8d0b895808f819f34517f4aab08ef995c8bb658bf82201d11c7318dea75817f1

Sharing

Copy URL Twitter E-mail

General

Target
8d0b895808f819f34517f4aab08ef995c8bb658bf82201d11c7318dea75817f1
Size 293KB
Sample261027-sxp85aez8j
SHA256 8d0b895808f819f34517f4aab08ef995c8bb658bf82201d11c7318dea75817f1
MD5 a8cfbc4719b5c13552acda42e2854ed9
SHA1 0ba13ebc3089d449c9f75b07de75e839cee1edf9
SHA512 d2e4de667fd2f456d65abaee25420eafabfb1b91af57de4fc533802c1a3124d7b90ed6ffdfd1960e07acbf78fc88a6082c35a9c04f841411f45625a6c465aebc
SSDEEP 6144:odXpCoaAzgwAKY5k1VkcQP9LGqr1MC5IrqUb4PUGjCOk0YTCoh:apC+vApkHkzr5erqUsUG+Ok0sCoh
TLSH
T1B3548D00F79A8032ED2B2D761D729729853DB9109B388BC7DBC02E2EDE215D2D9B531D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
8d0b895808f819f34517f4aab08ef995c8bb658bf82201d11c7318dea75817f1

File Explorer

8d0b895808f819f34517f4aab08ef995c8bb658bf82201d11c7318dea75817f1

.exe 293KB

8d0b895808f819f34517f4aab08ef995c8bb658bf82201d11c7318dea75817f1

IMPHASH 4e2c0084eb9e4fd51d0ceda72c583b63
SHA256 8d0b895808f819f34517f4aab08ef995c8bb658bf82201d11c7318dea75817f1
MD5 a8cfbc4719b5c13552acda42e2854ed9
SHA1 0ba13ebc3089d449c9f75b07de75e839cee1edf9
SHA512 d2e4de667fd2f456d65abaee25420eafabfb1b91af57de4fc533802c1a3124d7b90ed6ffdfd1960e07acbf78fc88a6082c35a9c04f841411f45625a6c465aebc
SSDEEP 6144:odXpCoaAzgwAKY5k1VkcQP9LGqr1MC5IrqUb4PUGjCOk0YTCoh:apC+vApkHkzr5erqUsUG+Ok0sCoh
TLSH
T1B3548D00F79A8032ED2B2D761D729729853DB9109B388BC7DBC02E2EDE215D2D9B531D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

4b:e7:49:55:9a:f1:c5:b6:0a:2e:32:94:f1:3c:99:ab:35:db:27:95:02:12:30:f5:0d:ca:ab:32:06:82:f0:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=7HS-GO

Chains

Oct 27, 2026

CN=7HS-GO

Subject

CN=7HS-GO

Serial Number

6b:09:b9:b5:34:a3:02:ac:4f:6a:85:4b:04:0f:69:18

Issuer

CN=7HS-GO

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 27, 2026 - Oct 27, 2031

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

140288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

kernel32

WritePrivateProfileStringW GetPrivateProfileIntW GetLocalTime FindFirstFileW FindClose FindNextFileW WaitForSingleObject GetLastError RemoveDirectoryW CloseHandle DeleteFileW SetFileAttributesW WriteFile WideCharToMultiByte ReadFile CreateFileW MultiByteToWideChar GetFileSizeEx WriteConsoleW SetStdHandle LoadLibraryW GetConsoleMode GetConsoleCP SetFilePointer HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetPrivateProfileStringW GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetLocaleInfoW GetStdHandle ExitProcess HeapSize HeapCreate IsProcessorFeaturePresent GetProcAddress GetCurrentThreadId SetLastError GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetACP IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess LCMapStringW GetCPInfo ExpandEnvironmentStringsW LocalFree GetCurrentDirectoryW GetModuleFileNameW GetFileAttributesW FormatMessageW RaiseException RtlUnwind FlushFileBuffers InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW HeapAlloc

user32

LoadIconW DestroyIcon EndPaint ClientToScreen DestroyWindow SetCursor GetWindowTextLengthW GetWindowRect PostQuitMessage TrackPopupMenu FillRect PostMessageW DrawTextW SetForegroundWindow TrackMouseEvent LoadCursorW GetClientRect BeginPaint PtInRect wsprintfW GetDC RegisterClassExW InvalidateRect GetWindowLongW AppendMenuW GetWindowTextW GetClassNameW ReleaseDC SetWindowLongW GetCursorPos ShowWindow CreatePopupMenu CreateWindowExW GetSystemMetrics SendMessageW MapWindowPoints UpdateWindow EnableWindow AdjustWindowRect DestroyMenu GetDlgCtrlID SetWindowTextW CallWindowProcW DefWindowProcW GetMessageW TranslateMessage MessageBoxW DispatchMessageW

gdi32

SetBkMode SetBkColor DeleteObject SelectObject CreateFontW EnumFontFamiliesExW GetStockObject CreateSolidBrush SetTextColor

Sharing

General

Malware Config

Signatures

File Explorer

8d0b895808f819f34517f4aab08ef995c8bb658bf82201d11c7318dea75817f1

PE Signature issue

shell32

comctl32

kernel32

user32

gdi32

generic