file.zip
- SHA256 79b07fac88e503f014610245c1a749d58d0fdbbfca936810eaa7bdb302ba826e
Static task
static1
Behavioral task
behavioral1
Sample
README.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
README.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
UEMSAgent.msi
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
UEMSAgent.msi
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral5
Sample
setup.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
setup.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target file.zip
- Size 58.4MB
- Sample261020-gpvcbsdw31
- SHA256 79b07fac88e503f014610245c1a749d58d0fdbbfca936810eaa7bdb302ba826e
- MD5 080b79dd0b669bf7782e37695428489b
- SHA1 d0c2442e7e8f1c90578375617f2a23b6663989ca
- SHA512 7735ace7a38292ee51dbeb3c4d5a1d2ac781198b7f1cfdcc3057d038803e50baf9536daded8bbba8ba80feb09edd9340e3d2972709eef0c371d2f3effdcf2759
- SSDEEP 1572864:VFOqDAFnRwYNHqXAMPRJTXBoIup++b3mEp90lRQ41sX7KxVSi+:XLQbMAMPRJ7B3m3mXbQ41o7Qgi+
- TLSH T14AD73373A225C525DF03907EC86F9B8CD0355FE89ABCE67F23EDA71592447A3A230065
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
file.zip.zip 58.4MB
-
DCAgentServerInfo.json4KB
-
DMRootCA-Server.crt1KB
-
DMRootCA.crt1KB
-
README.html.html 1KB
-
UEMSAgent.msi.msi 59.2MB
-
UEMSAgent.mst20KB
-
setup.bat2KB
DCAgentServerInfo.json
- SHA256 c3ebb4e95d345af6c3c186138633efd9b484c6958608963a148b6232588b0bde
- MD5 f347507a3f82c7e9f6faff2f0f219834
- SHA1 b7e109f6009406a3181e9e0c77fb3dba0f0842b7
- SHA512 5b223ce6af236a92fed444e55ced76424b9213bb97f921d6291e1785d63fdf75f303c323822d248e3058389030bc4aa8408718540d2f71f427d1028847758554
- SSDEEP 96:vTl0mBbwaRtwKOWTh8GZ7rWIg/RozN2wkdMZpYGlYPcL6w:vWeb57wK8SzN2LIaG6U6w
- TLSH T182A15C75CF433C749AEFC18DD799F8B318BE02141E95634209BE7E86E8CA280039E865
- MD5 SHA1 SHA512 SSDEEP TLSH
DMRootCA-Server.crt
- SHA256 32b04c296998752e382484eb8986e886805934e461edc611051575e355600d1c
- MD5 72b07ef6b919ebaa1afcee604a1d48f2
- SHA1 c85dd7b774d888ee83bc5e04251ea124526bd8ae
- SHA512 88337a59f35a37c3dd899e4e071e756a8fdbef0ded9b88ba4937bbbde2f04c8ab7b895c3c49a70971a98e33eca662153b55842d536ef4387cdd7ff96ef399525
- TLSH T15C21E6A45D413119E83BF1DCE5E9AC956D7606BF6CF47B21082AAD1B4B83D8001FC8DA
- MD5 SHA1 SHA512 TLSH
DMRootCA.crt
- SHA256 6b6935462dc5232dd152f4b380e34e0c7f5678b443e1ea0e2811c2b21a49c55c
- MD5 c2d0915933841cefdafa5b7c9b830ca9
- SHA1 5761be1bd66b4783d7f4e812507ad4829dab3a99
- SHA512 a37db5809ca56b7983b987fd92e17743fecfb3a49349c6ca221c46864d08330fca978a4d4736bf78589df62227e5d63db919aa52e0d26c6fc8c9ed381434bd7f
- TLSH T12121C96A2E4534E0F4BFC1C9CB8EB4791C7B47565CCD63E3217A2E1105552F0758D945
- MD5 SHA1 SHA512 TLSH
README.html
- SHA256 02595856ad354a47e9c664a55dc428aad19ce73a00fe95228bbe590cfca944d8
- MD5 2d939d7afe37b02f77e4eb4d5e5916fc
- SHA1 7aaea8ffacef9986f3c99c9a172763fc90c71217
- SHA512 26df83433c38890b4e5bfe29b508666257b3abd562568c5fe7558925128c28d89d237420aa872db4710ef7d511b478e867751cb6426679a52554dc7b89ac948a
- TLSH T10021FEB3C2526B3AB563034E305BD6D42F12F28150545F5C72B640DAB8CA227B41B3DE
- MD5 SHA1 SHA512 TLSH
UEMSAgent.msi
- SHA256 c9ed8526107dee9b2b81258401fd4a64916440766be3bfb733af77ca589455c5
- MD5 c15194355c0d5e7dcf59eee23ea58242
- SHA1 ee1d3ed343fb7d3feb80d3378f296d9850ad4611
- SHA512 4d4336690c60f6df940a55476a3678255da896b70bc308829088405ec5ab41905abbae4567c5444dfa5dd3e34b3615d32aea1e206aac0544473881e649053e83
- SSDEEP 1572864:P4MOow7RkqNQrLqXQ3yVbVxkODIwXxe8FBAJzKadGZn8B0Sz:wBBRMsQ3y1V4gxeBhKad8nSTz
- TLSH T1F2D7333270898031EA07507D497F9F7D897E6E600BBD94FBA3D8BC1A4671BD287305A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c49160b03228c4e9d3c689643d81425bf7badd68949418e7c292b1c1467ebecc
Digest Algorithm
sha256
Digest Matches
Trusted
Prehash
Signing Certificate
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
Chains
Aug 11, 2026
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN
Serial Number
0c:6b:25:f2:1a:f2:67:9b:67:cf:88:74
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 18, 2025 - Oct 9, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
UEMSAgent.mst
- SHA256 8dd93f43089a682cbac39c0a1f364057dcb7d08e9b1480c088f15a5dd56d8be4
- MD5 0273976d2ecf588a5514b0f5069968e5
- SHA1 b906399f51bffff670d20c5f5d66800a78b1e638
- SHA512 da06fe4cf771c3a4840ced5b95a421cbec98023766d0d382b44798fefdf04f794119d3c17eb2165f35df1745bf3ffad600af10b7f89cce24f788a57f6e67a809
- SSDEEP 24:J+U2p5gxBuP2xjl/Zd8pJPSgHiHJoxIzxhK:IU2p4gI7dyJaz
- TLSH T109927202FBA1EA16D0490A358E96C3DC0B36FC81DD42836B35E6776FBD721C54D62AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
setup.bat
- SHA256 91f784bf3dd83c0f5135ac1fd00a0fdd430720ebc57ec4c2eccb7875dbc8a90d
- MD5 9cb71612a1aa60c6a9c893bcefced81f
- SHA1 b9259cb454959dca0a42de49c5ad6f336719a384
- SHA512 3eac954bc561dd2f1ba88324acc5baaaedca2c7b3932135a6ccb7ae69b8057a8540b85a70cbd25d5b4a558254789c977bd9439ca0643b8d655a3bf802c3120eb
- TLSH T11351E0D48F112F641465CF09E46B81C3E733D0416ACA753404AC7C6F7B8D6AA3D3EAA4
- MD5 SHA1 SHA512 TLSH