65bfb194c199f63fe0c7c3e0409325af67c3685cc4ec6b4557a99a4c52375eb6

General

Target
CLO3D2025.2.330安装激活教程.zip
Size 80.9MB
Sample260418-q2grfabs4k
SHA256 65bfb194c199f63fe0c7c3e0409325af67c3685cc4ec6b4557a99a4c52375eb6
MD5 f55da7df131e0e52d64fc17318ca036c
SHA1 f4927772462cfb68749217d6a7f1fa84faa2af70
SHA512 627648d090561a070c12f83e44d14677c4902db44ebc81994b4b704196bfb20707b56dd6d7921ca6c157a5c49fa105d6ac76f58c79fdfaecff73e349096075d7
SSDEEP 1572864:ANN/HtjyRauHrlmmTIeOabEK0VlePckS3CT1xUWT72vo+kzMpSVbS:UNjyRxlmOokP6CTrUeqv7kz+MbS
TLSH
T16718339BC6A08DF7BEF103503921737C7470D131E6EF2A0395D9A0FBA29D085ABE1995
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  CLO3D2025激活工具.exe
- Size 81.3MB
- SHA256 444ae9371bc3b7dbaffc2c01371449b30ac3f2ccf35651658469d9b215d98043
- MD5 9c1e02a5637a729df21ab054ff9a4a92
- SHA1 22c841057f935438e389d6d86d43b8a60aa7f2db
- SHA512 98ec8328ddd2f4e5c124d73ea74af1c48693e4f5b5f18c1fae4f46e36ec7a450c760af84e8b01e54317d4342c7f558c24ab3ca132a1722248a4d78eb0ffc0298
- SSDEEP 1572864:0EHvTBTGJSeBFGOwz71Mr+C0J30Dsc53SPTNI2PEi9kGyp1r2BX:PNTGJDGOIXkDdSPBIg19pypV0X
- TLSH
  T1361822AF9A5B4AA9DDFF123D348058287273FB2C4574D7C980CAE15CC76488BDAE1C64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

bootkit defense_evasion persistence trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks whether UAC is enabled
  defense_evasion trojan
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  安装教程【必看】.docx
- Size 517KB
- SHA256 af4f6736e5071ced4e3ebaf67e2579696a7af0b8098bfc3a0e5c0e9535afc2e7
- MD5 cf4819292a943de85cde4f0c1c66e14b
- SHA1 882d6d83f60a216026fccda2e3c7f12ee0b7f4eb
- SHA512 70b4362f97dd7e172958a30e5afd10172f3caa8b258e15c28808f3b5b05719c2af48daa0f1b768f20a5f6a36f6b62420b7e230bd80e8d6234683acb2376da8f5
- SSDEEP 12288:XuzBjL7dTQJcwEdJjL/iEEWOuEMZrMdeU1KPv917zQM:gjlTQ4JjLKGXEMBMmbQM
- TLSH
  T18DB42304CF8C62E3D0AD13F865695328EE753665CF27FB26BF2212D8884B4191BB6F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4