02112026_0910_27102026_COONECTION SPOTIFY FOR CARPLAY[.]exe[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
02112026_0910_27102026_COONECTION SPOTIFY FOR CARPLAY.exe.zip
Size 321KB
Sample261102-k48p2sssfs
SHA256 f8e89a88204c406d9b630562ff4bac7dc048d0676df3d811acd08d9c840e0988
MD5 b1c8b74f716b05965d71e255938f828d
SHA1 5a5df9590c151a5094d0698d7fe90adaed1d5f02
SHA512 accbbd66414cdd5b4eb9ed5598398fd492ce8d55059e0c9b6311ad0a3671acca97e01cec1597265b24bf230314b3dcaa83d9e2e3dc846725abfe99aa40297203
SSDEEP 6144:ocaH50nrKDIeu7lLu30GXMgLW3nW76ZAOxnlw5HV9TPkERS19oq:oFer8Ie2l63X5LgG63bwpV1PnUj
TLSH
T15B6422CBB03F9A0CE6E32EF35F623C805591774628FA9C8D67F2146E981D1B056E8D94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/COONECTION SPOTIFY FOR CARPLAY.exe

File Explorer

02112026_0910_27102026_COONECTION SPOTIFY FOR CARPLAY.exe.zip

.zip 321KB
COONECTION SPOTIFY FOR CARPLAY.exe

.exe 375KB

02112026_0910_27102026_COONECTION SPOTIFY FOR CARPLAY.exe.zip

SHA256 f8e89a88204c406d9b630562ff4bac7dc048d0676df3d811acd08d9c840e0988
MD5 b1c8b74f716b05965d71e255938f828d
SHA1 5a5df9590c151a5094d0698d7fe90adaed1d5f02
SHA512 accbbd66414cdd5b4eb9ed5598398fd492ce8d55059e0c9b6311ad0a3671acca97e01cec1597265b24bf230314b3dcaa83d9e2e3dc846725abfe99aa40297203
SSDEEP 6144:ocaH50nrKDIeu7lLu30GXMgLW3nW76ZAOxnlw5HV9TPkERS19oq:oFer8Ie2l63X5LgG63bwpV1PnUj
TLSH
T15B6422CBB03F9A0CE6E32EF35F623C805591774628FA9C8D67F2146E981D1B056E8D94
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

COONECTION SPOTIFY FOR CARPLAY.exe

IMPHASH 4cea7ae85c87ddc7295d39ff9cda31d1
SHA256 72629a54bb4aa6a122906a52021e3b18ff19325d9c74a01f8a2b979454d9c5cd
MD5 698b27bcb041af1a02773d30bbfcea3a
SHA1 c8145a8211676bdf10199641e23b389b4baab1d4
SHA512 b122f971316f24a9cd0cd747b0bf6a9caba03676b9da09a2873464ea6c69d58f835353f4fa18cf864b95826e9795ea996780b160c6c20e4e8f8b1d70dbb16954
SSDEEP 6144:aahOvp0yN90QERD0W3nWH6ZAOznlw5HV1TlkERm19kN:aiHy90H0gk635wpVtln8EN
TLSH
T18B84F14A72E920A5E4F757B549F302834E327CA05B7886EF22D4957E4E33AC0A931F17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

33280

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wextract.pdb

advapi32

GetTokenInformation RegDeleteValueA RegOpenKeyExA RegQueryInfoKeyA FreeSid OpenProcessToken RegSetValueExA RegCreateKeyExA LookupPrivilegeValueA AllocateAndInitializeSid RegQueryValueExA EqualSid RegCloseKey AdjustTokenPrivileges

kernel32

_lopen _llseek CompareStringA GetLastError GetFileAttributesA GetSystemDirectoryA LoadLibraryA DeleteFileA GlobalAlloc GlobalFree CloseHandle WritePrivateProfileStringA IsDBCSLeadByte GetWindowsDirectoryA SetFileAttributesA GetProcAddress GlobalLock LocalFree RemoveDirectoryA FreeLibrary _lclose CreateDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA GlobalUnlock ReadFile SizeofResource WriteFile GetDriveTypeA LoadLibraryExA SetFileTime SetFilePointer FindResourceA CreateMutexA GetVolumeInformationA WaitForSingleObject GetCurrentDirectoryA FreeResource GetVersion SetCurrentDirectoryA GetTempPathA LocalFileTimeToFileTime CreateFileA SetEvent TerminateThread GetVersionExA LockResource GetSystemInfo CreateThread ResetEvent LoadResource ExitProcess GetModuleHandleW CreateProcessA FormatMessageA GetTempFileNameA DosDateTimeToFileTime CreateEventA GetExitCodeProcess ExpandEnvironmentStringsA LocalAlloc lstrcmpA FindNextFileA GetCurrentProcess FindFirstFileA GetModuleFileNameA GetShortPathNameA Sleep GetStartupInfoW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount EnumResourceLanguagesA GetDiskFreeSpaceA MulDiv FindClose

gdi32

GetDeviceCaps

user32

ShowWindow MsgWaitForMultipleObjects SetWindowPos GetDC GetWindowRect DispatchMessageA GetSystemMetrics CallWindowProcA SetWindowTextA MessageBoxA SendDlgItemMessageA SendMessageA GetDlgItem DialogBoxIndirectParamA GetWindowLongPtrA SetWindowLongPtrA SetForegroundWindow ReleaseDC EnableWindow CharNextA LoadStringA CharPrevA EndDialog MessageBeep ExitWindowsEx SetDlgItemTextA CharUpperA GetDesktopWindow PeekMessageA GetDlgItemTextA

msvcrt

?terminate@@YAXXZ _commode _fmode _acmdln __C_specific_handler memset __setusermatherr _ismbblead _cexit _exit exit __set_app_type __getmainargs _amsg_exit _XcptFilter memcpy_s _vsnprintf _initterm memcpy

comctl32

ord17

cabinet

ord20 ord21 ord23 ord22

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA