Static task
static1
Behavioral task
behavioral1
Sample
4K Video Downloader 4.20.3.4840 Win64/4kvideodownloader_4.20.3_x64.msi
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4K Video Downloader 4.20.3.4840 Win64/4kvideodownloader_4.20.3_x64.msi
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
(32-Bit) Patch.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
(32-Bit) Patch.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
(64-Bit) Patch.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
(64-Bit) Patch.exe
Resource
win10v2004-20220812-en
General
-
Target
4K Video Downloader 4.20.3.4840 Win64.rar
-
Size
89.9MB
-
MD5
f90447da085ec3f322994d005f2588bd
-
SHA1
673dc907c134fa78eefb606c72c0d7dd17308118
-
SHA256
4f5e1353a0d07a649682d0dbe6575cad0cb51c34817567273e9da6b518d5b3c2
-
SHA512
9ac2f0639f34de02fc15258b74a506ce9e6e0812f2d908dbe6deee9fecfc204b80bd98151c1038669a9590b82075a02ad42319ce39201c53cff76dd6bcfde140
-
SSDEEP
1572864:MVcpHObe/WhK3KL2k0LLEvjhONS8UMhKtp/+HUowJqIQ1ds/GL1Wf85:MVcsBLJ1vjcNx94GHUowJXaP195
Malware Config
Signatures
Files
-
4K Video Downloader 4.20.3.4840 Win64.rar.rar
Password: www.4download.net
-
4K Video Downloader 4.20.3.4840 Win64/4kvideodownloader_4.20.3_x64.msi.msi
-
4K Video Downloader 4.20.3.4840 Win64/MORE DOWNLOAD.url.url
-
4K Video Downloader 4.20.3.4840 Win64/Patch.zip.zip
Password: www.4download.net
-
(32-Bit) Patch.exe.exe windows x86
Password: www.4download.net
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
(64-Bit) Patch.exe.exe windows x86
Password: www.4download.net
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ