fd458a3b3bd8eb56e2af627e877e11b8fb9d0d4a731e262ea0ce44f0b9586de6

Sharing

Copy URL Twitter E-mail

General

Target
hd-video-converter-pro.exe
Size 131.6MB
Sample240605-eql18sdg3z
SHA256 fd458a3b3bd8eb56e2af627e877e11b8fb9d0d4a731e262ea0ce44f0b9586de6
MD5 2c351290d9a88fd3b74046fd53e65593
SHA1 4f767c42dbcc28462ef913c5194dea497f3c52f8
SHA512 fb6524d1971d4afd19d2b9f26e55f5a217f5fe0f1aab012d326c8bd84974a10726b0721d24aed3efbe7d18b5f41997aa42edd6e8ce022b9103e9fa5c5c50a8a6
SSDEEP 3145728:OgfF7/fgNPHHOC14VDBcXZY9VtF9LFMSHIWpAYIFk:Vf9IPHL1mDHVDHMDWtZ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  hd-video-converter-pro.exe
- Size 131.6MB
- SHA256 fd458a3b3bd8eb56e2af627e877e11b8fb9d0d4a731e262ea0ce44f0b9586de6
- MD5 2c351290d9a88fd3b74046fd53e65593
- SHA1 4f767c42dbcc28462ef913c5194dea497f3c52f8
- SHA512 fb6524d1971d4afd19d2b9f26e55f5a217f5fe0f1aab012d326c8bd84974a10726b0721d24aed3efbe7d18b5f41997aa42edd6e8ce022b9103e9fa5c5c50a8a6
- SSDEEP 3145728:OgfF7/fgNPHHOC14VDBcXZY9VtF9LFMSHIWpAYIFk:Vf9IPHL1mDHVDHMDWtZ
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  $APPDATA/WonderFox Soft/HD Video Converter Factory Pro/Bin/dl.exe
- Size 18.1MB
- SHA256 62f16ad6192574708ddd4d5aece8606c703c6deb7024d8b0ef6e6f86ed8d2ff6
- MD5 a09530169d743d624edea58206cb86d1
- SHA1 f0b54dcdf2d8c39978fcc44a88ae005de9b36f9c
- SHA512 89ea64556f5c8a07fb5545328d31f5112062e811a51aa362b8c133b69d5ed6b31b7d5f13c7595e97c40c3c4d10ef5a1b6bb5a3ece9a1bc9da4c69224743f7089
- SSDEEP 393216:gCtwRI1UyKOwCteW6EWxL8kJQlpfjRNTQpLMA5WnJ:gi0IKyKktexL8U0pfPs5U
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral3 behavioral4
- Target
  $PLUGINSDIR/FindProcDLL.dll
- Size 27KB
- SHA256 6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
- MD5 6f73b00aef6c49eac62128ef3eca677e
- SHA1 1b6aff67d570e5ee61af2376247590eb49b728a1
- SHA512 678fc4bf7d345eeb99a3420ec7d0071eaba302845e93b48527d9a2a9c406709cc44ec74d6a889e25a8351a463803f8713a833df3a1707a5ad50db05240a32938
- SSDEEP 384:DZoRF0XXUuJReQg0Tw67ADWBTgmldIogUD3GLgFmyaX/fVYcWJQCDmrinogRdBl:DZaF0HtTwuz9yu3KgwRX1nWJ1q+noI
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 efb07b38b205f4dcde166887df43c089cfecff627099922cc0c88fce27075063
- MD5 6982595ed8bad3e983d6200201b9a1ab
- SHA1 ddf3790820f6800e975e2293d46c95e1429b1d3d
- SHA512 3bf611bf9792b275632dc6980bb8f8ff522109db7365c936b2a340d2997ace6658af6dce3c8082de4e3a5b64cd2324ac21f67de061908933666fb1aa529a6eed
- SSDEEP 384:mLbZ+21yxu6kGxPcSkfWpATCzip8OvNV:Mbj1yomESkQNRi
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 4KB
- SHA256 e80cfa37169aecfee7d91508d1025706294d47b2950debf2c31e6ba52f3b8cf9
- MD5 6e8035da51e2512fb88440d8d94ac38a
- SHA1 c7e96e638450a40cb163b66ff60300e143940921
- SHA512 1b8c849676d64b7e380aa884f3688ed1e6544aa4cd54a998522195d877e7a4c3071ff4fcc1478cd3afd1f77e89bee12faefe85db056d496d42a047801d69bcfd
- SSDEEP 96:34Nr2mIDHfLfzMUyJ1Cb/zdYumvhTHVYE:I12mIHYUy4/RBiK
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 e09e0cea3d7624a438fe4e02df230e995dcddcd9909080d883b107a7137b471e
- MD5 a379ffb9785b333e5da4dee69dfd8f27
- SHA1 7f1eeda2db94481e134ac09f0f8c7531b84e9890
- SHA512 c868a9b6038bfdb40aff1c067fbfdddad58fdae798c282a0bfb59133329be1744544041a71dd1ae222ed5d6e4e4c1801a11e7caeef7a4dfda416520ef2b10f38
- MD5 SHA1 SHA512
Score

3^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 6d5654fcf23d3d717147d64941d61edcb8374202dfb63852cca629dca117f03e
- MD5 e0c13aa81e0d5a2df8ecc98c969a6958
- SHA1 c1a6b741d92d4f1b8a5dd45d0bbbe2699cdf3acc
- SHA512 fef32b3d5700b17d9cb41ca64b93ad896279e40ed5940656977c810b80360b1eee2d51730813bd2457e5c5663c4ceeea28f9866fbae9df0b894610c3a4f64e61
- SSDEEP 96:MDPIsc56awTpQLu8vdRzRo8EcBOnuRgOw6dWQSFtSiERYNIPNr7:MjIx6awFQbvdRzvEcEYfqE+NIPN
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  Data/DRead.dll
- Size 1.6MB
- SHA256 bca37f7b73fa66288d432ac459a19d7fbbf4704fcf58d9854293d23709492005
- MD5 b174b87339152f15e575cb23ddf2d566
- SHA1 347430efbd69cd88fa167fa1ea4fedf9dd74fd44
- SHA512 6eac144a505b4fb31ead01500f2d2f7e7e7a57e7821ede0b5c67ed97420138391484bb25ab5b5918db60d22c776a050dba02a1d5f8800dddaa8007c1b96f1b8b
- SSDEEP 24576:1YFgxWB2C2P6R0isbrE1XN/SiBXWMzb5O9rlpIiB2SnxSN2c7apT0767CFf10BRh:16eMv5xigSgN2c7apT0767CpCTt5
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  Data/SDL2.dll
- Size 1.2MB
- SHA256 f70051e79801f33793090ee0e99d8d57cb392121064dbe0a6b66b375e3f9b6ea
- MD5 3f25925f454362a61705694be43b62c9
- SHA1 5794b736c9342b9b4c2e91fd2fc580e87d168664
- SHA512 0e7bdb14078125146a00b487db2778ab30901ed121b9b7a9bce3f9e077acb9860c206be44c2319567eb04091744516e8d7b240c4d02f27da517e642c48ffabdb
- SSDEEP 24576:IYNlQTkQrDqBSzscm0fP12fOmkBBeb7LVNpWAJqiuv0h6Llefgwn0TSfMY3TCos7:z+WOsc7RsdE9RLa/r/fHc/d/xHq/z/Xs
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  Data/SoundTouch.dll
- Size 749KB
- SHA256 628cd66e83ce643ed7fc9ee6f54da30a9f95121e9fe93d17db3339627446fa46
- MD5 0c434c45b03d0dc7e64ab1e3fcf8c59c
- SHA1 0e13064565d04ca2e4e2c594c553e97021f6ffae
- SHA512 cf3cabbd5da1b9fef0d909cd09c7cc1c41b9433a7cc727401a7c1b1109b8abbce7c5fdae8423f3bbce4322ddff1facf049a1a6620c65f484eb1cbdc05c76cc61
- SSDEEP 12288:/da1ETMo4FN/HrF9FAwxK6joDmKh/avOPmy6uZasqFhQdBTu0tSED1L0CgJ4Acjb:U04/rF9FAwxK6cDmKVamPmdsqFhQdBTl
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral19 behavioral20
- Target
  Data/avcodec-58.dll
- Size 30.5MB
- SHA256 671b24f5d32e97246cbddd524b798efd81bd17e27922e83c13db974c976184e2
- MD5 f0d120534f50162bdee3750668b3dff8
- SHA1 0d659b00f82d64e00c414fa986c01c8e8440ff9b
- SHA512 f8e0133ffedb60cce8ab70c442052c17aff673dd664e986281adc9ef717b7214f9ef26c07bf4741bd759369cd9fc5481829a7e6a8d12d812eaf44064ae3a6373
- SSDEEP 393216:F8fhXn+ARJi94L39XnZTgY7RIx93w42M8S7iJx00p+oipfk0bodQF:w1JW4L39ZIx93w42Mp7i7Iud8
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  Data/avdevice-58.dll
- Size 1.2MB
- SHA256 8c7497c4670fad30b2ca4607d7168f47b1cbc8ba55a3de77051b1bc8e5680ffe
- MD5 2704ad8fe2e246655a0a46a72b2f00a7
- SHA1 19957b7bf5869ccf6a51f95403024603e145382c
- SHA512 c055f56dd046c1d50d8a2ac26814057fd244aed35224cd080a19fa3e929ab9ba52673695d9add93f3c64a8f029bf4a91b0d48caab7667db11a899e77928a799d
- SSDEEP 24576:cdtPIF1ty6NITrXvBAUZLYaslbbTCpGavkg3NyeuQ6l9fHOf0Xsz:NF1ty6NITTvBAUZLYasUpGaXBuQQ9uUU
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral23 behavioral24
- Target
  Data/avfilter-7.dll
- Size 9.0MB
- SHA256 1b0abbbb895fa1564fc09ce55ea1d5d9af784ddb131cc36e3bdba79ee13c7dbf
- MD5 2a2eece3adedce286afe80cf44bad28a
- SHA1 a82579e5a74d75970e49d5e978079da1a236ded6
- SHA512 f528461cc7319eab2f8d6b8e0e1529c08ded50f06c978301ef751f4848f4b0350b75dadb359ea36725e3b5ffbba68a6367aa8f4e9fc1e6724d33850b489d39c6
- SSDEEP 196608:PdzE9yvEkTOPvkos1Uc4jD3trgMBhukmFBYYGiFK7xPucQOTUfu8lmSqir54qu7h:PJ3s7xmcQOTUG8lme5y7hvuA6oO07rok
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  Data/avformat-58.dll
- Size 9.2MB
- SHA256 8dd4d545d5ca0d4922ae10d780d5debfd98c782d498273df30663a54bd570439
- MD5 4485b1ff36dde30df2003d18a4d58e72
- SHA1 1fd170e1fab71b648155dd842705a2c1bf786c0f
- SHA512 6cc3262faebcf8ceccd44220ceb2ae24eb3941d57ab0b1f24f03757a38d8713ab02db73298c9c17a480ff8a70317864a75ad0c4c21baeb18e4f1a849684e380e
- SSDEEP 196608:taTF/Tp8Axxb2K5HaYJye1HDwL1Z6NvW9pIMs0KRA8vTjVrxk:YzxFPN1HsL1Z6vca35
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral27 behavioral28
- Target
  Data/avutil-56.dll
- Size 1012KB
- SHA256 b5403471304237e2486a1d5934149ea493eac3859d9d423d5630226dfb10fb44
- MD5 6d4099c60bf587da444fb3c8d639c6a1
- SHA1 5522a4d16342ac33c30a8f3b753eb174cae30bfe
- SHA512 37122057cc98e55e88337b54735aa217361b12cefc899340a46626792403b34ab71af763e0d395c793e93f76479f7b1c36d6479a7579ab04c45ed98f50b65fbc
- SSDEEP 12288:hILFD9BRz6CxSLPSmi3D1qzq1x3pFEIXH6bCHHtMPv1kt96fGKBsRtXIix42N:SFTRDxSLPSmi60pFEIXN7tYfGXW
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30
- Target
  Data/dvddec.dll
- Size 256KB
- SHA256 1ddea057e6b8d6a9e5ec4383bf06f70e4c2f7512f9553572d9164381ed0f78a6
- MD5 8b1091b00113308e26ab891a8ca4a8db
- SHA1 75aba07cc0e1f63a6cbc196f749a3476f644a3c1
- SHA512 5919d8631f2d58b8107ba7a8f36e8efcf3dd296a9b86cdb99c589287661c15ab97e9a923f07bcd43cc18e75c5dc91082b25c90c19425829a506b156ce9eb375e
- SSDEEP 6144:fJOU9cWEDZ6W745g8oMVh7n/iDR3B+OgQrG+:5cWqyZVhiJ7gh+
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32