General
- Target adobe_after_effects_2026_v26.2.1_(x64)_pre-cracked.7z
- Size 14.4MB
- Sample260528-yexhdact2x
- SHA256 c6bbe20fa6210b957ab378f31e21c85e1046ab70d44ed6265adb901480b6dc06
- MD5 2ca2fbc44d98004bc75d8458acb284a8
- SHA1 4acab31ae3ebceb6bbbea4dffed2db8b522ab9a5
- SHA512 5c16937f66f5b0c4fd208d924ad634a9fb2a5914e9d06defa77a0e5c3ac08f2d236a1708f493246cda5aa84b654e4a1d0b41fd492c39c204cda4b2ac4fc3028c
- SSDEEP 393216:7BeX46H8ZbsH0A/S7DAn6TsMwVcYtUC38W4SgOF1aEWL:t045tsUAxnmdYtUgNgOF01L
- TLSH T130E633D37460E9DAD00F03A435C94A7F0599F9EAB95C8C7A066A5B5032F7FD6DB4028C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
adobe_after_effects_2026_v26.2.1_(x64)_pre-cracked.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target adobe_after_effects_2026_v26.2.1_(x64)_pre-cracked.exe
- Size 809.5MB
- SHA256 b754b51c4c3d062dda74a55fa16809bef39b5b6d825948a3d3e1d585a60b08b5
- MD5 21c72ba4d2d8a1744fd218201bb25adb
- SHA1 de51b3dcca3a2802cfd8e549761f481896e396e9
- SHA512 1348db1886aa3d57f177a41ad31917923c180fb872a34338eceb19700a0a91c8464dd67ec9d1930375b3d2028cb999147eff8bda2bba7e09983fab793a673e5e
- SSDEEP 393216:V9q00Qo4BD7yc6u+mFqKk5PG+9xyWkMF2/fRuF+60OXy9rbSctypXnmGGBlqswd1:nn0Qoe6HTPn9qfZr6UFTGIqNd1
- TLSH T18099BE12B7D88075D0BB9234897B5756E675BC210B3097CF2254BA6E2F33BD05E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3