General
- Target TopazVideoAI-4.0.0.msi
- Size 660.0MB
- Sample260708-wpnl4sfs4z
- SHA256 f43da6d8a8caf5ed20a41afbf9204a96482223365ea13c3bdb40edc0ec1b6c96
- MD5 115980adb52351c2ca34d34eb4a29e6d
- SHA1 50401536cd104ca9424f3bb8678d0c2673f9c71c
- SHA512 ec7b81475acdc66fde1d15b831fb66dbf2b65bc9e76cdefde023385d558fea9f11447eb1155170051c10ea14293a2a41311554f5b846f6924d9b31f57a961e0e
- SSDEEP 12582912:Nve5kALoN3J/BF44KiybRoaL6sttrWy5dgsrFAFf2xoYj9lcC9pBZnV/FXoxF3x4:NqkqM3J/5VK+E665pr2xqTjTcYpBZV/r
- TLSH T1807933137BCD1713F16BC339A26ACA1DDE307C1C0F5986CF95C0A4952E6A7E0A6B8497
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
TopazVideoAI-4.0.0.msi
Resource
win10v2004-20260513-en
23 signatures
900 seconds
Malware Config
Targets
-
- Target TopazVideoAI-4.0.0.msi
- Size 660.0MB
- SHA256 f43da6d8a8caf5ed20a41afbf9204a96482223365ea13c3bdb40edc0ec1b6c96
- MD5 115980adb52351c2ca34d34eb4a29e6d
- SHA1 50401536cd104ca9424f3bb8678d0c2673f9c71c
- SHA512 ec7b81475acdc66fde1d15b831fb66dbf2b65bc9e76cdefde023385d558fea9f11447eb1155170051c10ea14293a2a41311554f5b846f6924d9b31f57a961e0e
- SSDEEP 12582912:Nve5kALoN3J/BF44KiybRoaL6sttrWy5dgsrFAFf2xoYj9lcC9pBZnV/FXoxF3x4:NqkqM3J/5VK+E665pr2xqTjTcYpBZV/r
- TLSH T1807933137BCD1713F16BC339A26ACA1DDE307C1C0F5986CF95C0A4952E6A7E0A6B8497
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A potential corporate email address has been identified in the URL: [email protected]
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates processes with tasklist