General
- Target clumsy_0.4_Private_tool_v2.zip
- Size 5.9MB
- Sample240614-svsapszfpp
- SHA256 1ae5b83a12452bdad743d9ac1915938f36c17db67f3a41183ff68f1598c40c04
- MD5 d7b75593874c05d781c8aae468461675
- SHA1 157f412850155ff7e1dadad3abd42d08c7ce3179
- SHA512 67dfd19394c076075e5916c9e86f830a50e04b77accd63262d03f1b4471daa2e74d098bce96086751ca2896728f430dd522a65bc749a327c393fdd8d2ed30000
- SSDEEP 98304:6k9a8B2FFLm2ZyDYLwDo6YtEfxm0CDFP/Ftz6kIvTSk7lzJTjWZBP/8dvJb:zfAFLm2ZywwDo/6Zm0u37G9ZjWZZ/oJb
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
clumsy 0.4 Private tool v2/0.4 Private tool v2 clumsy.exe
Resource
win10v2004-20240508-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
clumsy 0.4 Private tool v2/WinDivert.dll
Resource
win10v2004-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
clumsy 0.4 Private tool v2/WinDivert64.sys
Resource
win10v2004-20240508-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target clumsy 0.4 Private tool v2/0.4 Private tool v2 clumsy.exe
- Size 6.0MB
- SHA256 9d4bbfe5521c3a0a171e05ca3598bc2889e0c1e0da7914edcdc2dbe5a21b566d
- MD5 26f3bc26ba45792d5545959d9a858ed1
- SHA1 dd4dc39ad555ecc5547cad730d3926edc4b80602
- SHA512 7d55c642d9459c953dc08c570dd025081d4cc2ca9c21b744ae306c2b3c74eb9a67fec1cbd6e94545219d262d5b5adc961db736f48d354bff7c292e82ee8be207
- SSDEEP 98304:jgXdQGXqkqM9RL4afkhk9Y+YNwh1SMCJbzRnPJ8iE/56Y3ZDJ1n6hBnLnzTF:q5RL4ack9Y7m7SMYNPKBtn6hVvTF
- MD5 SHA1 SHA512 SSDEEP
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
- Target clumsy 0.4 Private tool v2/WinDivert.dll
- Size 15KB
- SHA256 9444a6e6b66f13f666f9c60d1935824f61c7256e35a8cf0440e29baa7fbe42c7
- MD5 1b1284100327d972e017f565dbecf80e
- SHA1 5b4f0c122a80478973eb6f9cb3bbcaf186295aea
- SHA512 4ccb9e233a3573f6eded0efa8fa54ed929818394cdf2153623d902c749d37751da6f489354aa50968e53d42d5ce339f6368dedb7858a4ff43a1927b4338954a4
- SSDEEP 384:EHGiP0PYf9pHuGvATXlQRNq/EbUKxcneWuDlE:E9MQf90GvQXlQvAEcehD
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target clumsy 0.4 Private tool v2/WinDivert64.sys
- Size 37KB
- SHA256 208c092fe77f161c5a313b916d73fa7f6d10dd289bab8bb5dfb3d59aacb27f25
- MD5 3bd5ac2e9d96e680f5dbdd183a58c47d
- SHA1 83b08cb5e61c7b37bd710ea01196a26fc8f38610
- SHA512 6cccd7971f423f72f5dbd01a83a2d27bb2bde63c4d1f5e127d77cfa0df85c289a2c3cd95c110ce38b58b9ea9a49aad18ae50f352ac6b21740d0294f771fbcb78
- SSDEEP 768:R5VorUqgJs3/KtdrbYiZdNSRUYjbMUYOUaCdHUZ9fdCrYc:vVorUn9cRUuILLd07fdCU
- MD5 SHA1 SHA512 SSDEEP
Score1/10