5e6156e4e1952781f96e64c96eafe498db689b6cf19ac9bcb36c0ef689ae7a0c

General

Target
Spelunky 2.7z
Size 452.6MB
Sample260706-kqvw2agy7k
SHA256 5e6156e4e1952781f96e64c96eafe498db689b6cf19ac9bcb36c0ef689ae7a0c
MD5 61b57f1d07521d1ffa674122e84dcb15
SHA1 91328a7790c3b6694137a25105b05e9bcf48e59a
SHA512 6e1e6192d37126b4164aa340dce31e02221790d0c790d787564020dc7a7f8653f07f0317afff564ce1352b6e8aca0097406408a8c59c53dc7e6f066db4fe83d6
SSDEEP 12582912:p3NLF09gxijKCUMbBqYNWrxkRIcAyA4dQxurotu:jLxxijnUMbwMydodQx8Qu
TLSH
T17A3933A4636C7344C25274A1FDCB9CB75A2B6B72F1B0B33C0646A904D19A49BB0F53ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Setup.dll
- Size 2.3MB
- SHA256 4f0adfcfd47f89d1295e1ad12f77d8810bcddce95ac202a4f018e215c3df0aee
- MD5 76763340c96870c9e43019154e3674e5
- SHA1 da93bd4d6ef0474e140a90288a0efec61979ab7c
- SHA512 b17aa364058b9d686f05f7e8a9a6793a8116568a1243e0c2141852b93c3a906662de4a50e4c499b0bccb1f2f9beae2eb7edfefd5bb3ddb0996f37aa0f53b8ec2
- SSDEEP 49152:hOG89vrT5C1cRMkslRIrJdQduj03skv/Y6GAKHwVz01JDTZoQ6rGyWCMPWX0DtF6:RivrT5ecCnIrJdFWjHyAKHEzAtojiXP6
- TLSH
  T194B5333EDD332C57D54B40A3F35774B2082C1531DCACA631EA7FD9B682D9A21311AE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Setup.exe
- Size 2.6MB
- SHA256 084f1c36ccefabebf9cf2df1e040c27229c9fa4d38ca4284a4fffd9a24d21dcb
- MD5 67626be98e508dd71ba00d6322772978
- SHA1 c4f7e071e61fa27ac0abfeedbe52623173ce8e1d
- SHA512 22a9068e002e7298361386e23a6acac29ff80459484170468335d4f7b46ff29087e77c2b02c64300c467f1b7ac4dedf52cbe1338ca99397421b0020dc1ab5663
- SSDEEP 49152:0qeNVW1bSwLz5PVbMxj3m8wPC+aHjsnD/ijQlof+kpCt:BEAQwFCDm1gjsDijQlzkU
- TLSH
  T1FEC5F13FB268653ED4AB4B3245B39350997BBB62A81B8C1F07F0490DCF665701E3BA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral2