e4c3c965ed05492f73fa261d2e2560ed9f0506474956eefab176c44ee709a1ab

General

Target

HandBrake-1.8.2-x86_64-Win_GUI.exe
Size

22.7MB
Sample

241004-kbhyxsxhmg
MD5

2c7968a6e1d5425e0c2c5b2a688ee9b1
SHA1

ca6a865ce5dce0f8571536d0aa774c775e8ce2b5
SHA256

e4c3c965ed05492f73fa261d2e2560ed9f0506474956eefab176c44ee709a1ab
SHA512

ddb92d9aed2aa8bbd6bbcfcbf95dcfe7e3ae25c9699fe85e00a74db58884661e9cbbb435b07cf54c3d31f8630aa74fadab074fce6fe450dab4dcae84915ed90a
SSDEEP

393216:HxvBKL2n0yyPxwn1aYFptjxLBrZHyRiZtHzHGkX1tzgJWWql3JMQtXCdyIU6Gitd:HtULwt1ao9LbHDtHqqBOIC0IU6GiFfJ

Score

7^/10

Malware Config

Targets

- Target
  
  HandBrake-1.8.2-x86_64-Win_GUI.exe
- Size
  
  22.7MB
- MD5
  
  2c7968a6e1d5425e0c2c5b2a688ee9b1
- SHA1
  
  ca6a865ce5dce0f8571536d0aa774c775e8ce2b5
- SHA256
  
  e4c3c965ed05492f73fa261d2e2560ed9f0506474956eefab176c44ee709a1ab
- SHA512
  
  ddb92d9aed2aa8bbd6bbcfcbf95dcfe7e3ae25c9699fe85e00a74db58884661e9cbbb435b07cf54c3d31f8630aa74fadab074fce6fe450dab4dcae84915ed90a
- SSDEEP
  
  393216:HxvBKL2n0yyPxwn1aYFptjxLBrZHyRiZtHzHGkX1tzgJWWql3JMQtXCdyIU6Gitd:HtULwt1ao9LbHDtHqqBOIC0IU6GiFfJ
Score

7^/10

discovery persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  15KB
- MD5
  
  d095b082b7c5ba4665d40d9c5042af6d
- SHA1
  
  2220277304af105ca6c56219f56f04e894b28d27
- SHA256
  
  b2091205e225fc07daf1101218c64ce62a4690cacac9c3d0644d12e93e4c213c
- SHA512
  
  61fb5cf84028437d8a63d0fda53d9fe0f521d8fe04e96853a5b7a22050c4c4fb5528ff0cdbb3ae6bc74a5033563fc417fc7537e4778227c9fd6633ae844c47d9
- SSDEEP
  
  192:EyGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoTr11929WtshLAzgSrX8:EyNt+4t7uJalUnGesY7Lt8nCr/Yosa
Score

3^/10

discovery
behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  4add245d4ba34b04f213409bfe504c07
- SHA1
  
  ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA256
  
  9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- SHA512
  
  1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP
  
  192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
Score

3^/10

discovery
behavioral3
- Target
  
  HandBrake.Worker.exe
- Size
  
  709KB
- MD5
  
  27a6673bf9b4db8a9b42a9d37a56833a
- SHA1
  
  3b800ba03a7cbf1300361e9acdb91d23be720289
- SHA256
  
  1399efe1e676275748e742aee7c852a04986dcfa420ac0a6dc27f5ef2967dd99
- SHA512
  
  b10cce311294c3b2ea25dc279f1f48143fb6ff72039483d67fc3a6e68c4a5f2682b4a0b86e8f82033a590c902332b00c394607c0f1fd5b3f1c7997617c6df5a6
- SSDEEP
  
  12288:f4RlGI78IVLY5MkvpEyVZzBamtmGs6zl3zEW4TyvL3fKwXRVTiIH60TQMY5Mkvps:wRl5iyyVHa3KzPfm0TJiyy3e
Score

1^/10
behavioral4
- Target
  
  HandBrake.exe
- Size
  
  34.8MB
- MD5
  
  f3e1f308a1ce0c271b6b48e43cf395ad
- SHA1
  
  471dd45bb737355cd022bef0c850336541260428
- SHA256
  
  15bc21d9aa2d18d0e393b8205a190175ec0388a4fc1a9ccfee79b0e21d439a86
- SHA512
  
  e04f039b52a71ea2da236d035d8bb2426cf7b1ad6ffd6aa2470f643b64a46acfd47a62073724512af77a5a959cce9a36d01127cf04b63bd3cf58caf1f8cccd20
- SSDEEP
  
  196608:HC3v8sdauO4miemcjYXCe5njhhg4DFgi2Sw6e:Hi9bLnJX/9jhh5ei2Swf
Score

1^/10
behavioral5
- Target
  
  hb.dll
- Size
  
  64.0MB
- MD5
  
  7fc9f976475c93a652e72ffa635eef8a
- SHA1
  
  8b3d70586994e1581cca8cda67dd655866aacd81
- SHA256
  
  3da63ca4bfa97f77b5365c07975ac8870038619b0b1fc651f0472523b54ccf27
- SHA512
  
  fb26c8d8bb4bb806010d5527690e60ffc13d61e0c1e96a1f943b61f0fac5fb9a54a56411522ae7c286c305a1d6cc3ad681f70c71da5e373b1a8c0722dcffc65e
- SSDEEP
  
  393216:0rRpRt+MQOuYJXYzJsvvdSDcp65yyyUBv+U5+ZT5MARXvOn86Cl2JcadT/idH4+X:0r1t+MQON5fvdHyuT5bXvD1Xad2Hd
Score

1^/10
behavioral6