cc3c3e98be0289c4c4e30ee9a68c75944ed637b1679f029994e41c13b1a3787e

General

Target
Stardock WindowBlinds v 11 07 with Crack License Key Life.zip
Size 5.4MB
Sample260628-wedddsaz3q
SHA256 cc3c3e98be0289c4c4e30ee9a68c75944ed637b1679f029994e41c13b1a3787e
MD5 18d51b78746189f33a9b052466035e1e
SHA1 b38d579bfee4d6fb061e73dae9f40036ab04a390
SHA512 9c5d658323c6934756bd8b40b1dc65d0c289422a153aa6cc98e0a7ffed992dd98c86d7865895562fa9f44a894d1f02717b780c503b6c64ff16bc9cc736c4ec06
SSDEEP 98304:75Oa3bX493Z8u4wBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxD:V5IBSu4w/tyd3w++lz0byD
TLSH
T1A146023BF28B647DE06A56367AB29110953B7E6166124C4797ECF48CCF221B01E3E793
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Stardock WindowBlinds v 11 07 with Crack License Key Life.zip
- Size 5.4MB
- SHA256 cc3c3e98be0289c4c4e30ee9a68c75944ed637b1679f029994e41c13b1a3787e
- MD5 18d51b78746189f33a9b052466035e1e
- SHA1 b38d579bfee4d6fb061e73dae9f40036ab04a390
- SHA512 9c5d658323c6934756bd8b40b1dc65d0c289422a153aa6cc98e0a7ffed992dd98c86d7865895562fa9f44a894d1f02717b780c503b6c64ff16bc9cc736c4ec06
- SSDEEP 98304:75Oa3bX493Z8u4wBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxD:V5IBSu4w/tyd3w++lz0byD
- TLSH
  T1A146023BF28B647DE06A56367AB29110953B7E6166124C4797ECF48CCF221B01E3E793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  .Store
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH
  T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral3 behavioral4
- Target
  Stardock WindowBlinds v 11 07 with Crack License Key Life.exe
- Size 2.0MB
- SHA256 b524b574406b27e17a71ef2662b31f7e95962e5558db6b9809b2c4605c4e9616
- MD5 425f966968d3f282153ecef5eca06775
- SHA1 6485d377403fb21b4b72c86a5453dce077ecae19
- SHA512 74b299b1b8e84bf19cb9c36d23e26598268d16ab0e00acd564f29ebc845063d57c7a577209784647969e5059c566e937831d9d35b89a6f8c446c4432fb414733
- SSDEEP 49152:4uI2h3Z01Hu8x/3ok9bz4pICVmkZ866oG:45Oa3bX493Z8uG
- TLSH
  T13DA5C03FF28B653EE06A16367A72A110983B7A6165124C1696FCF88CCF355701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral5 behavioral6