msu.7z
- SHA256 0424ba620e137c8f624c81c21e2e31273079a7a33324dfbc183f7b8b3d7f5a17
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
msu.exe
Resource
win10ltsc2021-20260911-es
windows10-ltsc_2021-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
msu.exe
Resource
win11-20260911-es
windows11-21h2-x64
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
msu.exe
Resource
win11ltsc2024-20260911-es
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target msu.7z
- Size 2.9MB
- Sample261001-qzcppsycqg
- SHA256 0424ba620e137c8f624c81c21e2e31273079a7a33324dfbc183f7b8b3d7f5a17
- MD5 8ff8265c4952cdbd79a0c35a085cc7e4
- SHA1 a8c48f6a144c90b7ef11753b4a38fabd74ee7224
- SHA512 c67cb664dcec02c4ac653e022f9d18585dbb53490f46c3e27a129d26aefed47f8ab6ae50da429adc1bdd6ecd85e5ad99beb21e14fef98b6a49f0697537a63880
- SSDEEP 49152:pZdhh0uvnegvyNtXvNvVozdGZor85KG13Tn0v0HXCEypl9zI0QrMQTVXau+4LXIS:pZOuvneXYZGs85KMTz3Cl9zmfVXauNzv
- TLSH T144D5333C4BF887E30255E8FB9DB10A84CDE008CD1CD0EEC7765E8CE15661A2294D9AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/msu.exe
File Explorer
-
msu.7z.7z 2.9MB
-
msu.exe.exe 15.6MB
msu.exe
- IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
- SHA256 73df72293f56c2fb3264ad79523290e9b2dbde492aa3e99959192484ae2e4962
- MD5 7757cfb08b4a047bdf30abf9801c1553
- SHA1 eae3ebb760fb48506d726a7eaabcbd21663a7cd4
- SHA512 be6614d428491df6cf61c0cdaa74398fa128d1026ecde6956b234758196946c8c5939234a89505508d74c178b6ed377ff219530108c68095d9af3e3db3c400fb
- SSDEEP 49152:oIkzGTOxpk0mR1otPBGkQ4LfXCvz8ToufTTDNMR2z4zdeKI5dmT5KLMG8gwatWEs:CnCuf4zdcBoGVAr
- TLSH T1CFF6FA17B35410E8C98BD33584F15A6A22B23CEE5632775A0E99AFD02F127D17FA4F48
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
1a:61:50:bc:f5:e7:01:14:35:02:dd:33:ce:3a:7b:4b:89:f7:ff:82:ed:3a:c7:b6:92:24:47:ef:c0:25:cd:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Summit Sphere,O=Summit Sphere,C=US
Chains
Oct 1, 2026
CN=Summit Sphere,O=Summit Sphere,C=US
Subject
CN=Summit Sphere,O=Summit Sphere,C=US
Serial Number
f4:58:e2:92:56:a7:ab:9b:a1:5f:4b:2b:37:ab:c1:98
Issuer
CN=Summit Sphere,O=Summit Sphere,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 24, 2026 - Oct 1, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
1
Major OS version
6
Entry point
392512
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
5.5MB
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9.9MB
Virtual Size
9.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
95KB
Virtual Size
462KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
98KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ