3ab2506a4f0601226e0be7354a93cd4ef5b559dc2a107a48ec6b522e69724e5d

Sharing

Copy URL Twitter E-mail

General

Target
Crack.zip
Size 6.7MB
Sample260620-ffed3sev2v
SHA256 3ab2506a4f0601226e0be7354a93cd4ef5b559dc2a107a48ec6b522e69724e5d
MD5 1169618c719feb55a77ab69a7568bcfb
SHA1 e07ea9739468f6ee17940e4a1ce80f904f9d27cf
SHA512 e9bbde3caebb2bd235486f0d63c77e016c027db5a5956db47ec7a1d4c683a545e16e3cc40975d50097f9b4fce2696712f771d28bc2ed3a944f54ba12328971ce
SSDEEP 196608:Mt+IpBFXx8iKVf48m1Q6RNtz7Xpl7ARhnEdbt7vtvbF:Mt+4eEtvbq2RZ
TLSH
T1076633662C0CE4C1BC7A5A34E0F83E8ECB7ADA87C9504426531E66DC85EAC11DE45FE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Crack.zip
- Size 6.7MB
- SHA256 3ab2506a4f0601226e0be7354a93cd4ef5b559dc2a107a48ec6b522e69724e5d
- MD5 1169618c719feb55a77ab69a7568bcfb
- SHA1 e07ea9739468f6ee17940e4a1ce80f904f9d27cf
- SHA512 e9bbde3caebb2bd235486f0d63c77e016c027db5a5956db47ec7a1d4c683a545e16e3cc40975d50097f9b4fce2696712f771d28bc2ed3a944f54ba12328971ce
- SSDEEP 196608:Mt+IpBFXx8iKVf48m1Q6RNtz7Xpl7ARhnEdbt7vtvbF:Mt+4eEtvbq2RZ
- TLSH
  T1076633662C0CE4C1BC7A5A34E0F83E8ECB7ADA87C9504426531E66DC85EAC11DE45FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Crack/ASC.exe
- Size 10.9MB
- SHA256 3af99b861b5ee709b0dde720db3f40171d7b5b4d32c3ee9a10a4c024e201f832
- MD5 9a407b29e2d2f3669f75d7b8c1c508c5
- SHA1 64886ab075202b6d35c99e69f2d121c295c573a3
- SHA512 a0b329399f73ebb2a432dbaa89f5fe1c74305f6baf653d05f3fee08fce1276a2eed2806678fab3a0300b57d8ea7a638b9c429f71fea0b71a8d4130815d6a7468
- SSDEEP 196608:erhpU8Yyp7zgHT/yDS2AowSAJm210CtKSDYbz1pKFiXeXpAn4xQO5pGcW:erhKUzgHT/y+NuAgW0Cp++s8D2cW
- TLSH
  T14FC65B1573D89023E2B31EBE582ADBD874367DB11E24D45F3AF91A0C1A7EB49E820357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Crack/OFCommon.dll
- Size 941KB
- SHA256 9b58084f6319f46a1a75bee60c6b6a74925d52101042d435c5258fc0dab204a2
- MD5 cddf0d6fc267da4e98779749d26c9c40
- SHA1 cae85047a5a119ad7443e4280d06eb4da3ae9917
- SHA512 1853689ced55df50c211ef24bf19f509501403b1d803ad26223171aaf4b332f1a7f50b594afbcea06ef5e2a0283310a42fd06cff8634bd42dbd7e46a2abac295
- SSDEEP 24576:hfzBhfbT1pe+1uTN7CQiBIWcUc0LLbH50Yn2RtjIN7CQiBIWcUc0LLbH51nxYQt8:hfVxne+4TN7CQiBIWcUc0LLbH50Yn2R2
- TLSH
  T13A250612E28646F0DC593B7124355C580A362EE97EFD960E4F3DF4AD6BB23E314325A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  Crack/Scan.dll
- Size 1021KB
- SHA256 7f7cac1161fc3822b701147a721c62f72e67938faf44076930a66fbfe56e71a3
- MD5 dc095f69fee57ace88145a12c2cfea00
- SHA1 8200d85913c4864ab3bd8ed9a597edc2cea5d7a9
- SHA512 1a8ff29f3a359cc137deb8fca23acb62e0800569c6cc0ecd7c0069420b4ff64c34895f1e5b770e734877c9d2525acd09a64c87d1759e1476c5c692a8fa311ab0
- SSDEEP 24576:BemGgWJx3+AVZDPkpD/8/SJxULLbGgtzA+u05T/T75sscEu:YmKx3BzDPk9khLLT3jT/J/
- TLSH
  T137257D2163C5C033D1721E7B8C6AD2D969397A381EA4984B3DF89F4C1F79B42AD35293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Crack/madexcept_.bpl
- Size 438KB
- SHA256 8aa5bf42b4e5f7258a3fbd4f5f91ac493bcb0d3faface6e65922b652439204dd
- MD5 503f6aaebaed4171c933ee4f7733c608
- SHA1 f265d9dac95fa6d0b707ce4275add56a195e14d6
- SHA512 4589ae2dca0888f2e56867424b2c64d20afd82ed9ef1079007d38ae712022fe2177105b847b634203bdc8c7e5c1d9402b80005ba0042ca168e23e2791fd5c3c7
- SSDEEP 6144:FlAz49EKhEV30F8sl88nTjQ4Q50gEcW/jd+o72niViNMa4Yn2S4fb:FlG4ut30F8slzYlQcW/jd++2nD6u2S4T
- TLSH
  T196944D31D288C077D062263BCC2AD6C461B975341A34A95F7DE80F4CAF77A91AF26397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10