07a54aca88a08239cf4fef23f3dd857d68173d2c6c439e62cccfe00fd93e1734

Sharing

Copy URL Twitter E-mail

General

Target
3DS Max 2010 By LeozinMs.zip
Size 716.4MB
Sample260708-aadmpsg12k
SHA256 07a54aca88a08239cf4fef23f3dd857d68173d2c6c439e62cccfe00fd93e1734
MD5 0f90b2a18fb7877092b69becc8fe9b66
SHA1 37cab95223b0341498f8e5657913d77e5cc39104
SHA512 a938a1cbfed0e6b60b0f43e44b97e1e7d41938b117d53913ce9924949c0fa41670526ea15074e0bc0dd1a1ebce522bd25eb6e65cbbb789ecb8901045ae86a5c0
SSDEEP 12582912:slJ/K8nq5nMiIb+pN+8ocnfPjIOkRmR5xVD7ebcCPiWoLCz0cYU803wGpi+QA5yh:Z8n4Sb+plnfrf9nypP/oLdcC0/b5yo8z
TLSH
T13D79338A1E80DF9DFD282E7C69944658BC15F11E14702AD1B9B4BFB8494F7CB227DC88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  3DS Max 2010 By LeozinMs/Ativação/adlmint.dll
- Size 3.1MB
- SHA256 5b058da7a44970fee469ed98e8403a87f026eaf81843e86d0f574d405f5da436
- MD5 a2b6a0dbc96bc5792f0d3c669f9838f0
- SHA1 fee799cff6b5949d0872aa78e48639ca25f63394
- SHA512 bc5d9f55d9e36788c67cd87fddbf00056871e532b60b0e009ea6dfb1ab50b6900152e649cbd899bf3629f9e70c713ed148ac86e347f28af0947d337c07c3854d
- SSDEEP 49152:ww892y9RaiW2LgVr2pRDA4ouViJSfwt7c6wkanKTmZSSNlimcv/nFQYE:LYVLUUDAlfTUZYF
- TLSH
  T1FEE59D41E652C0B6E89F40B8057FA76D1C68E9B0035451D3E3C8AF6F9FB25E23A31667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/AcDelTree.exe
- Size 157KB
- SHA256 213246c0cb93cce6dd6bcfccf022a3bb0079df1cd72b9a7cbbc8d095c0ace5c7
- MD5 839422decb61d4b24d960e2dab72677e
- SHA1 692b41fa5ec19ad53acc31b1ce61342a10f00012
- SHA512 1a67fdbfac4fc08878a9dbc4a50b3b1278482ebada48c3df0398d3b53291aaa75b3905d3502b9d049096d005416eafde5686dae89f7cf2bda8536059b22705bf
- SSDEEP 3072:4LSRX4thYhxSCwKjEkXxaOEJS91EIghfKZQQkWVKHkyT+50bV:42RItu+CXpEM9FghSZQ37b
- TLSH
  T1F2F37C10B6E0C03AF4B712F549B9C7B8A93D7AB15B2450CB62D61BEA57387E49C3035B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/AcSetup.dll
- Size 85KB
- SHA256 30166e04061bdce85a1026316f57a051c040d4cf711a613f6b5f7e208b560ea0
- MD5 09f77bb0d0bdc8fb47efe4c455d7c077
- SHA1 6f8ec3e5459040f0747f202b12d3c6a85d478d8a
- SHA512 a213560d304614955876dbd9a2f952ef2b29e1f93d3173cf317e0c567cbad7ecee1c50a8ea93c39e47f6af6262376d71610419d616ab208e097b3e393d8f397a
- SSDEEP 1536:/z0L8yAIygCYqzmsFMa61t87uTN/V8wHGldLge5sOjIL:/gLCIDCYqx61a+kdn5s2IL
- TLSH
  T1E3838D00B941D03BC8B71973957E8A259A2DAA225BE550C77BDA0FBA1FF06E13F35107
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/AcSetupRes.dll
- Size 6KB
- SHA256 cd70bdd7806f4f210903c44595f92dac6e920ac03aae6ab53704f1bfa4679d30
- MD5 7168c98b10a0c679def1b2545d35d54c
- SHA1 0b6fbf52e436780db2916748f0fb7ea151f15d0f
- SHA512 0f212c20e9cb1d62ac102e6dab4ed40836f7c7b1d59de6d1d08eacfe8ec4376622da9c2403712c6a212c6d43f38ae5fc391720078f2f3b0be377512d7040ab81
- SSDEEP 192:NJLmFOK5FWqOutCZgMjGwP7kMz60+ebMOdM9SX:NJaFOK5FWqOutdM6qbjHX
- TLSH
  T169E1B5870BE60025F9B26F3097F1C2528E79BD83BDF0929F4610004D2E91B54AA90F7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/CustomProductUI.dll
- Size 307KB
- SHA256 81919e759c791e93ebdccfc48cac886b6d16299e4df3892d9fa42b8f6203ebdb
- MD5 e96cd677491b79c73cc04495ae905ba4
- SHA1 cf2ad6d2130ee1fc54fafb8ab0e598f0d0e8028c
- SHA512 2963cd7daec31bf746fb5dffb24a91f68fa6293f9d247d3fe80f9ecdc0801f48b511cbb975385382d9d7dc58db92e31b2d11180d9ccf04f0b97d42728dc4bb0c
- SSDEEP 3072:4YVT/jKAkzjXZ4lsldSxzZzpQklN2uYpRZ7hdtLuJW02o9+BnVQxB9N5kzcyFZXg:4a/jKpXGQdSRFekGuYfZ7jtKJeEBWw7
- TLSH
  T108644B10EA03D13EE8BB15769A7D895E855CB96107A490C3B3CC2CBF5EB29D23E30657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/DeployUi.dll
- Size 537KB
- SHA256 f9e805cd6bcd4a0f2611487616a083b62fa9c6463951a6127d70b30e61c767e1
- MD5 0dcf414a03693484f0d89db3bb91f4c9
- SHA1 cdb8c91cd9be0c2b6ebc43e8e9000c23077a1153
- SHA512 6dcdecff9e9df4b3ac6bb8045edf96e25b09dc4e2c942351f437daf4f0d747882ecbe308c4ea2b111619eae80a555c84fd8a2c6f98208f699a59cb1958841b8a
- SSDEEP 6144:Z9c5iXN2Qh40DpS3T5jIjUx6hPI+dcE08fo6rdK/33KTtwumtbuG2J5lnfz0xrJH:Z9cpV0LpDhKf321m165GrJtkQaG/ziO
- TLSH
  T131C45B81BFC903B6D78DA17509F6AB19D5F996589324C3C3D7191EBA4C922C3783620F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/Facebook.url
- Size 193B
- SHA256 2411189bbe06eb36aad79800f0a15c6c96073ae3e0a0404b5677f8add2d46e2e
- MD5 c6541da679dc7dfae69b7cde9464b3f8
- SHA1 d7710480712e926977b4ad002eb30a8761bc9b40
- SHA512 f7ceec1177cbd481a285aec0739bb78392ecb934a93427fc38a2e48ad2dcf905087761d2e7907a7c8a1408f4555bb7bc1448b4e88c3cdcbb7200cc736c722155
- TLSH
  T15CC0221C0A0C81A4E922A8068074BC28D80CB14459F6C6482188ECCA8C80082CC08BB6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/LiteHtml.dll
- Size 103KB
- SHA256 fe5573399a2e416a9e1ae734277a01a3e7a04e9203e5ea82aeb5d90f542251e6
- MD5 7b5b455acd404437d51912d7607a06f3
- SHA1 b8fcd7e5d4550376bff80e0f4190e54916fca356
- SHA512 c46ef2cd51f97e9b86bf16ce7c28eab018c4438d63257df581291780af09c622f8445c888cf7a6e5fc47855406495e4061505bfbca9d59cb440b23e1c9cd4b2d
- SSDEEP 3072:sFW4RozoDTtesmbAAk/f38SgYOtSbPf9Q:Csy2E3L1OtSbn
- TLSH
  T17FA35B41B7EA81F9F5CE12BC1AB6A7195737B261CF1159C7A7280F1ACE203D12C3925B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/PPZlib123.dll
- Size 60KB
- SHA256 c95d8d0d23f5259c07a0e528a5ebc1ad0e34c3b8deb03e36019179e22c0be256
- MD5 4c84e00690818db6fa5b51555f4e1c57
- SHA1 0c98023dbf2dc80437d47030925801dd620fb113
- SHA512 a4ef3af3fe001537875b0e4e8116a4dfa147ef38c01cfd2e95b11fb8b77ca444ced0f573a88c90166805a4a20575538f7dc3b93e4351fb57cd09b46dba8fc96e
- SSDEEP 1536:8Qa1dXVUNyNADBxK12+nToIfAIOjIOy3wW0+4+N:SmBxO2aTBf2Fy3wW0+4
- TLSH
  T161538D1496D183F1D0FB463155E6472D8A36319807AEE9E766CD7BD228223E6B3313CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/PatchMgr.dll
- Size 1024KB
- SHA256 b5300104a6cc3016db72f5876b27152339e03189fad0affdea5a7944b4c30da5
- MD5 4b7ac8002cf10e4d514f0a64ccf680c6
- SHA1 753567def264f1972ea3f543d2334d55f825191a
- SHA512 68deeb99b22459433559cca1e8f5b935c7ee246037e2a436f39a6adc6c49c972f54ba8d28668e34fa808533d55645b7d08e9acc0c0bdc4593b2dd0729e7b4cf7
- SSDEEP 24576:CWKnSMJ+FONVDuO4cLe7GbSNmpbmOEANUpELD/J:UV2W6VanJ
- TLSH
  T18B254C106741903BE5B725F94BAEB22DA51CBED2035149CB52C87AFF8B256E37C3121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/PatchMgrRes.dll
- Size 6KB
- SHA256 33a39095184d71f1cbf1ff2856d4353715f15853d816021e391b8a0273937a8e
- MD5 79a18ff80cd6987d62f38486887f0706
- SHA1 24636f899a598efe219b9d7ed20e6a165f111875
- SHA512 0ed16fc3e2bb3db6e2ade09e8f085e48d3a83f988e86d3eec66ba9e220989daf209d7e87bf31a5768bd04d7f219a2f289998429764f22519ef059610d38ab9e4
- SSDEEP 96:SQ52Apvm/aQMUA7zKM9HmnA/KOYSGTwRdv7t2gmeg6cOQJaiy0iPCt5:SQ52Ap7T5mnA/Kn8NUdIe5
- TLSH
  T1A6D1034697FA5215F1F36F74BEB616904E7ABC92BA79C61E9240004E1C71BA4CCB1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/ProjectPointClient.dll
- Size 1.4MB
- SHA256 437cad9f681fd1acd84ea0e36edf3a001ccba9a0aa4614622c656a5e7634210c
- MD5 b93ec285515029f797d73f09763b5248
- SHA1 d08873211b43d58d0b20ca2cb7466f5f705785b7
- SHA512 5226df12793eadb5b7b15dd040f93e5b4c95eb6fea6732132f97febbfadc3b1c069ffd8c608ffaf9828cd1c097c877af50256216ac1a64a95b01d05a25514aea
- SSDEEP 24576:g40pnKbLF9yhEhkcteZjMdH5ZMVHt+G+j:THbH4Zj4H5ZWN+G+j
- TLSH
  T1B2652A00BBDAC176DB9E62B9073DE69E626A71D05F7013E7B2482ADF48302D369313D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/Setup/AcDelTree.exe
- Size 157KB
- SHA256 213246c0cb93cce6dd6bcfccf022a3bb0079df1cd72b9a7cbbc8d095c0ace5c7
- MD5 839422decb61d4b24d960e2dab72677e
- SHA1 692b41fa5ec19ad53acc31b1ce61342a10f00012
- SHA512 1a67fdbfac4fc08878a9dbc4a50b3b1278482ebada48c3df0398d3b53291aaa75b3905d3502b9d049096d005416eafde5686dae89f7cf2bda8536059b22705bf
- SSDEEP 3072:4LSRX4thYhxSCwKjEkXxaOEJS91EIghfKZQQkWVKHkyT+50bV:42RItu+CXpEM9FghSZQ37b
- TLSH
  T1F2F37C10B6E0C03AF4B712F549B9C7B8A93D7AB15B2450CB62D61BEA57387E49C3035B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/Setup/CustomProductUI.dll
- Size 307KB
- SHA256 81919e759c791e93ebdccfc48cac886b6d16299e4df3892d9fa42b8f6203ebdb
- MD5 e96cd677491b79c73cc04495ae905ba4
- SHA1 cf2ad6d2130ee1fc54fafb8ab0e598f0d0e8028c
- SHA512 2963cd7daec31bf746fb5dffb24a91f68fa6293f9d247d3fe80f9ecdc0801f48b511cbb975385382d9d7dc58db92e31b2d11180d9ccf04f0b97d42728dc4bb0c
- SSDEEP 3072:4YVT/jKAkzjXZ4lsldSxzZzpQklN2uYpRZ7hdtLuJW02o9+BnVQxB9N5kzcyFZXg:4a/jKpXGQdSRFekGuYfZ7jtKJeEBWw7
- TLSH
  T108644B10EA03D13EE8BB15769A7D895E855CB96107A490C3B3CC2CBF5EB29D23E30657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/Setup/DeployUi.dll
- Size 537KB
- SHA256 f9e805cd6bcd4a0f2611487616a083b62fa9c6463951a6127d70b30e61c767e1
- MD5 0dcf414a03693484f0d89db3bb91f4c9
- SHA1 cdb8c91cd9be0c2b6ebc43e8e9000c23077a1153
- SHA512 6dcdecff9e9df4b3ac6bb8045edf96e25b09dc4e2c942351f437daf4f0d747882ecbe308c4ea2b111619eae80a555c84fd8a2c6f98208f699a59cb1958841b8a
- SSDEEP 6144:Z9c5iXN2Qh40DpS3T5jIjUx6hPI+dcE08fo6rdK/33KTtwumtbuG2J5lnfz0xrJH:Z9cpV0LpDhKf321m165GrJtkQaG/ziO
- TLSH
  T131C45B81BFC903B6D78DA17509F6AB19D5F996589324C3C3D7191EBA4C922C3783620F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  3DS Max 2010 By LeozinMs/Autodesk 3DS Max 2010/Setup/LiteHtml.dll
- Size 103KB
- SHA256 fe5573399a2e416a9e1ae734277a01a3e7a04e9203e5ea82aeb5d90f542251e6
- MD5 7b5b455acd404437d51912d7607a06f3
- SHA1 b8fcd7e5d4550376bff80e0f4190e54916fca356
- SHA512 c46ef2cd51f97e9b86bf16ce7c28eab018c4438d63257df581291780af09c622f8445c888cf7a6e5fc47855406495e4061505bfbca9d59cb440b23e1c9cd4b2d
- SSDEEP 3072:sFW4RozoDTtesmbAAk/f38SgYOtSbPf9Q:Csy2E3L1OtSbn
- TLSH
  T17FA35B41B7EA81F9F5CE12BC1AB6A7195737B261CF1159C7A7280F1ACE203D12C3925B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32