24a9ea8c2e2008f02e5962c2eb1048b323b6b0214a23e1ced62279714340ac73

Sharing

Copy URL Twitter E-mail

General

Target
Hpp v5 Full Version.rar
Size 6.0MB
Sample260620-jv525ae17v
SHA256 24a9ea8c2e2008f02e5962c2eb1048b323b6b0214a23e1ced62279714340ac73
MD5 ed797d4220b21b94f4355a19181fe3c4
SHA1 a825e79c17eb1c8df19efda9b843f6f902d5d3d6
SHA512 6abdb6f72b7c93fa7431c58e69bf9c209f95be6f3fc92fe3da8151907d78a87d177c0ad44ee64a23cb71cb3dfb2c7d3a430a1aec4fc64ab27812d184d143a784
SSDEEP 98304:9fSCcCdQ0kumkbIcFSR/Wjs1BdNB1Oi9xZuNcH85VSVDalbH8UgIbD:9qCTkySVWjWB9B1858EHFxn
TLSH
T1CD5633AAD23B591F824A0B4314A5C69B0147DFC5618AA58B7BA055ECF3FF8D22FDC047
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Hpp v5 Full Version/hpp.dll
- Size 6.1MB
- SHA256 e2aef0d53372f0d3e4def76a73aa2b4986a856e9de4eebddcb011fc47ebac6ec
- MD5 a2aa786ba5517fa208fac46a9f0e159f
- SHA1 7a913a60e2fba01e8b03f38fa521d720f3fa5a54
- SHA512 fa3328db07a09dda0d0d30506a5eadd3b49d58a703ce09b992499ca18f57c17362f5a320b9bb18c9589d14ec66b259e91f99f1143dc2b615bbe5adae00368a2a
- SSDEEP 98304:wTYq6A8M7DDo9GZHA7foQr+wGUuEDhubLuhJRmgBaSOc9u5RkIFEOcB30mff16S:I6AUGZgLhh8XGrmgBRM5CIO3Zn0
- TLSH
  T13D562373525C0181E1F2C93FDA6B7DD471F342658B41A83CA9F6A9C23966CE6F603983
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery vmprotect adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Hpp v5 Full Version/hpp.hl.exe
- Size 179KB
- SHA256 88132922084d88a606d4430b1903c2c7d2b48e4b1467253c3a51ed00b05954c6
- MD5 12b9674d5a68f829f20214644e67baa3
- SHA1 9f2681173105f628c7cb14b57540121c5dc667dd
- SHA512 c1c47d6d7f2ec3d2cf6a50fe85acab653a4e81d7c56a2f1972f7de0b686272c3cb03f59be9512acb4530b94bbe90d4b81b00682d4413ed62bc69b6033a43a073
- SSDEEP 3072:O2qkbSLWyjCkRtc8lsAR8Z4GkZypFuX6HNwTBf0aeEus/aL:xH+ayW8fWOCDRY0ouAK
- TLSH
  T128044A89234AD90CD3D698FE6103E2348529D9350C63C2E1D7B63E3BEABAD516E570C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  out.upx
- Size 190KB
- SHA256 fae8c3960b919221e12d8b5084732e0188d4a5eec8bde1429564925ee80987fd
- MD5 541fcba91b4381411b2b28754e82bed2
- SHA1 3eac669a3dd83faa6a03e5fc4427fcb510cc8e78
- SHA512 bb90ec63fbd87989057d57b9203a516fa47c48be5ea681d3032806e4ee32b1893cb8bb8eefaf95a81038cd7e865b93cbbed1432faafce7a7d4b8f3bb52d2717e
- SSDEEP 3072:ppiebSLWyjCkRtc8lsAR8Z4GkZypFuX6HNwTBf0aeEus/aL:pYe+ayW8fWOCDRY0ouAK
- TLSH
  T182144A4D234AD90CD3C698FA6103E234C53AD9350D63C2A2D7B63A3BEAB9D516E570C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Hpp v5 Full Version/injmthd.ini
- Size 1B
- SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
- MD5 cfcd208495d565ef66e7dff9f98764da
- SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
- SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

VMProtect packed file

Enumerates connected drives

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8