ab79c26876a307f8787296278840896edaeff76a1a38d7078302d4e80dbebcb3

Sharing

Copy URL Twitter E-mail

General

Target
Minitool.zip
Size 58.5MB
Sample260627-cdnyysg15l
SHA256 ab79c26876a307f8787296278840896edaeff76a1a38d7078302d4e80dbebcb3
MD5 62b3197bb43aec8fe62bb1dbd25b52dd
SHA1 a171cc73a0c76ba2120965cf0aa9781aae62833d
SHA512 01859222c84d8ec91e842dd8da53b18eee8762cbb05b41cd9666d2592d47984652eb431aee6c6ef5383cba989433fb6bcccc72d280aeed724e384ded02a82131
SSDEEP 1572864:Zw3aNCS4UFh/bHnzltlGIIx4iSObhB2WjY2vF9M:ZEMdDFFVGkK/fjY0Y
TLSH
T1E4D73301B8E71BDCBB5A4D31AC37088A956FF3DD792F3E6A237D6A9B902D416354C012
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery installer

Malware Config

Targets

- Target
  Crack UZ1/Enterprise/partitionwizard.dll
- Size 5.2MB
- SHA256 cca47be20734150f00fc201b0ea2ce63fe3b012b2f447f23bb88c296846e6f05
- MD5 7e59eb37f90830002bfdc0fe784a255e
- SHA1 6e5ee0efdf9eee780f2f3861a345d2371f5740ba
- SHA512 486cb9b7f1ca3cbf9d78aed1b14b8c8bb67ae35cfe4cab7719733ca4782442ca90712ba9ca22f502150a7bfece34e9816b010951e8d50c90658d190965312338
- SSDEEP 98304:AAbh/Y0xVtvPtMlyifs3Zbfea41uLr/QZMn2584bIO+bL:NbhDftvP+7+ZbL41uPI2ExbIOc
- TLSH
  T1414612A6714133C8C42A8F74C92B9924E1729D1F0AF6C8B536CF7B517E7B121ED09B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Crack UZ1/Pro Deluxe/partitionwizard.dll
- Size 5.2MB
- SHA256 55a8fd53fe996bb8c8a0c44ed830a4d69b09cee9a33a2b802de81cadd7d5ffcd
- MD5 0532eaedf0d746ff0947935eaa9d0682
- SHA1 2812a58836d04381079dc422ead0926a8f1c2e9a
- SHA512 6975cfa27b2c179678ae06c0577f4fe8d287a9906a7cfc6b0189ff4fcfd8591e1a0d24dd25381c76de29953557c99b5eae5ce6944e0a0eec24b371efe8c38540
- SSDEEP 98304:Q3uqpA0CHNCl8e1q766g9LSJ+YyQL3SXHIdtkjKLreX:Q3uYONClp1q7IEAML3S3atyj
- TLSH
  T13546127A70453784C02ACFB098479865A1B3A92D4AF6D9BA71CFBB403FEF511DC09B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Crack UZ1/Pro Platinum/partitionwizard.dll
- Size 5.2MB
- SHA256 2744f2be154d09f07222e90d1b6e549325fc8ccd597cea5e19444002ea1fc4a5
- MD5 c9f5178095a4222a1da00f1ac59082cd
- SHA1 7b2e64d5d4857a293f73c4ee1e079368edfba59e
- SHA512 bb6d6e27134f0532a59891b7dab51e5dedd273a722bb2dcf4b62a9870e953a1b56300f60d891974eb377d7c8d71fcc4fc2e77b1dc5a0e71f6db7eb0648bde797
- SSDEEP 98304:K9cS15p8oEGPq6PMVLbXg1HWWo/4MBtW8D9FADBEDEb7CWlDr:K9cS15ioEGPq6PiLbQ1H1o/4MtHH8Mu3
- TLSH
  T1C846125A71453744C0798BB08857B460E1B2991E4BE6C47EB2DB7B813FFF091E90AB4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Crack UZ1/Pro Ultimate/partitionwizard.dll
- Size 5.2MB
- SHA256 f7fc4fbdd1706f443868047def63c1e9a746a0be2fac0577ce197e84c8b0a3ce
- MD5 c6a29db4cd5e8ed5b577c6354449c1ab
- SHA1 93a90f1654d45ff21f61d34813b52c545a1e5b38
- SHA512 2e3f8fd01bc6a392d46aa826b3411ee7f5a5781f8feb47803b8d7a3ad57da06507b6d8d4087eb8322869a3ab6b11399d6d9a52315e7ce5b1c4e4b8cde485c64c
- SSDEEP 98304:QXODM/1iHrZovYjcX5xlVu2z/+gCUImk6xsepby29:QX881yrZ5gs2Ahepby
- TLSH
  T12046124A6145238CC06DC3B0CC17A564D2B3991E0EE5D9B632DBBF913FBB461ED0A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Crack UZ1/Pro/partitionwizard.dll
- Size 5.2MB
- SHA256 6dbf510f4f0ced77341146b24a9b0c320b516ade2248defa09931ea413f8b20e
- MD5 01436079abf2b892977cf63971445db5
- SHA1 2bbe385f5492e879f0480a6a61ecbf12ba91507d
- SHA512 532e609fe4e380b8dccbe465de3c610fdb0b7727d63493b3eeaa713b29fcbd3b637f44aa40473076c1518cd5041658d8c2873cbf5b784620acf7bc05d4c366e4
- SSDEEP 98304:u8+Ts1VLXaun7NVfz09x1RRc+q0cefpBgNZykkU3XP7:u8OsVL97nw9x13J7o/
- TLSH
  T1AC4613563141335CC02EC37498179461A2F79A1F0AD6EAB271EBFB913FBB861DC09B49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Crack UZ1/Server/partitionwizard.dll
- Size 5.2MB
- SHA256 ca834c8a623c38acf17f65a4de402fd205a590aac752da57dbc24764b3e57f17
- MD5 21a5d8861d1c97231ed41b13ecea50f1
- SHA1 8f7b6d61bb3d30fb1b602abc6d3a453641d6f8fb
- SHA512 d326735a889d4d9714fc6628ef73ea3e1d3c1b7622c1cbc9cfa1394362dd94cc5ce71a74cc8ee1d2b4b90d3fa9f70eeb70e5e4f3f3cdba547c6008ced2b94c3a
- SSDEEP 98304:XEwo5rETjfmE2pRZAv0i4Aty1kP7HXle1nApEUODAQPPufeDKqA:1nfYAvyAXzH1e1njlPufH
- TLSH
  T1A4461289214533C8C46AC374C8179864A2B3681E0FF2D9B632DFBB917FBB551DD0A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Crack UZ1/Technician/partitionwizard.dll
- Size 5.2MB
- SHA256 8a1dc667a4758536e29c382273541cde5c980928034f6cd5e7e2c804b2589101
- MD5 5c19abec64f33530f3e41a9ccc5ba69d
- SHA1 3be59ab4c7fa48b1f48fd451161b0bccb2ad0e22
- SHA512 1950bbfabce4f65fd093c1d4044e14ef1e1c77bc5a8300a851ce7e17173aac31dcecf423fd0ed64d462bc0fe664a0ff54f96366f28469e6aa0580afc37da432b
- SSDEEP 98304:0ycnd1Gq5JpkKlgXKshO1XBq4E+SukUhzEdR:0ykGqfO+1XB0bU
- TLSH
  T1B746126661553248C03DC770C92B6864F2B6681E0BE6D87AB3CFFE427EB7151DD09B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Drops file in System32 directory
behavioral13 behavioral14
- Target
  Setup.exe
- Size 27.4MB
- SHA256 481146373cce038440a3e5f8e2cf4c248ad4b8aab08721b0ef17ed949ce3056a
- MD5 274d46f4d226bdbfe538f435ac8198ac
- SHA1 9f611c9f77c33708c5b8b48eab1b51e4cebb5393
- SHA512 75e6db9254fafee4fe09492d930f9a39fe39522ea258b41333225f89218efd82be97bce375ea1d78b9580ae39795e73f0fa31de54e5e9c0caba8e64a9ebffcf7
- SSDEEP 786432:XhxxYRiHcGiiwC+L/KW+NeJB2lSyRbNsUKW59iZPav7iHog:+oiH/SW+LBReyTikv7Vg
- TLSH
  T1BA573302769202B9EE7D4BF1E41244522DDEB9AD26E3198A3FF5E2CFC43F5426839417
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery installer
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16