STAR-CCM+2606[.]0001_008_win64_clang20[.]1vc14[.]2-r8[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
STAR-CCM+2606.0001_008_win64_clang20.1vc14.2-r8.exe
Size 40.6MB
Sample261014-dde7gsft6j
SHA256 69713d31d10f0242b4a95f260817080543dd2258ffbc262668a7f31c766581ef
MD5 93915af0b52bf4576d82232909224d21
SHA1 6b3a1c7437e1f51a18859abc4b4b502e00cb2beb
SHA512 a9e38ca1390488f0a9ac3c02093c95c71f2cdc28b3cb6ed89983630c5f1a0e6f64995b6647ff811af9e9bf74ff7eadce3cbe4d174743bcaf7fa9a48e6704decc
SSDEEP 786432:GeTNpg3SF6E8CivP8IBT9xOrFkKfh7IzOM14+vroAfcT0DifHki316KS5k:43Sr1ivDpDOJkyhsz++MAfA0DifHki3n
TLSH
T17897330F7B918073D6B123330005672AE53ED990BA2564EF6B9D4CE50B65CE46CBB37A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
STAR-CCM+2606.0001_008_win64_clang20.1vc14.2-r8.exe

File Explorer

STAR-CCM+2606.0001_008_win64_clang20.1vc14.2-r8.exe

.exe 40.6MB

STAR-CCM+2606.0001_008_win64_clang20.1vc14.2-r8.exe

IMPHASH f25d99b38cdc93b1fc3b32a238343e32
SHA256 69713d31d10f0242b4a95f260817080543dd2258ffbc262668a7f31c766581ef
MD5 93915af0b52bf4576d82232909224d21
SHA1 6b3a1c7437e1f51a18859abc4b4b502e00cb2beb
SHA512 a9e38ca1390488f0a9ac3c02093c95c71f2cdc28b3cb6ed89983630c5f1a0e6f64995b6647ff811af9e9bf74ff7eadce3cbe4d174743bcaf7fa9a48e6704decc
SSDEEP 786432:GeTNpg3SF6E8CivP8IBT9xOrFkKfh7IzOM14+vroAfcT0DifHki316KS5k:43Sr1ivDpDOJkyhsz++MAfA0DifHki3n
TLSH
T17897330F7B918073D6B123330005672AE53ED990BA2564EF6B9D4CE50B65CE46CBB37A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

26:5f:9f:11:63:f4:fc:d9:a5:c1:09:86:f0:e1:03:51:81:a4:41:24:22:70:0f:31:ed:10:f5:a7:71:ee:fa:b7:77:6b:30:5e:b2:7b:a5:84:0b:a9:14:8c:3f:d4:bd:60:91:04:6e:21:23:a7:08:d9:5f:20:e1:4c:11:91:5b:b8

Digest Algorithm

sha512

PE Digests Matches

Trusted

Signing Certificate

CN=Siemens Industry Software Inc.,O=Siemens Industry Software Inc.,L=Plano,ST=Texas,C=US

Chains

Jul 11, 2026

CN=Siemens Industry Software Inc.,O=Siemens Industry Software Inc.,L=Plano,ST=Texas,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Siemens Industry Software Inc.,O=Siemens Industry Software Inc.,L=Plano,ST=Texas,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Siemens Industry Software Inc.,O=Siemens Industry Software Inc.,L=Plano,ST=Texas,C=US

Serial Number

08:37:d2:63:89:73:db:8b:3d:2b:f6:b0:82:72:a2:4e

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 5, 2026 - May 11, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

86722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

mpr

WNetUseConnectionW

kernel32

GetExitCodeProcess CreateProcessW GetStartupInfoW Sleep GetWindowsDirectoryW GetBinaryTypeW GetStdHandle GetCommandLineW GetEnvironmentVariableW SetCurrentDirectoryW GetTempPathW GetCurrentProcess GetTickCount IsWow64Process GetProcAddress LoadLibraryA AttachConsole WriteConsoleW GetConsoleWindow GetLogicalDriveStringsW TerminateProcess WaitForSingleObject GetModuleHandleA AllocConsole FreeConsole HeapSize GetTimeZoneInformation GetProcessHeap GetStringTypeW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileAttributesExW SetLastError GetShortPathNameW SetEnvironmentVariableW SetFileAttributesW GetFileAttributesW CreateFileW GetLastError CloseHandle WriteFile SetFilePointer ReadFile CreateFileA HeapReAlloc QueryPerformanceCounter UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent SetEndOfFile GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitProcess GetModuleHandleExW DeleteFileW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetFullPathNameW SetStdHandle GetModuleFileNameW HeapFree HeapAlloc CompareStringW LCMapStringW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx DecodePointer GetCurrentDirectoryW MultiByteToWideChar ReadConsoleW WideCharToMultiByte

user32

MessageBoxW EndDialog SendMessageA SetDlgItemTextA DialogBoxParamA MessageBoxA

shell32

CommandLineToArgvW SHCreateDirectoryExW

advapi32

RegSetValueExW RegSetValueExA RegQueryValueExW RegOpenKeyExW RegOpenKeyExA RegEnumKeyExW RegCreateKeyExW RegCloseKey FreeSid CheckTokenMembership AllocateAndInitializeSid

Sharing

General

Malware Config

Signatures

File Explorer

STAR-CCM+2606.0001_008_win64_clang20.1vc14.2-r8.exe

mpr

kernel32

user32

shell32

advapi32

generic