d0f81a5e0f3b0979c7c2345b51f49b530b3c75cfa3ffaead1d68fbcf4a040da4

General

Target
329_mem-4.rar
Size 2.2MB
Sample260719-ph937sdw61
SHA256 d0f81a5e0f3b0979c7c2345b51f49b530b3c75cfa3ffaead1d68fbcf4a040da4
MD5 58080555cabd2c18ad8cc8b26813a7bc
SHA1 2c7d20f7642841cb5581a5791722c99f0aeca92f
SHA512 7a0d5fde268ffa3aaa0137031302318e1a9676fba4b61e9958cde7a3ac80639298fdae20d46c365f4a8ccec9b60ed6a078e18929edf506d0907106747abe9377
SSDEEP 49152:cjU3UJgV2TwNYKcByRZHIfTJzUSQ9t8kyY3qkiIR2N3V+fwGSPWAY3kOr:NygV2TUDcByRtaTJz7QECadjgYGSu6Or
TLSH
T1C0B533C9518FC7D62D81858DDEA585D2D55FB843D394F3F92A8A343E8898FB016BEB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  mem-4/Mem_4/Crack/patch.exe
- Size 31KB
- SHA256 049ba406efdf784f1232cde583d236e6a835a6eb2a8dc2893f203937f65640a4
- MD5 ae35c85d8a45e55e1fc8b54cd1902868
- SHA1 2c4b95595acd9be935a62d5cbf5f4596978ac4b3
- SHA512 40a5ab1ddeb5a8274fa86cb5521dc4b39e1136220da014aaf967a44870ad27533fc557c03925c540767a072394252e078c5dcfc7b97a73e16077a21ce0fe2416
- SSDEEP 768:HNiMIhP5C7uBWtbYlUfPBRgp9mPoIp7ivHFLg1XkXq:HNCMb/L2swQivlEtkXq
- TLSH
  T18EE2D035AB5AEDC9C4C5A03249DAD3680124FEA32D5DE98716E03F7B1C75ED0AA3210F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  mem-4/Mem_4/Memturbo - PC Optimizer v4- русик.exe
- Size 571KB
- SHA256 acb683a87d885e9ce904fb47bfbb3d954ad991b0c25e9b26a668e4d0703681bc
- MD5 02085842f33d10761bb64e43774a8290
- SHA1 ec186e6b759a9e2b90ebbefc95ea98538f79ec19
- SHA512 82431211621c586aac81277a532646c9130028a441a705df9d4a7103f85e66887be4b23a7f09a3f2a062ae048b13eb33de0903a27018a26b241c51ec92eb1057
- SSDEEP 12288:dRigpq1zsuNQdaYz+XetAhNerdLVDMSEpUIdR4YbScOJcBLm92es:iquC3zxZ/MNXQYTOJc8fs
- TLSH
  T19EC42311E7103DCEF97EC3BE5D018F42B9D4697C07A57B582CE365122E05931EBA2CA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  mem-4/Mem_4/mt4.exe
- Size 1.6MB
- SHA256 20a05b90dee266beac22cbb4b948467bd4539a6b4100e200e1eeee0a56c1f7a8
- MD5 b30a7c5a267d7527e431dfadfed8c4eb
- SHA1 8ae226020976e5aebc397ad406078ffb1daa61d5
- SHA512 0e12cafbc661b1dfc97f9b09ffc8ad18184fa10e6f186dd97dc2f7c79b752fe2f1ce9e9da4ac30bf7cc7b49e2a04e084b8ab0ee9ec78c4b9a37b6f90d99ee80f
- SSDEEP 49152:56deFdFbSnNHrrfo0UA7ppFUgeLslEJvzpUpj4AJCXrGZGC:MdeFbbSnNHfJr7G/IGvqErGA
- TLSH
  T1E67533050B3158B4D9F862B69E7AC264833536627C7C32ACB1D889DE9F772F5CC086D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6