20115d47f4e1a55b40dc59b2276250b223ab5bd6601f26fba2ede03f072266fa

General

Target
Crack.zip
Size 33.5MB
Sample260708-txan4sct6l
SHA256 20115d47f4e1a55b40dc59b2276250b223ab5bd6601f26fba2ede03f072266fa
MD5 08e8940bbabb9facbc45d8f892630c1f
SHA1 53c4d8242d4d484aa54080f1fd30247aba668c6b
SHA512 4dd939735945f182bc1d9332293a37e1d9b73e1fbd397dcbbe7d954906970551daa0c2deafa8b4b718b0102998b99dbe9d5d5abd8566c1ddb7d58add74bd2a74
SSDEEP 786432:sbvjFTU6Euqmvxi4va9b2cFwviNYbeFLqHdFYEOnFdfknOW5Ew:sbrFo6m14voFwRa1sdPOFdfK
TLSH
T124773308C2D7CB3F89A1077661FAF18B511504B78D232F4D69DD6EC9787F6A62780EA0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  32bit/ufs-explorer-pro.exe
- Size 16.8MB
- SHA256 7662e4eff89e4386a0524af3eed72af57c01e22bd9530d298f2fd4759b8d9d2b
- MD5 8d48c4725e423ad3b474f637f88b7469
- SHA1 afaf8681df4445b2691b02cc302a96811b528b00
- SHA512 8a108208eca4b072bee365b1177d241ec5f178f84fb214762fb6a2bfcda05621b7669d31a91ee6048ac875d3188901cbd587da06ac49c706eda34b81cb4461f4
- SSDEEP 393216:7mvjrXTHbrlHiMnKM8FyD3WAn7icH7VRbkky3BVxw/q2i:7OjbT7rAMKM8AX7i8bkpxCq2i
- TLSH
  T11F0722227606C136C94261F05939ABAFD32C6D2847764AC7E7847F39B8324D22F36D97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

bootkit discovery persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  64bit/ufs-explorer-pro.exe
- Size 19.4MB
- SHA256 a47f8338d4f9461b393a46647ebd664266ec184c42a05014aed2f36610e90ccc
- MD5 319de2e26dbbef36aba8c7da813cafb3
- SHA1 768adc732b89407fb4fc99ffc9c4a04228609016
- SHA512 e65fdb8e525a18507c743680416e2c213af0ea8d9af4df4958b29a7bc86758446c61181aa7b79702adff2195b95f09e1ab684e89dddf6f9ee48381fd3e93536b
- SSDEEP 393216:yM+IB+qcbUeCKOSTIefX5xxkCk7pRYnBDowwRUAqV8dTPrIY/J:yFIzcbUZvSTFfaCWYnhvwRUAd/J
- TLSH
  T19E172316729886B9E06AD078D6869517D7B93C26837147CF13902E697F3BAF04F3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

bootkit persistence adware ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3 behavioral4