TEF6686_ESP32_Dev_Beta_2.11.22.zip
- SHA256 91f49576b0de21971da328047745ad5bc229fdd206fb65f9ade40efb9015fdbd
Overview
overview
4Static
static
1TEF6686_ES...ol.exe
windows10-2004-x64
4TEF6686_ES...ol.exe
windows11-ltsc_2024-x64
4TEF6686_ES...sh.bat
windows10-2004-x64
3TEF6686_ES...sh.bat
windows11-ltsc_2024-x64
3TEF6686_ES...ash.sh
ubuntu-18.04-amd64
1TEF6686_ES...ash.sh
debian-9-armhf
1TEF6686_ES...ash.sh
debian-9-mips
1TEF6686_ES...ash.sh
debian-9-mipsel
1Static task
static1
Behavioral task
behavioral1
Sample
TEF6686_ESP32_Dev_Beta/esptool.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
TEF6686_ESP32_Dev_Beta/esptool.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
TEF6686_ESP32_Dev_Beta/flash.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
TEF6686_ESP32_Dev_Beta/flash.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
TEF6686_ESP32_Dev_Beta/flash.sh
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
TEF6686_ESP32_Dev_Beta/flash.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
TEF6686_ESP32_Dev_Beta/flash.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
TEF6686_ESP32_Dev_Beta/flash.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
General
- Target TEF6686_ESP32_Dev_Beta_2.11.22.zip
- Size 7.7MB
- Sample261029-yjsd8asxcv
- SHA256 91f49576b0de21971da328047745ad5bc229fdd206fb65f9ade40efb9015fdbd
- MD5 47885b1fc2d7bcbbb2247e2e4ece1c29
- SHA1 f263e6f5bf361acba2a6197681d941dbb091874c
- SHA512 e64e5aea9d36c3bf050e1c5f5f18c796a6098f7e780a4d9536218fe1c9d5da65d9a747eed65134d99428f131703f2188b13799340777ef6893c3871f91e2240d
- SSDEEP 196608:kQi9HacQgIwmVR9JCv7VmQaxvnVps7QuRiuJjCP/gJ:kQxcTIwGzJg1axfkEuEuJ+E
- TLSH T15C8633421C85B35A0360FA1901BF8EE2844D7C23E2A7074B299C6A4F797BD59DDFD683
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
TEF6686_ESP32_Dev_Beta_2.11.22.zip.zip 7.7MB
-
TEF6686_ESP32_Dev_Beta/TEF6686_ESP32.ino.bin3.0MB
-
TEF6686_ESP32_Dev_Beta/TEF6686_ESP32.spiffs.bin896KB
-
TEF6686_ESP32_Dev_Beta/boot_app0.bin8KB
-
TEF6686_ESP32_Dev_Beta/bootloader.bin18KB
-
TEF6686_ESP32_Dev_Beta/esptool.exe.exe 6.3MB
-
esptool.pyc456B
-
TEF6686_ESP32_Dev_Beta/flash.bat.bat 2KB
-
TEF6686_ESP32_Dev_Beta/flash.sh.sh 5KB
-
TEF6686_ESP32_Dev_Beta/format_Spiffs.ino.bin521KB
-
TEF6686_ESP32_Dev_Beta/partitions.bin3KB
TEF6686_ESP32_Dev_Beta/TEF6686_ESP32.ino.bin
- SHA256 de49c38d0cec35849671c8712d2d0bf5c9267628f2ce20ecc96b33db37b1d557
- MD5 88842251065d6ac8942a2c4b7c746825
- SHA1 3881b6a85c45421c4cbde07028a59ca2a7f072f2
- SHA512 31827bc48d7e96c85ee44d01109b312e7e0c79e212d804197c3d178a548f9c9872a626e42e190fcee9a7e937ddcff5336cd2c5cc63d7d98f88e9d27463dfcc8a
- SSDEEP 24576:1Vvv0RXaZe3fpb0GBu+3WS6Oi0uKrL7nohP7Gs72cXL76prbj60ZQSVEaD:1VWXaZERb3BudKjnohVF6NH60ZQS9D
- TLSH T1F6E520A672AA9CD5F23B03F487D9DB526B247C1C6E4291143120BF2C5DF9AD9CB2D2D0
- MD5 SHA1 SHA512 SSDEEP TLSH
TEF6686_ESP32_Dev_Beta/TEF6686_ESP32.spiffs.bin
- SHA256 9c9e9c81b4a676f7af6148f78e03e2545447a0a8c0042fbadab1736599256f46
- MD5 0f8d56928de568ad8dda82fd4923526a
- SHA1 9dc4f3567856eaa171d8bcbb476ec6db15785b0f
- SHA512 ffbdf95831531ed23dd49a4785e79e268cc4633e8dc4893d10bdd38c93c2372ebfcad1ff6a9b1509f2673d9ae843e594e1dde000e5aad1399beb972d70d3536d
- SSDEEP 12288:WXYhOJVC6gzDbLDub7jozPq/LFm+NONRk5N4gQGyhIo7jRSoTEaXn7ZNJkW:t9TOvpjNOC6r
- TLSH T14F15D881B893609FCAC6BAF34CB4A1792352FC91EC6153C6872BF79CB1316859F215B4
- MD5 SHA1 SHA512 SSDEEP TLSH
TEF6686_ESP32_Dev_Beta/boot_app0.bin
- SHA256 f94c5d786a7a8fab06ac5d10e33bf37711a6697636dc037559ea19cc410a17f0
- MD5 e6327541e2dc394ca2c3b3280ac0f39f
- SHA1 6d36151f497fe82f3b0a2a58ebf669cf7b0f9623
- SHA512 7e6b08bc1d049e27bf9c2d6cedbeb9f080a6ccb03546b89eae86305037fe2415f50d374204ad9738629b571a534d6ed07493a9f824d6389bf85ed9903e2df05e
- SSDEEP 3:b8Zm2RL/AaRf:b8Ymxf
- MD5 SHA1 SHA512 SSDEEP
TEF6686_ESP32_Dev_Beta/bootloader.bin
- SHA256 f2dfacdea6ae72d0aeeb7c30e525c4c6fc768a041849feac694cbb2ee2224448
- MD5 33cdbb00ef06d04b5973d759f6473e06
- SHA1 7258c45847906131e232077b5c76e1b7edcee823
- SHA512 2854f6dc409c0f784ca6d8d733c70a5e0d12bc953bf3f4c22b8a4f82f0a43f7f50662c2d273c3c3dd26bb5173733e0abddc654c0f78951b84442257cb64c1fcd
- SSDEEP 384:xzGxQpG0hrGc9kBUizwXJfCS56QWWu5Mv/6f8NK53K5lB:xzquGcFi0X1CS56vv5MvyK5X
- TLSH T1E0823A489D15DC99E153A2789CD18A02E3D8ED0D78CE79B33498376B9B2033C9EE51F1
- MD5 SHA1 SHA512 SSDEEP TLSH
TEF6686_ESP32_Dev_Beta/esptool.exe
- IMPHASH ba5546933531fafa869b1f86a4e2a959
- SHA256 6ddb5919e7a913a232b0dae1d865a9cfa1482a9c9e2c478b7ba4c5f1bf170b81
- MD5 1efd03ea3cba3849df48a6143b810f22
- SHA1 cc6030f28fb3e9a591fb984c80876c685bdf283f
- SHA512 bbee74acb0468eb5556f18c6692974feda7d2ce57e38275a390ff087795f50a456c73541eca82222fa6259a08b52af31b26c5ca29f1be30a1181e6f37a627791
- SSDEEP 196608:qXzjOCsXDjDyf/dJolpPgToa10/IUFOnJfFogT:KzjOCEDCJ83a10QUsVmgT
- TLSH T1B5663347958119E5E9F3653E88518B12FAA67C77C712834B02A45237EE2B2B19F3F703
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
57:6f:44:04:e0:c0:38:45:b6:e6:ba:8a:d1:c5:2a:87:a3:06:9e:86:93:14:1e:d2:3f:68:04:48:7e:32:96:f3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Espressif Systems (Shanghai) Co.\, Ltd.,O=Espressif Systems (Shanghai) Co.\, Ltd.,ST=上海市,C=CN
Chains
Feb 28, 2023
CN=Espressif Systems (Shanghai) Co.\, Ltd.,O=Espressif Systems (Shanghai) Co.\, Ltd.,ST=上海市,C=CN
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Espressif Systems (Shanghai) Co.\, Ltd.,O=Espressif Systems (Shanghai) Co.\, Ltd.,ST=上海市,C=CN
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Espressif Systems (Shanghai) Co.\, Ltd.,O=Espressif Systems (Shanghai) Co.\, Ltd.,ST=上海市,C=CN
Serial Number
06:7d:6a:4a:42:5f:12:41:0b:58:41:77:f9:72:3f:f9
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 13, 2022 - Oct 15, 2025
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
2
Major OS version
5
Entry point
42656
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
WriteConsoleW
GetProcAddress
GetModuleFileNameW
SetDllDirectoryW
FreeLibrary
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetCurrentDirectoryW
FlushFileBuffers
HeapReAlloc
GetFileAttributesExW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
SetEndOfFile
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=190, id=261, version=30795,
count=10, id=260, version=30795,
count=3, id=253, version=31823,
count=40, id=261, version=31823,
count=17, id=260, version=31823,
count=9, id=259, version=31823,
count=5, id=257, version=30795,
count=117, id=1, productName=Unmarked objects,
count=20, id=260, version=31937,
count=1, id=258, version=31937,
esptool.pyc
- SHA256 a74a2f61c10a0bdd7654ffb798b4526e75ec5840f3868971d2db90b5402362e9
- MD5 a6657e4537b54f6bebabfcf6340aa0a3
- SHA1 6cc1224faca3c6b82df39569061e38309650b488
- SHA512 cd53875fb0172760cb4f958eb2c40ce9ab83afdb1ef7be48a4c1e67208b8f529eb20bdfad4936cc1d725b0ccce5689c7ae4814f42368b43c25c73cafa8fb47aa
- TLSH T16BF0DC53412200F8F8D2BAB0B1220B529FD3B23C8704479F5A08AA3F8C281908C1470C
- MD5 SHA1 SHA512 TLSH
TEF6686_ESP32_Dev_Beta/flash.bat
- SHA256 d9b42d11b92eb24d9e7a3d21aa259a34b00db96a84b479299f86aacaa5dff5e8
- MD5 d821fc1c53fb44f9f4976490c9af1788
- SHA1 412f85c9d54de573a79cfa1901b781ecde7b1648
- SHA512 9ae028bf9e1f5fddb060d8e1c60da189fe53454b6e4f3bb3582b5dc48000ebe3db03164df96c0f3e3e72269200e8d130f9c4ba42b515dcab7be6f9476d9d88f4
- TLSH T1505120337E05803205F0C9B369A99422E98A549BA3575CDF7457D42C7F32886D3FE2E8
- MD5 SHA1 SHA512 TLSH
TEF6686_ESP32_Dev_Beta/flash.sh
- SHA256 43413a6392b0288caa8fb37f223b9a0c243fa52a0292ec2a0fc22c9fca248595
- MD5 e895ee5f03411ce53ddbec944c960381
- SHA1 b1186d07802a7dd4acc7abab26f724816a2e05d6
- SHA512 a5db0e6a719636207d4a40e90a550abffbb6746d8f1f6cb2348a681ab5d0c87c59172a2a3c3cd603f4d56bee8d46d13a59c8d51e233192c9341451a7113b25a0
- SSDEEP 96:5bXUZvO5jsXSXl1+ON+1WWm0ZSu/isiLLxYUsxLELTVoLmYeVetcvdBvtRbB9pIS:+ab6t//cxMiTVOmYeVetcvdBvfbzpIje
- TLSH T1BCC15123FD141371546DC276A5CF50A2F798009FD9943CBF789EA4142F244A8E6FE2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
TEF6686_ESP32_Dev_Beta/format_Spiffs.ino.bin
- SHA256 0c0ed5061232f6297321a7d5836b689426fdee796e6828938e5a41f00e1d38fd
- MD5 bcaeea3d46618845d27c99aa0c40770a
- SHA1 77871b1854b845e0bc8064b47d93bf502b1cf727
- SHA512 d8b8e22618fc1a4246654be5e9fff5a689dd5b2d15f9a8ea0936c6720a7c1df4aa613eccbd661dea6dc05211761a2f45efaa8cb5b5459774a672f35c61a8e604
- SSDEEP 6144:5e3QT1fMMcaf+nV/EL6RZ71i9+kan5I5o4mmX0GaF09Kuka72ns+ymR:5e3QT1fMMcwSld1i9an52XXnaFE2nnr
- TLSH T150B49D36B232E92BE056897068FEC6507774BD1D9F1A161F71A0B33F79722785C22392
- MD5 SHA1 SHA512 SSDEEP TLSH
TEF6686_ESP32_Dev_Beta/partitions.bin
- SHA256 aaae2888c5a6a348004b5b436f47abb25ae32e72d9003902955a998eda723edd
- MD5 70007348574201233bc0cb17155e9d12
- SHA1 b676bf4fddf2c16e4e21d63de3053f7eb89d1927
- SHA512 054b50db979ca4bc7d98394143226a674169f5a704ff22e149f6ba66becef866e217febbd07e00ccba5d7b26a38051b2805f342e6389b7a6ed788afe5466f7c5
- TLSH T12A519BB1DB415494E75619F200DF557514586F2C4F196593564474101870585BD15D46
- MD5 SHA1 SHA512 TLSH