94fc41a857e04804c3f29fb8107
SSDEEP 12288:UXjQVgeXHIThN37p9JFT4KcB/WqoOefyhTvU1JWI49e3prIqQeH7hTVaC27ICbnX:UXglXITHFh4//Wq7e2cWIP3p1bhTVl1K
TLSH
T166F423F43E178778F9478FE8CAEEC4A45033026254FD2EC316AE17D34246EE682EA155
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/UltraLeve-MIST-Setup.exe

File Explorer

UltraLeve-MIST.zip

.zip 719KB
LEIA-ME.txt

489B
UltraLeve-MIST-Setup.exe

.exe 896KB

UltraLeve-MIST.zip

SHA256 c3a69915b6d6a1131cf33c62370c2a1ba764ca883c51f779281a3d1e75058506
MD5 bcdac1acf47e7a7ab88ffdeab2509b3b
SHA1 4eea4c9f90e9afcf586a172264c9df826e68f6dd
SHA512 109666d65bbc6ae26cba4b36bcc2322a261701c0289127776266978baea74d20eda4aba3bafc16f84f0381fcf637536accb9c94fc41a857e04804c3f29fb8107
SSDEEP 12288:UXjQVgeXHIThN37p9JFT4KcB/WqoOefyhTvU1JWI49e3prIqQeH7hTVaC27ICbnX:UXglXITHFh4//Wq7e2cWIP3p1bhTVl1K
TLSH
T166F423F43E178778F9478FE8CAEEC4A45033026254FD2EC316AE17D34246EE682EA155
MD5 SHA1 SHA512 SSDEEP TLSH

UltraLeve-MIST-Setup.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7695cead081a2c4e7e7cfa77bc33cd1316ce2fcbdd114fab2fe412f254f259f1
MD5 3a42892fd38963b725c30c115a43a302
SHA1 f6deeb00ec7e8eb81b1ce1ba6399adc60d0654bc
SHA512 81c744e6da6d72ae3765e073aaf8d45ee370aaed1a326088952749a56451926cb7834a7f330f7c39d034af270e9f16b9da198c9d0f2ac8d8b2394ff97a85fba7
SSDEEP 24576:TjJyF0gbK9+y34LOy3rIX3RhNlPm+y3RG:3Jgjy3ly3MhLlPNy3A
TLSH
T1BA15E064B3F84A24F3FFABB5957156014B73F893AD3AD38E189110DA0EB1B80C955B63
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fc:31:82:f9:32:49:6d:4e:4c:97:c9:f6:f3:20:8e:da:0a:a7:b1:fb:a1:3c:d1:74:6d:08:00:1d:9a:7a:46:a0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MIST PROJECT,O=MIST PROJECT,C=BR

Chains

Sep 13, 2026

CN=MIST PROJECT,O=MIST PROJECT,C=BR

Subject

CN=MIST PROJECT,O=MIST PROJECT,C=BR

Serial Number

6d:16:b4:57:39:5c:a4:92:4f:a4:9d:98:25:75:a3:cb

Issuer

CN=MIST PROJECT,O=MIST PROJECT,C=BR

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 12, 2026 - Sep 12, 2036

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Minor OS version

0

Major OS version

4

Entry point

790222

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

UltraLeve-MIST.zip

LEIA-ME.txt

UltraLeve-MIST-Setup.exe

PE Signature issue

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

UltraLeve-MIST.zip

LEIA-ME.txt

UltraLeve-MIST-Setup.exe

PE Signature issue

mscoree

dotnet