AVAlLABLE_SETUP_(KEY.2123).zip
- SHA256 c841080dcf8a3d1ce7d3f4777863d9d693871d68540ab3c207a36e0200714660
Password
2123
Overview
overview
10Static
static
3AVAlLABLE_...3).zip
windows10-2004-x64
1AVAlLABLE_...3).zip
windows11-ltsc_2024-x64
1PASS_KEY.docx
windows10-2004-x64
1PASS_KEY.docx
windows11-ltsc_2024-x64
1πποΏ½...οΏ½οΏ½.zip
windows10-2004-x64
1πποΏ½...οΏ½οΏ½.zip
windows11-ltsc_2024-x64
1SETUP.zip
windows10-2004-x64
1SETUP.zip
windows11-ltsc_2024-x64
1Setup.exe
windows10-2004-x64
6Setup.exe
windows11-ltsc_2024-x64
10Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AVAlLABLE_SETUP_(KEY.2123).zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
AVAlLABLE_SETUP_(KEY.2123).zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
PASS_KEY.docx
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
PASS_KEY.docx
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
πππππ_π‘ππππΌππππ.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
πππππ_π‘ππππΌππππ.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
SETUP.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
SETUP.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Setup.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
14 signatures
150 seconds
Behavioral task
behavioral10
Sample
Setup.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
23 signatures
150 seconds
General
- Target AVAlLABLE_SETUP_(KEY.2123).zip
- Size 590KB
- Sample261102-dd3msass4p
- SHA256 c841080dcf8a3d1ce7d3f4777863d9d693871d68540ab3c207a36e0200714660
- MD5 37efdb5aaabdae090d429e69e49548c9
- SHA1 26dbb1a0eb14c8e7d915d28e479ee86700b1e602
- SHA512 7c8ca053254aa26ab7f52914daab145628a8fc5b0ef4f49614d9aceee8249a0dbd7afeb583e558f6ef9b5b667d7346a6316ca21602d4f1b14760df7fa12cee7f
- SSDEEP 12288:7czlsjw+k84hU/gxNJA4hoMaHV5DN8OTEHpttCtsvldUn6Y9X:762BOLVhcpl0BKsddd4X
- TLSH T1F7D42301219DF035C0A6523A34C1ECC788D96BAB71BF73F18E56399D48F72487A66772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/Setup.exe
File Explorer
-
AVAlLABLE_SETUP_(KEY.2123).zip.zip 590KB
-
PASS_KEY.docx.docx 22KB
-
πππππ_π‘ππππΌππππ.zip.zip 570KB
-
SETUP.zip.zip 571KB
-
Setup.exe.exe 1.1MB
PASS_KEY.docx
- SHA256 76422a64196dc6bab36f04679c7119b88c743058f8439b1ac715e2e2c13a98e7
- MD5 4187f92d726157f3774db438c4784f0c
- SHA1 e6ebcb1e3a97a3836ee65e27b2f4124ba5f42cb2
- SHA512 a02690f85c77b5ddd66a3e5643795d458faa39e0eac99b50604cb2871e05bc335d9f62b82aec6a333f4c4c55e97a56afea9aa9b46e25cba35c90218e37185b62
- SSDEEP 384:Smp/eNUnEpmkZ3w1HdJ7iFOmg8cte2N0KfWmCqaylhoB/Cofx4e:xek2329JGFqzenKfWhqmB/vl
- TLSH T1CCA2C0A48515B819D6A3407D903102FDF6C61042A612B5EFF421DAE9F38A577073EBB8
- MD5 SHA1 SHA512 SSDEEP TLSH
πππππ_π‘ππππΌππππ.zip
- SHA256 287ad79d556225fa27a7a140751cf5ae57963c541525c7873e6c30c0478538a8
- MD5 615058571a5d1cd7530ccafb34a879a7
- SHA1 2d9fed560cce7366338761fba1d1072f7338dbaa
- SHA512 1fa900c53163dcb70def10ae6aed0fc65b00ded926510bee58ffdd14c07c5963edcb6cfe27a296dd2eae4ee60855255938c7472112c328ba2c5c8f9a110e1818
- SSDEEP 12288:ezlsjw+k84hU/gxNJA4hoMaHV5DN8OTEHpttCtsvldUn6Y9L:o2BOLVhcpl0BKsddd4L
- TLSH T1EBC42302118DF03680D5523A34C2ECC788E96BEB71BF77B1CF56299E08B7149BA66771
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2123
SETUP.zip
- SHA256 781d89902db737e9c278b798c400fc23f987dbd5eb3c27034b4d457c2061bce6
- MD5 987240abab2ef2a6cff2a3bd71e5a720
- SHA1 0df5d84fe82c54c3a5e26ba96874a08e9926627c
- SHA512 650fccd968f65f6eab75c97dd5936d8e0120d0378bca3f49353cb57c2c9bb44138c23f107ccc49465a0ed77a598b3c33e50a16930da59658bbacb7ac34e495b3
- SSDEEP 12288:0JCSDQZCeadnh3LhxBnTWst3rrX5ZcLkWqu4f0TyMxBR5D7wY9AM2i3cGcfP:0JIZK5h3/BnTWst3r1ZctTc0LxBR5DE7
- TLSH T15BC4234BBBF4984716B77FB6EC2BB520EA16C8FD544154B29ADF54A61CC2122ED00CEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2123
Setup.exe
- IMPHASH db1b6a16a2efbaefc6d65903c1b206b3
- SHA256 f768ff1b70aad0810715bec8935082f8845988722be2ffa991d94a5f880bb20f
- MD5 2fff0b546d537287fe9abb0074a9222c
- SHA1 3a857b783a04ce483675da0613a28950d573a676
- SHA512 02116ac2ff137acfe3c1e1752426dad2f12fa99e43946a5342b8c3e56eeeab895e92c2779c735a23c1d9fcc621641f9852303d8d0922fa2989cd8fdba486fa08
- SSDEEP 12288:jhnvypF6zKGKEsPWdal/WooWFhHraUsARHfDxGTkjaZpk+IBkhhMhSWaZeF+GkY:wpFY4Wdl0Jeq5fQK+Skh+hFF+GkY
- TLSH T1FD4547F0F3810DFDFD3886378657A928911239DE1ED13AAA475C134F0A26E91BAF560D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2123
Minor OS version
0
Major OS version
6
Entry point
84304
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
greagrefron.pdb
kernel32
CloseHandle
CompareStringW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentStringsW
GetFileAttributesW
GetFileType
GetFullPathNameW
GetLastError
GetLogicalDriveStringsW
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetPriorityClass
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetSystemTimes
GetThreadId
GetThreadTimes
GetTickCount64
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetFileInformationByHandle
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
combase
CoTaskMemFree
user32
GetClientRect
GetDesktopWindow
GetDpiForWindow
GetMonitorInfoW
GetWindowRect
MonitorFromWindow
advapi32
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
shell32
SHGetKnownFolderPath
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
ntdll
NtWriteFile
Name
.text
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
405KB
Virtual Size
404KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
349KB
Virtual Size
351KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
201B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
274KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ