b354edba6b2187e1424fa7196643e10f3f1f4464bd0365c0b87f94860fc47c36

General

Target
topaz_video_enhance_ai_2.6.4_nm.zip
Size 140.5MB
Sample260727-a3zewagg46
SHA256 b354edba6b2187e1424fa7196643e10f3f1f4464bd0365c0b87f94860fc47c36
MD5 c9fe8416a69bf07b47658ef251024eb5
SHA1 6050679ea3d2328efc23d68e9fe6ad5d77b86c4d
SHA512 d6f15157a9cc1b71c99ec0e559509820064c4ca0700644dc0741641ad98c337ea1a96691a5049de366f2dccaa800133bbc5117836f57c2d53a9285ba43259e7f
SSDEEP 3145728:mWtsb2CD1ET2ENsoSmuFcEPltodgOk8t2PFPyUdkkIatf4R0mxQGirfc:CJDRqetkPk849yUGkJ4R0mxQGirfc
TLSH
T1B36833D6E6EC7FB5D515668395228635F0BEC2E7C47081FA66A7428377CE0007288FE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Topaz Video Enhance AI 2.6.4.exe
- Size 140.5MB
- SHA256 ec88d6b35042958ff1a102b5582c6762cb7d1b97af3561a76610651cc1d906e3
- MD5 013f0cf25e1a7b05aef07f95d2e1e848
- SHA1 afac3333c00a0676025884d289b45b955e4c3aa3
- SHA512 689cb43bd4127ac55f2b79fa4af9d1af867ffd314bc82571a89f5002f3bdfed379d6b3b57b50918857f00743b355f4a0097af7cd315f6f3938c0cd56e738f123
- SSDEEP 3145728:QgbAT8QlX6Dwk1emKOIVGiZDTYvgyWf+oQrQSn6EM9y9/8isbqQyhli:MJlPGIT0LWfNoQSn6tQ/8isbqQyhli
- TLSH
  T1B26833D6E5EC7FB5D51016B395238635B5AEC2E7C4B081FA22AB429777CE0007188FE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  _Silent Install.cmd
- Size 1KB
- SHA256 25106407faa0155e575355baf3b089096557a6b1598c55950ca0b11c603cb788
- MD5 cc62d89c543576a873ecef7bf61beed8
- SHA1 a303bdc60f7c6fce230d0698cb479c0a68961c44
- SHA512 1daf825720525551e3007b6f8eff90e0e37aae0c3e42801ecbde5eefb9692f3a8300ddad56ca7f97705b2ac97710501087e7a3948f7fd22a40f56a3e98cdd0c6
- TLSH
  T1FA115A373671E58C93B40FC42D748526742522DB6DB60D54B4BF413B83A16D838ADF9B
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution installer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral3 behavioral4
- Target
  _Unpack Portable.cmd
- Size 1KB
- SHA256 beeb0d20692c090974df0cc497f2196d6cb8a03b42136c322588a55d1f3dd050
- MD5 2d44b55971d4a9ed9c6450eb50705b22
- SHA1 62da63183f1dd0548e69a01bf69f76d5bb1da3ea
- SHA512 d64623a76f6aa9ffcbccf425f94ab48788d2b835facaa8b044515e245274f706405b5446b754acb6f7822fac47fa3a06091cc64598f843008bea3f0026a3ea19
- TLSH
  T1D91148273671E54C93B40F8429748526B46122DB6DB60D50B07F413B83A16D9386DB9B
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution installer
- Executes dropped EXE
- Loads dropped DLL
behavioral5 behavioral6