General
- Target NCH VideoPad Pro 18.42 (x64) Beta [FileCR].zip
- Size 13.6MB
- Sample260727-rb96qstfrb
- SHA256 2d00e91546e872f4d08f84dc1c07e634e8bb50e0815eafdb9038e13b8ed2c58d
- MD5 a1386a1ccf9a6048565a54fc66755dec
- SHA1 7402768cda58eb6cb5aba3ade7fc6d93a22fa092
- SHA512 6ee68f6e2e8349d92f729844ac2195ae0195c3924383cd1ab54894fed48a60e9669999de568da8787071660f0ebf1b78f972291917efe70d23377629cf57f669
- SSDEEP 196608:h47U33qrSR15RgdULmId09FjNCiYQh7TeTv0zFFGJlPmBsfHjI4je9+IkQ8D:h4SrR2dbIKdQiVh3eTvmFw7Asfc1sD
- TLSH T141E633A6A3609036732A873B6FED3D6BE94AA9C2E0127DD63721D327C1113C45E78D5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BTCR/Keygen.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
BTCR/Keygen.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
BTCR/btcr-happy5thbirthdaytro-ttemper_2025.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
BTCR/btcr-happy5thbirthdaytro-ttemper_2025.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
NCH VideoPad Pro 18.42 (x64) Beta/videopadsetup64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
NCH VideoPad Pro 18.42 (x64) Beta/videopadsetup64.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target BTCR/Keygen.exe
- Size 4.6MB
- SHA256 102ac16b7d77fe6985a73eb081cfb66c7d2aee34186657c1e4514bd700f3fe73
- MD5 59476b4fdde811ce24cfb676ffcb095f
- SHA1 f5550ba115596ca65a296725788f3155c27e4609
- SHA512 b8239ae2c8731372748065ef3f01797897939ac3616cc5a6804d5d07fd33ca0f272fd77e1b3a127a19e1c51d6fb2952b5d44b648a41793db25ddc17cbdab60ef
- SSDEEP 49152:YN3eh3n0r2m2eMYUaqGtBwqQ5rIXQh4TqeAszLOBrfLXSC/I0ijhEx/7OkGmRyV9:OD+enzmfmCCkGB0zuT7q+
- TLSH T1E8268DC1EAD381F7DA472871302DB33FDB326907852CDAA7E7E49D01D9B672068DA119
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target BTCR/btcr-happy5thbirthdaytro-ttemper_2025.exe
- Size 1.7MB
- SHA256 6c6c1e23afec51b140f89aafd50f09003ec87ad1ceace8dca02fd33e260e9099
- MD5 d47bd1ee129d3183e949c8ae92eeed8c
- SHA1 fab6d2e5f6fd80d215527dd74ce3aa19a933e722
- SHA512 3753d65d81825e98d43af75f427c3a24ea8ab87a9657a904478e705d2d7b6b01c90d954b51511b688bce796d72155540007c522e2e35e00fea265de2c68ab3ff
- SSDEEP 49152:6egEt5s5tRNEPBOQ1fSgN1Ub4fTQj58IpU6Pm9Wni1:7nsjLqOQh7jUbExu+cnC
- TLSH T15685333EC9951152CEEBCA375D5DB950317184335D8630BAAE0B9B449B4EE2B2ECF0D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target NCH VideoPad Pro 18.42 (x64) Beta/videopadsetup64.exe
- Size 8.5MB
- SHA256 4d555570a75b2379a173884306b58636668b76051051089f11075ad85a6dd822
- MD5 55709383d5060976433b89009d0a0fa7
- SHA1 7266eea9dddc83beb0688d2f43819232e1845a26
- SHA512 dbf03289fcedd7c092a21f1f7bdfaf2209992f1c35c365c99f1ce3f144e9bae8e95b6edbba5c0ab7f985246e023f171312a7d2736b591f6ff61ec083a9c1d776
- SSDEEP 196608:UJgk+ZcAPVKYvsjfdlVuzrGasCmyewxkqjaUXd4aD0IDZzS:UJg7ZcA9KYUzd+XGasBXwxkuaUXnoKZ+
- TLSH T14F96332013D8146CEDFF0939466566F876F2B021E5F970AA798718D62CAD3866C3C73B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1