53f9a6f3dc654d00900f27311bb2408aa32db1c85d8e57e09800ca8e9bbf0a22

Analysis

max time kernel
120s
max time network
136s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09-10-2024 12:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Topaz Video AI v5.2.1 (x64)/topaz.video.ai.5.2.1-patch.exe
Size

68KB
MD5

2e98087ad07036d77aaac3044efc8b41
SHA1

df71051607a3a28d655a56faa8e6e5d6460c5c78
SHA256

df27f726e2a41f830b326dc19ca8f072d9e029e94085b959200ba15f144687a1
SHA512

7680b4fc63d58d2c48c33862b21306c63f91985ddc76267d91f6e66c583cb22f465bff708c2b38dac1cf6885e86304e7316672dfcb3e46969c209e638a1f82b0
SSDEEP

1536:tG+ETr6FqfyOg0jlESlNKGJuLEWfF9/58afPZ9CPkVsUFTFDiC/VbK:t+T1f7MpG8LZ7G29CPkVvxiC9b

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2360	topaz.video.ai.5.2.1-patch.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	topaz.video.ai.5.2.1-patch.exe

C:\Users\Admin\AppData\Local\Temp\Topaz Video AI v5.2.1 (x64)\topaz.video.ai.5.2.1-patch.exe
"C:\Users\Admin\AppData\Local\Temp\Topaz Video AI v5.2.1 (x64)\topaz.video.ai.5.2.1-patch.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2360

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\dup2patcher.dll

Filesize
62KB

MD5
17ef68ec72fb31022d7728b3c26bab38

SHA1
e1c3361a3ef2b3b4d45cbb3df4f3445b3936a4ba

SHA256
3eb42e20b270d90b760031f22906200752899b22df4d005923e0af9be4ee5b0c

SHA512
0f4845cdaeb26e96102d575b1b92bb9971c71a2fc4a27df779d59da6ccd816c7ba6a6ed357a9b04a31171c47bc79dcdb1250ad177b75dfefc48c09e55446cfb7

Download Submit
memory/2360-3-0x0000000075270000-0x0000000075298000-memory.dmp

Filesize
160KB

Download
memory/2360-4-0x0000000075270000-0x0000000075298000-memory.dmp

Filesize
160KB

Download