Extracted

• • Target
    DaVinci Resolve Studio 21 Activation.zip
  • Size 1.5MB
  • SHA256 f084e42e65aaccd0e7ecc04fa3a3ad7e67a344299a95f10f571ad7afc3da880d
  • MD5 8710e4692301bfeef08b0eee62e5bd01
  • SHA1 3648311d30942e91d7488c06b42e283a5a71e80b
  • SHA512 df4c5851f1d68ff0c74636c0aa7c1d177ff5fdcfa35be952cff4022b62126b921f42c914de3db87ff738fe14c4be4ee6ff231923ec1bcb8e1718ce0a84be114c
  • SSDEEP 49152:yac2KHPaOPNrbHleCGaB9ZZlQye68zJF2AlK+W8qP8Ok:dc2Kvf1PThrEb9ua2g
  • TLSH
    T1E27533C9964FEBA4B9D3FA6B5428F0C11E79E911D56C2B86608DE3DD4671FE0810EC23
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  4^/10

  discovery
  behavioral1
• • Target
    Makux Activator.exe
  • Size 683KB
  • SHA256 715b4174065916a6412f60b3c10664b323dc737fd717ab09627083be34626fe0
  • MD5 6669e10c960f6c2297bcd3d5a27412aa
  • SHA1 73bee544b24312d0057d9ce5e62daa9f73243d00
  • SHA512 feb1e93aed3f1a0ade6e6ab169af46ddd438aa80f6667fb24421d2f0b7da1c4a4902438421079a75eecfc9a3347c3ebe7f62b88ea9e67a9c951954d8555ea497
  • SSDEEP 12288:tiGbyLR32C4NHhZoLCZcvDaLgf5pB6Nwi5//E7soazN0uahRg:MGboR3P4NHboLCevWLGL6//E7sTN0hhC
  • TLSH
    T1ECE48E2AB3E401F9D1B7D276C9535A26FB71780A1731CBCF03A046562F276A49E3E712
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware
  behavioral2
• • Target
    mpclient.dll
  • Size 2.9MB
  • SHA256 8098579816dfd86110fa16dd46142004f81d4ef06ade200256227b7e38d794f9
  • MD5 64308eacb4334edc899f0d581e9cc245
  • SHA1 efe14866127da69ac7d57d9dcd84010ddf296f89
  • SHA512 03cba3c166f3bf8c0e12b496e78e8bf7f29e8247a428c70fed7b04dcc94ea1369cf60bd86160e0113acc5a19b7e191e3bfca84aca7e7dea49549a7a614a21547
  • SSDEEP 24576:5aQdkfmdqgIcVzSQcsYG962Kw+B4Fwn+Qx7l1/bxuPIu2APOKffTNQ/vkosZBMDo:5aQqfgqEzIFGAXBfgbgvyXqsLx
  • TLSH
    T145D55B46BDA198A9C4E6A33598B612453B7CBC588F3337D72ED0B23A1E727C19C35B44
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral3