ee893ce09a34246336a4a2404b11ec7ef342fd197e26f7e5a5ed67a2f6320d3f

Sharing

Copy URL Twitter E-mail

General

Target
fjes50.zip
Size 67.2MB
Sample260721-b7a4hsdv91
SHA256 ee893ce09a34246336a4a2404b11ec7ef342fd197e26f7e5a5ed67a2f6320d3f
MD5 65e2233a107994ed9bc42bd5bd2b28eb
SHA1 b53c4b641dfb3406fc0f969563aed62995bd6c0c
SHA512 79d14f8b0c89a3702dce400ea7db27771016ee34a056bd67a6f513e405c5be69234f73823d1a81a838ae294a8c331b61d7326b8549017cefc5f4b5430133f991
SSDEEP 1572864:JsSEGv71BCUi2j+T/CP5Rui3cGTrjYE70X4Y4JfFTjGe9A4z:WGjXvj+Tyui3cGrYO2hwf9GLc
TLSH
T181F733B734FE40C0642D0A6A2701F72AFA0B9D72E75D269D857918BF582B25D9D00FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution upx

Malware Config

Targets

- Target
  fjes50.zip
- Size 67.2MB
- SHA256 ee893ce09a34246336a4a2404b11ec7ef342fd197e26f7e5a5ed67a2f6320d3f
- MD5 65e2233a107994ed9bc42bd5bd2b28eb
- SHA1 b53c4b641dfb3406fc0f969563aed62995bd6c0c
- SHA512 79d14f8b0c89a3702dce400ea7db27771016ee34a056bd67a6f513e405c5be69234f73823d1a81a838ae294a8c331b61d7326b8549017cefc5f4b5430133f991
- SSDEEP 1572864:JsSEGv71BCUi2j+T/CP5Rui3cGTrjYE70X4Y4JfFTjGe9A4z:WGjXvj+Tyui3cGrYO2hwf9GLc
- TLSH
  T181F733B734FE40C0642D0A6A2701F72AFA0B9D72E75D269D857918BF582B25D9D00FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Peki AI/DirectML.dll
- Size 17.7MB
- SHA256 9c9e6d822561c6c41b90e6994b3e8857cf1d66dbfb1e0c4c799c7c89b4e92da1
- MD5 abc458767c27ab4691e8910714d47ed6
- SHA1 a9cdf72540b949520045ef11d7b44879e2181c79
- SHA512 97af8aef5fbd25e87012351d93129e8a0a64a96569c4f8f458d5389f1ffc49239f6a14d9bc99f8b0a41e915ef12ee1fd781e391fae67f9774c08311b49005131
- SSDEEP 196608:/AZfeTLx3Ohq0Ytzn7OBdzIkRnyrQAH5+sM3TKC:K80hMtz7oZIkByrQo5QTH
- TLSH
  T18A17D01A6F6415A6C17BD23D9A534A43E3B6748A43706AE706F80D311F97BE05B3F382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Peki AI/Game bar.exe
- Size 35.6MB
- SHA256 bc352c55e9a9c77fb07d0f31d3a8b976b02238e42e3656ba9a1540c60ecd7260
- MD5 d6677a034e645ac333fa5b75459a89a6
- SHA1 e795ca88f632888c05154eef40d1049f8b6f6775
- SHA512 7f9a3770f87b67e62e50bc40c36a294ea8406810d249d9de0d3910c3218e69a3eff73153d81f580b64ba80ef3173d7375cb72ce7137b545f1e045959e50a3e69
- SSDEEP 786432:52zjo/g3WkviewY8n50nhAWgvV+cQgilPKz0qDZwL:ZRkuY8nghDgvVXilPKAG
- TLSH
  T1EF87239369C457F4C1D34608528F128F52C19876DBBE6E1C2AC26C035E61FE7398AFA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

upx
- Suspicious use of NtSetInformationThreadHideFromDebugger
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3
- Target
  Peki AI/fort.usr
- Size 135B
- SHA256 1264371a382dba471181ff91daf0e7434ea27048081daf06e24954a61996adde
- MD5 941ecbc9d626cb279ad4d53c9fa01c0d
- SHA1 2584bb89b4c79716446536f0a4099c25c0fb4a42
- SHA512 d92be22f9ce75b671113bd559613db64dd132c675ca8531b5929976b75d537d8e27309bc4fba46a73aab878344ece69c2e9155e227dfbcbb925d6729fba6badd
- TLSH
  T1E6C01207E04185B9FD305F3484E0C4AC21F5BCCCE7060167B8802B071C3CB031911160
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  Peki AI/graphics-hook64.dll
- Size 296KB
- SHA256 f89ade59480de0d55fcc100495d78e8e491bed469fab4dbd3d430837b58b27a5
- MD5 b5581dc1b439237c86dc7366f4c95013
- SHA1 def966a286f93d59c0066907cc0b630a586f2b57
- SHA512 dcb8a1c93ebffbf6d4bb6011e25f135ddf2ad559a8ad61dcb6f7a0e9805cebde7fdf4403eb6b728a80d92734401815c092306ab26c66c79599dd726fde728ca8
- SSDEEP 6144:aR+LzlAt6iVARH8Xa0uXwAMhkNYrtprwH+T:aR+Lz25Vw8X9TAMhkNYrtprwS
- TLSH
  T190546B5AB7A50CB6E8778279C4D39216FBF138654370C79B032181999F233E8AD3EB45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Peki AI/hidapi.dll
- Size 163KB
- SHA256 d4c05ba2138cb5259a7f796464b5eaa63b9f8f67bb5cb003f96989244ee01583
- MD5 50b52f3febe63c7f23b7a6cfece08d81
- SHA1 c4c4c7ed1da092335c7b162f701fb401ef06cc94
- SHA512 9f9e18b4cbe5ad4209575be81a26d8a7e44bfb23e80d5beeb01ec43644c113433f1134493558a298bc1d7628910bae6c0553529909b51fd9a6dbb9035777af3e
- SSDEEP 3072:y7lxM/isPEgC9hqBf87V6f5nJK/ne5GIhlN:8MIRTkfZlHlN
- TLSH
  T1F2F35B5773E500BBE9778238C9A71946E777B80117209BDF0390427AAF277D19D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Peki AI/inject-helper64.exe
- Size 121KB
- SHA256 b5c975e1025d225955efc1e4f28445d8caf8a6527df47fdc28d358aff0227ad6
- MD5 999099ba81065fe12ca09570f2c5679c
- SHA1 86c3a498223df0a202b8e3bb7444f8f90c01b9cd
- SHA512 ae205079fd06df72436879de999f131b2a2cb49e192858db6745be6df9e6b93bcdd9ab13080c91eac21d71d5a269efabf3b7d2752f8fc2c827e06206e76055df
- SSDEEP 1536:25lA3gsRhUEfXAIIgK1oXtZ+rNS7XSF7PsBQQLvapEB5cmsWW8dt9dlxU5zmiTU:0A3gi4BSdcrNSbo7PGzLipQ5b9DU5zPQ
- TLSH
  T109C37C5B73E130F8E5B68638C8911A05E776B47607A09FAF03E482565F237D18E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Peki AI/onnxruntime.dll
- Size 16.4MB
- SHA256 f5131591edac6b0a8090d0e329040a49319d7a689cb5b465235fbf7030fa8027
- MD5 d8ac57622ad4ddcf862cf9c3771b06c4
- SHA1 7dc228ecb5ebc1c75630c3fdaf766635d4660f1e
- SHA512 10083a06dc102e671c3342fbfb076d70f53e885e2ac192a7c2da3863f694a6366156bbedea8aa45a58a2a183381cea6c2358693f72a751dabf4f9fe307155794
- SSDEEP 98304:GbIKR+DnS96WQXVGgp4WKvUs8jRKcuwTqQesMDsmH+RxAOjbFwDcFRRULg8Bn:GbIKsLWQX8g6WQact6dRMwLxxUg8B
- TLSH
  T189077D26769902ECD1BFD17C8A4B9903FBB1744903756AEB02E141A61F5B7E09E3FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Peki AI/onnxruntime_providers_shared.dll
- Size 21KB
- SHA256 3b27e1417d12b73a6a34d80414c083e359e092d2f0ce572d7e67be8cdbe9e825
- MD5 89f6a490dacbd3bb5222fabca8cf890a
- SHA1 2a3ebd8758bdab451461a94e4ec4d58e0b79a7a1
- SHA512 28a51a274eb51398fc68f7ec75f87443d6785c4cbeeaa77ffefa36ae67370ff72ae9c827cd9b2bc0777892cb05ae2ea6db3e0abde73cc2edc2460ead6cdbe07a
- SSDEEP 384:1Dbe/6cG6bCp5rWD5WT1+aHRN7Lfo7R9zx:xqyb6G3EI+2L89z
- TLSH
  T18BA25D99EE684086EC5649708576DE07B83D77831711B39B03A0E5592FA33C2FB35359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Peki AI/peki.mdl
- Size 23.4MB
- SHA256 3edb4542c70ccc2999e32afe11240206513ceeb143e71bfd44c76f5ff15e6978
- MD5 8db55966a028b40dc349151fb8ae1374
- SHA1 a7cf07eef8b21ea6fc42fc457ead1966b4417f05
- SHA512 a7b08b82eec284b7e5f3a94677800a86abc68012db598dcc38feabb5863f42143b14fb21099090c9f4fa4da5f04c6e5f5cb0c5fc31205a0b6c5731adadfda65b
- SSDEEP 393216:cSpBz3SDr9oB7diaMj33eWF6dYVh1yWLl8ehmNPQ:lTz0W7diHreW6YMweehmO
- TLSH
  T1C34733916B0FB70C0BAC5EDFD9ACC199A356C71C8EE44970C4603A531E67AD8E0C9BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  Peki AI/wtf.json
- Size 14B
- SHA256 5a93914fe720a4714b91cae16f4f0ec76df425707bf49019d4ad2a52782ef7c4
- MD5 9f468347e7e1453019268ccb24136144
- SHA1 13ad34680acb389d98a8da53c69fc82e2c9649ad
- SHA512 153cbf2058c757c116ec14d34d99b0e3af7b959365c69de280fe61f6612fa6a46c96e6beffc82057f6fe6e0efec71cad2bd59671a3eb4ab671490db2132f07f7
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11