959b5da0362bb7bd6f3e72da784ff2a1178d219947b97aba70bcbc10d25cc2f8

General

Target
Clarity Makcu V2.6 - Free.rar
Size 78.6MB
Sample260714-e1epxagv2s
SHA256 959b5da0362bb7bd6f3e72da784ff2a1178d219947b97aba70bcbc10d25cc2f8
MD5 893236b1e7c1cb054b13e069a455f094
SHA1 45a9cbc67e527f6928d63f00bf99596a7ac6f640
SHA512 dc5925f4a92e9bbc65260940de35a3c0a5ade8bd616794041339fed3992b46797dcac27befb6d31ff90033751666df4de3277ffa020373fdb6ad531932c8174a
SSDEEP 1572864:7p+cXHst79oL+VByYfYR7b9l+vLf0eq0IN/T7vvU4R3v2nHkWjXi5rV:76K6LycYR7LcJrIF7XU4xtkXG
TLSH
T1E50833F66A471B7CBCAC7578A2A1474DACECE3EB4E85D726240A35323E570F0B305295
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  extra/launcher.py
- Size 490B
- SHA256 b1118a792e0b1ff20dcfddda6259f9582f47ad04852ef530364c2eabbbe1f8e4
- MD5 4ecdd478b622ef0c4fa137146bae7ebe
- SHA1 6cb76ef8e7c149398332fd5b4afeda028aa7f687
- SHA512 8ee70b34155dbc3c79f2ec280a88f4a81fcf090a32571c3e0824e29bf2173bb6c058ad5eb0db7c0015158e784fe22c053db4e9edcb0e21ac10bd30db9f7078d1
- TLSH
  T143F09EA305FE28092183F790E9C808F15DD65DE67657A8005EED47F18B028B0CD89119
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1
- Target
  extra/main.cp310-win_amd64.pyd
- Size 1.7MB
- SHA256 79c9e1077d18814c0fa2d455a8fb9620e5c0f47e20280f23dc35e28373adf5d2
- MD5 47a5c00e7a442abdf7add60540604033
- SHA1 a6bf4fcaffc8495327e71226246540eb454d0337
- SHA512 8cfcc53217923fbd7c0a8c7a181f55cede9d5033c63f4d5d8f159b7b34875d6a7c10953fd372143ecc804cf0cecf77891cbc3129d38bd4622ac7da0b1968183c
- SSDEEP 49152:d1SWV4dCeCZTDP1VSrdc1XuhcfwMxoLQCreV:dOdCeCZTDP1VSrkXuufwjreV
- TLSH
  T1A185F843E7B180D9C56BC4386A67AA33E961BC4C82347AE69EC4CE303766F60536DF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  installs.bat
- Size 4KB
- SHA256 1576f924c091b697b767344b7d518b63377e47d9ad4b7df9037160953c503676
- MD5 9062c63653c95a695f6ae190c85b2cf2
- SHA1 21dcdf7d8e59483f3cb3a9292191f1c0238322ab
- SHA512 f50518e0161b17fc3e49d9615a20d72b39d1cdeff0ea30a9feb7996de481ea38b836d07c1f0c8f0a204dc49393de5405af250136b85b2a25660cde64b3a84a49
- SSDEEP 96:Jk1TM0KNImTyK3+pmSypa25UekKnsjcJEIehqX7sFd+jnng3+MkX82LkIwR:Jk9MpImnU3feHJEh8gKnng3nkX8QkIwR
- TLSH
  T1D591840B37544375A77887268F2E15E1BB15829341412DF8BAEE06F81F443E0A9FB696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Command and Scripting Interpreter: PowerShell
  Powershell Invoke Web Request.
  execution
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral3
- Target
  run.bat
- Size 1KB
- SHA256 be85d43a50af84de17d180aacc667cffbcc6666ea385435e220918195da3a475
- MD5 b1690f3ccaaebace247aedbf97d0eb60
- SHA1 56f9b27472aaa31053bad1cd1b5f845ba40101e7
- SHA512 862840f3d10b979845147d1f4dab11608b0d8573c9c1e2c3ed9cc5c66de8779a2afc84217ed74afa990b46a29cd820f11c54863726b4a1a9e814448f5c6ee6ed
- TLSH
  T18131CC1338850576667D82678EFD02A1B79DC0D300843EE8B9DC51989F4C6E16FF5BCA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4