General
-
Target
50dda77cc11f7acf2a54530483fed313
-
Size
19.2MB
-
Sample
240110-sbh8pahedp
-
MD5
50dda77cc11f7acf2a54530483fed313
-
SHA1
fd7a1c44af963ba7c79cb1464e05efaad7bb62b1
-
SHA256
da8dd46620e9f222d2375bbb7044d854c049c52212f4f280f3e50576a5abf56f
-
SHA512
47ceb3d7340f3075c2153d4d54fcf18a6e48d233b1f24697ee621a83d60e58633b27c12a2565fc6a7585362ff3ced7f0afc6d4b54c3e066090760b1c90148c54
-
SSDEEP
393216:9tPIeNPlrMvT30tgicp71+21v+YQucxrMk/60o/3dMPrPaSJRgd:DQedlr0301cx1+213IIZ0ZrPXJC
Behavioral task
behavioral1
Sample
Crack/MyTheatre.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Crack/MyTheatre.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
MyTheatre.v3.38.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
MyTheatre.v3.38.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
安装说明.url
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
Crack/MyTheatre.exe
-
Size
3.4MB
-
MD5
e7eb69b747f835c6b1ce06af9b8e81a0
-
SHA1
c1193076c8cd29923c76ea274dbf618f51e780b1
-
SHA256
f8b2b8b5022feacdc01478273052224f2382aff07f63be17be28b527bde07c63
-
SHA512
518a3c90e5d1872f0596c99e445db12ba19e80f59851f83f28c5ab069269c688bd94869b15ae95df7ff40c4e154e0532c6b97cb2efcdc219463500f178947ea6
-
SSDEEP
98304:SDWSB6Fk2Ww/5nZM99/Q22I4omLRXlw1zRUVqeepzsm1d5PMXBFechyfx:jXdxJazb4VRK1rljh0FmJ
Score7/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
-
-
Target
MyTheatre.v3.38.exe
-
Size
15.9MB
-
MD5
73af3b631fa24cc2d5f5129f2904c4a7
-
SHA1
818349edaaaea53c9c3374f67ed955de7e5da117
-
SHA256
81b0b2000c53876e605df451baa072f002c118aa6ab08b2a3ed742f9624e953f
-
SHA512
683696e5e904917e37aa6ed0243f34318d0d1c040c7810b24ee16783ed6fd0ee70334a2cb3c2498e42ddd8775f8cf10da4667d8cfd5ef9c9224e6c0f5591e11e
-
SSDEEP
393216:PMvT30tgicp71+21v+YQucxrMk/60o/3dMPrPaSJRgx:P0301cx1+213IIZ0ZrPXJe
Score7/10-
Loads dropped DLL
-
-
-
Target
安装说明.url
-
Size
260B
-
MD5
ed83e978f409fcebba2825b084f2c140
-
SHA1
4548b5565354024dff5f387fa825fce7d11e67fe
-
SHA256
ac996e7c6b803289cbb4eb6cd62cc7e63dcd456aa18dd7fa88aed066b06218ac
-
SHA512
2257a6118aac1a6368749357433e037798d1765dee71addb73fa3e98b27335bf7000786a0814d6a5b3a5f63eb25f13e49559da8e192f48dd230d1c344763a377
Score1/10 -