ebd189b1dcd26b62df74385541ea5600df7f76dbe297d02e449286655872f012

General

Target
movavi_video_editor_25.3.0.zip
Size 124.9MB
Sample260712-fb6b1acz2k
SHA256 ebd189b1dcd26b62df74385541ea5600df7f76dbe297d02e449286655872f012
MD5 62b83c118554f2c79fe0f56d3a5fdbb2
SHA1 7776e1fbe4d678850b13086cb8b80545a107b196
SHA512 d0a5b0710931f0343c978b999a949fe2439cf79a3b062cb7d7457881a93ebd7d15069b1671f63718ac35fce5b2f5ee6485f983575b9685779d790f2789feab27
SSDEEP 3145728:vzeWTOhA7ncbu6GuzaxG/ujwsczQDlEZZMoHUFwDrVRbzb/byaZbkF:vxOuncb5zojwbQZEZZYwtVKV
TLSH
T19E58334E66B14F48F80CE642256865D9128D76561F80F3BB135FD8DBEC86E03FAF2186
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Movavi Video Editor 25.3.0.exe
- Size 124.9MB
- SHA256 53003b868f99c9580a3ee2f3eb9407f71c21223b27996ace8d2301de528b96d3
- MD5 db2065970baae1e900b0d3cc46550e06
- SHA1 80e0a68221dbdec7323268557b96e6753c8796aa
- SHA512 89ba2385f1be12b95a2b15487d0365fe4e3fe8a486b98088d5e18ca1cab7bd81c0bd7b96176814e21d8ab620c72eb8a5ddaa65d1f282bd8e5880c54da5b5b40e
- SSDEEP 3145728:MegCBanQbLiPR6R/WBOZyVGjKxf8BTMKyUJWbTVlBCtrfo6BFon:MCasLiPCZysKB8BT3WteiH
- TLSH
  T10E58330F62F35F5AF83DE671141864AE134976562F80B27B430F9C9BAD26D03EAF1186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer bootkit defense_evasion persistence spyware trojan
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  _Silent Install.cmd
- Size 1KB
- SHA256 fa3884292dfbf75ac05955d0ad91369a917e3e6bff6c96377df291d33e3d39d5
- MD5 01ada216cd448f93e55f1c7736b81c20
- SHA1 fdfe371edbee42ddf3df48d2eca9e3be7a265edb
- SHA512 6019cd93f4dda2533c580e586aa50e41aeb7a8745fe9d14d27b342246161f5bdf682690b5e803e18d4ec2255c31c86de42d79f641fe0b28361104dc8e928f2f9
- TLSH
  T173115A773670E54C93B10F846D748522786522DB2DB20D50B4BF407B83A16C8786CFAB
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral3 behavioral4
- Target
  _Unpack Portable.cmd
- Size 1KB
- SHA256 4be9b028b9abfc7dd77b299cae62a7e9771034385e80e2cf13d8513641480b6c
- MD5 0ec99d6d69b61e9d7f4558d947c27bbb
- SHA1 26c83da0cda54a58f01705fd76b4c7bce11a9d57
- SHA512 8996ea6f1531c05f80772a892591a3889a27fb8a2c256d9fc3c57de9a8d2e61167d252051c606503b203a6326e5568bf2674ae629f83616ade93a21809ee3613
- TLSH
  T1D3115A2B7670E54CA3B10F842D748522B87122DB2CF20D50B0BF403B83A16C8786CB9F
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
behavioral5 behavioral6