f4b9147dccb49fac03457172c5c5951cf532973ca0fb5e34aa84688a6f05b055

General

Target
初音ミク＿HatsuneMiku.zip
Size 479.4MB
Sample260708-xq2e2agt7s
SHA256 f4b9147dccb49fac03457172c5c5951cf532973ca0fb5e34aa84688a6f05b055
MD5 ad72f5fd379973dd7a8c39364330b01c
SHA1 a5e445dfc92ecd8076274cecd3e975b47119dac5
SHA512 44ce3721992c3b88aaec5cebdc25ed735ce3789f07a40830cf78067616d269dc4d7e60ed40bc8582bd8f776d47744dc1acdb47ff318c6485155e25f14bd4cfba
SSDEEP 12582912:YnI/VxFqpB8XGlYG8lA70V5uY/3xef5z59Hsb1Uc:Yn6WpB+Y0Vnxef1MZUc
TLSH
T1373933D5555D3E8035B02C36FE68BE4C5448488B878EDF9FEDCA038B1AA16AD0CD2E5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  初音ミク＿HatsuneMiku.zip
- Size 479.4MB
- SHA256 f4b9147dccb49fac03457172c5c5951cf532973ca0fb5e34aa84688a6f05b055
- MD5 ad72f5fd379973dd7a8c39364330b01c
- SHA1 a5e445dfc92ecd8076274cecd3e975b47119dac5
- SHA512 44ce3721992c3b88aaec5cebdc25ed735ce3789f07a40830cf78067616d269dc4d7e60ed40bc8582bd8f776d47744dc1acdb47ff318c6485155e25f14bd4cfba
- SSDEEP 12582912:YnI/VxFqpB8XGlYG8lA70V5uY/3xef5z59Hsb1Uc:Yn6WpB+Y0Vnxef1MZUc
- TLSH
  T1373933D5555D3E8035B02C36FE68BE4C5448488B878EDF9FEDCA038B1AA16AD0CD2E5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  ~NQHatsuneMiku/ISSetup.dll
- Size 480KB
- SHA256 7deb4c7e37fe9429e64b0eb3d17beb711b16876c5dac90ebf057802f69f40c3c
- MD5 aba37cd7fe50ee3d51bba1884ab32011
- SHA1 96f1dbf8666c080454161ae28455b0de7fdac7d3
- SHA512 7d27cefc60dad740865d7c9eb08531ecbf9837ddd547467995bc98516cffd812f249dcd436a7620f0fffd5c37a44bb2f7cc12a557493317daf169a6237f321f8
- SSDEEP 6144:c4SLQQ6n135yxvCI056f65Zx43+hymOB7F7n9Z1Cn70729fIErFNaWK:c4SMpJcv7N0Zx4OXkXZ1g4KN
- TLSH
  T1A3A4CF42FB42C6B2C50C0535485BA3DA4BB1FC5A6E03B7173798B76EADB33C17A85258
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral2
- Target
  ~NQHatsuneMiku/_Setup.dll
- Size 160KB
- SHA256 8802e54ce01babf7bb22d0da5c83bebc5c05d0ccd73566a5f836690e9278a696
- MD5 30ebd4e80b1dda05eac709a1dc5965b4
- SHA1 2418232370026574baabc84b105f6dd9e458ad86
- SHA512 5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557
- SSDEEP 3072:Eb9YfMX0E9QsJB9cWe7Ka2coNfCp5CzQQfnlS6LlwYKU7:EKlua8NfCp5CcS7
- TLSH
  T1C4F3A4419A9B858FF3AFEA34C8B22EF88FD13D9EDB7145747895B12C24786605806F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3