Overview

overview

8

Static

static

MAGIX Vega...up.exe

windows10-1703-x64

8

MAGIX Vega....2.dll

windows10-1703-x64

3

MAGIX Vega...00.exe

windows10-1703-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MAGIX Vegas Pro 20 build 214 [vacban.wtf].zip

  • Size

    592.8MB

  • Sample

    221129-xnrstaag8w

  • MD5

    5d694028e9723f96c2dd331e32788e9e

  • SHA1

    1a04a74b26dfb6cc4468ea0aa7303b44a6aa6db5

  • SHA256

    681211e613c848329d94b041c1f189a5106ce5a06438597417c65ecd76f49c7d

  • SHA512

    53e7faf2e493aa333f25eea9520fff213acf7c393911ea28396b7f508ef05f32a46c3d8f50c0bde8be63f4d3f6edd5b3e8fefb560257bbc17e6a03cc58c4da83

  • SSDEEP

    12582912:IYx7WXP+gJVjpUbk6yzo8xXO0+31zUdSjt447h1bo6EVDGoZz8GuRp:9x7YP+gJZuk/zo8xXIzzt44t1b3EVDGJ

Score
8/10
persistence

Malware Config

Targets

    • Target

      MAGIX Vegas Pro 20 build 214 [vacban.wtf]/Setup.exe

    • Size

      574.9MB

    • MD5

      059274e07bbf83ec5b5d4f1d957681eb

    • SHA1

      b0dd598c4dd719ccfc80d769becf5d0589a74eaa

    • SHA256

      e3e504169f03591d5ac617e027c124549f9073a2c357c64cac92cb2b83639145

    • SHA512

      3e6b5305eca533809dac53be730c8f525bf28c54aa4e17d151272f05efa4da03172a700f932a2510ea0c349b822136ae8ad76ed47c621e4b0f34e4394616da43

    • SSDEEP

      12582912:jDMbxgS/TLHSky47LmxRPF/ELbsnW4sxs2K53K2Cm/Fi2DPScaXm:jDyxgS/HXyGLmxRh4s+xs2w3KTm/Fi2T

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

    • Target

      MAGIX Vegas Pro 20 build 214 [vacban.wtf]/mvp.crack/protein/Protein_x64.4.2.dll

    • Size

      60KB

    • MD5

      9c4d4aeed720e4981dd263d570da7e8e

    • SHA1

      287151e3018ea44cf1712422c8e3be2b352632f2

    • SHA256

      80243fe0f5ebe22e8fb7770c0cda6e48b9cd7978adf9140bd6bc7f3f9091760c

    • SHA512

      dad1ca7f2740904ffc9fdb582dbcdfcdc18f23eb4f045e99875fb32bc6d4e02fc67da5562b3ee2bd0361820bd2de020b039877bc521a42d42b3091e19ba71202

    • SSDEEP

      1536:qU68qk9n9cFcVVcfokr59HldDCAfEhAxjj:qJfkwFcbMDzxX

    Score
    3/10
    behavioral2

    • Target

      MAGIX Vegas Pro 20 build 214 [vacban.wtf]/mvp.crack/vegas200.exe

    • Size

      40.8MB

    • MD5

      324117511d1b0d43d69f19aefe189738

    • SHA1

      7c384ba66e62aca9fb06456edaf95fba0afe4125

    • SHA256

      ea76a1b033c84fdaf98e960278b983f724784b5503d92ce469928e17350559a1

    • SHA512

      2bc5fc568fe8643114d3adef50640ebc832ecd4d5fe43e5d3afd897f6650c5b676926b04beac0a553da750ab4fe13b8cf5314bbdf5ca0a531c1ff86a8ae0683a

    • SSDEEP

      393216:+a3zdUWV6kL6mrCEzyFdwL4kFLKGQc54yBVcGyYE60tyMpGexiTUMwoF7F3SpPlf:bP638fF7qX5w970YBOWqF3

    Score
    1/10
    behavioral3

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

Peripheral Device Discovery

2
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks