https_liudownload[.]com_download_LiuPortable[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
https_liudownload.com_download_LiuPortable.exe
Size 242KB
Sample261102-kw2a1assbz
SHA256 6dba22ec6c4157fc8ad77954274d6f28cd5e9816532bda536c8a61046751f09f
MD5 48db58c83fa6fb8b57587f6735fb5b4a
SHA1 3e32de0072da7e4a4e031dfbbb53848071001081
SHA512 dad33335bcf37181873eb9b3743c772c9ac6a36068bad46c48a3ccb7cf997303b0ec8681af59211938f9ae2891b3e59d458d83ef6936ea19eaa357458d7b6f3f
SSDEEP 6144:yR2xBLv8hFIeVDlT12qfKXmhb+dGO4V/+EzeNEZC:xxBzCxV8qflid6VW
TLSH
T125342261CA5E4132D6BD9133E8939C33ACA2ED8133519B0F629D356C6F5A32176CF82D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

https_liudownload.com_download_LiuPortable.exe

.exe 242KB

https_liudownload.com_download_LiuPortable.exe

SHA256 6dba22ec6c4157fc8ad77954274d6f28cd5e9816532bda536c8a61046751f09f
MD5 48db58c83fa6fb8b57587f6735fb5b4a
SHA1 3e32de0072da7e4a4e031dfbbb53848071001081
SHA512 dad33335bcf37181873eb9b3743c772c9ac6a36068bad46c48a3ccb7cf997303b0ec8681af59211938f9ae2891b3e59d458d83ef6936ea19eaa357458d7b6f3f
SSDEEP 6144:yR2xBLv8hFIeVDlT12qfKXmhb+dGO4V/+EzeNEZC:xxBzCxV8qflid6VW
TLSH
T125342261CA5E4132D6BD9133E8939C33ACA2ED8133519B0F629D356C6F5A32176CF82D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Digest

13:19:d2:27:08:a2:38:0e:c8:c9:6b:b5:b1:0c:2b:ab:cb:42:8a:26:c8:85:d5:45:5d:92:1f:0d:6b:37:5f:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Boshiamy C&C Co.\, Ltd.,O=Boshiamy C&C Co.\, Ltd.,L=Taipei,ST=Taipei,C=TW

Chains

Oct 25, 2026

CN=Boshiamy C&C Co.\, Ltd.,O=Boshiamy C&C Co.\, Ltd.,L=Taipei,ST=Taipei,C=TW

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=Boshiamy C&C Co.\, Ltd.,O=Boshiamy C&C Co.\, Ltd.,L=Taipei,ST=Taipei,C=TW

Serial Number

12:6d:b3:5a:1f:9e:6d:25:be:9c:d4:ae

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 30, 2026 - Jul 31, 2027

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

436608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

https_liudownload.com_download_LiuPortable.exe

generic