9d815a0ff5b883063f096b61a1db650304d55eb385993c9784ffab3bc1377543

Sharing

Copy URL Twitter E-mail

General

Target
Topaz Video AI v3.0.5-20230101T131327Z-001.zip
Size 346.6MB
Sample260729-p3xzdavcph
SHA256 9d815a0ff5b883063f096b61a1db650304d55eb385993c9784ffab3bc1377543
MD5 bd5499905025c89e463b33c5ac15cead
SHA1 307466d65762d1938dc1eea061472687fba53df1
SHA512 b5765e30deea4a07a402502fe27f555f0386fe98515534189a75f7a2fbc3288af11844bae0ed1d301e94b6d7a521668685534b24d4e24568cb15548dc8cb1f0c
SSDEEP 6291456:dfzmulXjTnOSUOj5m2jfwHrz1NvVGhdI7pR6vsmGGybH6XTUJhT2xN4ahG0:d7Bjwq51jfwLhDsI7p2sFGyJh8NlG0
TLSH
T1030933534DEA2B4D76099A23E11971960BB07F173F90798E7A1317DA8B93BC352F8807
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  login.exe
- Size 4KB
- SHA256 f7d277f2fd97089eab7e05fb7691548a3d3d22e20aa66a6a27a92df17b44ba06
- MD5 17ecf1d0a235427c5481879c00c79b7e
- SHA1 affad21cdbcbe0b49220109ceabcad9db2a3cc9a
- SHA512 f02d40c671232c89a0166f0252d2cca082772fb3b494c100871084001c2e1960e0d66da783ef548c3747f5f204741e288f9018bdda1579b5a5a81c2db7c02bc8
- TLSH
  T158815F10A3EC8776EA730732AC7367514739FB51DCB68BAE288423072D176540E63F61
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  login.exe.BAK
- Size 235KB
- SHA256 d7b212c484416bae3c64ab9006ac08e92578aff72623d0cb105233ad9c52c598
- MD5 8f38978552dfb1ee88fac78988633540
- SHA1 57b81d55bacd423ef46a0b1f5ef96eafe891c3f8
- SHA512 9c6c8c6188f4677616bed5d5e8ab251c3e71140079b053a695fd50f430c568b58fdc0909febd76021ec621bca0594cd339b9a3b9f47af3e1dc2440a62758de1e
- SSDEEP 6144:Uf4v2DYGLeWXp4+nDs3aNlws7vfzHIjPHUdbWiy3mYB:Uf4v2cb+nDs3aNlb7sIdbu3mYB
- TLSH
  T185345B1B325908FAE97BD17C8A4B9A43F3B274560364DBDF13A1432A0F57AE56E3D210
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  videoai.dll
- Size 474KB
- SHA256 72bc6dff06c6b8f76b0a872a54d69e49c61b830ad6a25a81ffa53c7d8e166d86
- MD5 7d794c121e9656e23249013e73d6c786
- SHA1 bb0f1cd86ee6122222f9c7a49de62a3278b9f1b6
- SHA512 67bfe87a6315818e85edbbe7c0930907eeea2e81db8d86e371eaff7bd55f8bc2cb798aca8c95c88aea65263b1634cac02cdcc0d486b6d4d75fcdef53e6397fed
- SSDEEP 12288:nHnVPbX2lceq96+KbQPUCug+bzhzfmalStKLdCq:nHnVPbXDTKbQPUFFfmwS8LdCq
- TLSH
  T1D2A45C2B62980179E077D17CCB579A03E377345903219AEF13A1DA362E17BE5AE3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  videoai.dll.BAK
- Size 474KB
- SHA256 2fb1ca920cc3c73ece6776a3aaf10626d422b8b84092f62e771f906301762023
- MD5 22a0e56cc30079a7738d0566bea9c1ec
- SHA1 5005076c350f97759e4ab3423318dd5399e6d32c
- SHA512 4be548e50a5517d1f24e78bd05bc80204d28def4375decf50304c250ca49a70b8a5bd3cd81edb305928ca956fd00bdcbe3d9b21aa9bf883ec6e6752f0915f7ee
- SSDEEP 12288:nHnVPbX2lceq96+5bQPUCug+bzhzfmalStKLdCq:nHnVPbXDT5bQPUFFfmwS8LdCq
- TLSH
  T1BCA45C2B62980179E077D17CCB579A03E377345903219AEF13A1DA362E17BE5AE3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Topaz Video AI v3.0.5/Crack Fix/login.exe
- Size 4KB
- SHA256 f7d277f2fd97089eab7e05fb7691548a3d3d22e20aa66a6a27a92df17b44ba06
- MD5 17ecf1d0a235427c5481879c00c79b7e
- SHA1 affad21cdbcbe0b49220109ceabcad9db2a3cc9a
- SHA512 f02d40c671232c89a0166f0252d2cca082772fb3b494c100871084001c2e1960e0d66da783ef548c3747f5f204741e288f9018bdda1579b5a5a81c2db7c02bc8
- TLSH
  T158815F10A3EC8776EA730732AC7367514739FB51DCB68BAE288423072D176540E63F61
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Topaz Video AI v3.0.5/Crack Fix/login.exe.BAK
- Size 235KB
- SHA256 d7b212c484416bae3c64ab9006ac08e92578aff72623d0cb105233ad9c52c598
- MD5 8f38978552dfb1ee88fac78988633540
- SHA1 57b81d55bacd423ef46a0b1f5ef96eafe891c3f8
- SHA512 9c6c8c6188f4677616bed5d5e8ab251c3e71140079b053a695fd50f430c568b58fdc0909febd76021ec621bca0594cd339b9a3b9f47af3e1dc2440a62758de1e
- SSDEEP 6144:Uf4v2DYGLeWXp4+nDs3aNlws7vfzHIjPHUdbWiy3mYB:Uf4v2cb+nDs3aNlb7sIdbu3mYB
- TLSH
  T185345B1B325908FAE97BD17C8A4B9A43F3B274560364DBDF13A1432A0F57AE56E3D210
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Topaz Video AI v3.0.5/Crack Fix/videoai.dll
- Size 474KB
- SHA256 72bc6dff06c6b8f76b0a872a54d69e49c61b830ad6a25a81ffa53c7d8e166d86
- MD5 7d794c121e9656e23249013e73d6c786
- SHA1 bb0f1cd86ee6122222f9c7a49de62a3278b9f1b6
- SHA512 67bfe87a6315818e85edbbe7c0930907eeea2e81db8d86e371eaff7bd55f8bc2cb798aca8c95c88aea65263b1634cac02cdcc0d486b6d4d75fcdef53e6397fed
- SSDEEP 12288:nHnVPbX2lceq96+KbQPUCug+bzhzfmalStKLdCq:nHnVPbXDTKbQPUFFfmwS8LdCq
- TLSH
  T1D2A45C2B62980179E077D17CCB579A03E377345903219AEF13A1DA362E17BE5AE3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Topaz Video AI v3.0.5/Crack Fix/videoai.dll.BAK
- Size 474KB
- SHA256 2fb1ca920cc3c73ece6776a3aaf10626d422b8b84092f62e771f906301762023
- MD5 22a0e56cc30079a7738d0566bea9c1ec
- SHA1 5005076c350f97759e4ab3423318dd5399e6d32c
- SHA512 4be548e50a5517d1f24e78bd05bc80204d28def4375decf50304c250ca49a70b8a5bd3cd81edb305928ca956fd00bdcbe3d9b21aa9bf883ec6e6752f0915f7ee
- SSDEEP 12288:nHnVPbX2lceq96+5bQPUCug+bzhzfmalStKLdCq:nHnVPbXDT5bQPUFFfmwS8LdCq
- TLSH
  T1BCA45C2B62980179E077D17CCB579A03E377345903219AEF13A1DA362E17BE5AE3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Topaz Video AI v3.0.5/Setup/TopazVideoAI-3.0.5.msi
- Size 348.5MB
- SHA256 e70e81b152bc8958f13030e7f48b3acfbf26705fd962c9e2d8a04a010e4e4920
- MD5 91723a483263baeeceb79252f80ec954
- SHA1 3c017b5a6f1102417db3cc103fe886a617eca825
- SHA512 10b730bedf88425dd9a72cc86699bd29d0aa946833beadd29d614d2a277e1d11feee73f6ec51579d80434971ae7cd5300a6e49a44114704c15bcb6b4692bbd9f
- SSDEEP 6291456:r3wKGFJ+USUk8JYUKHsS1VWRz5Qc1poCzFHsCPKp8vUHBrIv3XdAR0wDXN91QTrp:zdE1XJYV1VWR9j1hiCPK4UhrT0wZ9vY
- TLSH
  T1200933533FED2609E22DC136A12E96099EB03D593B405ACF66A176EE1F73BD1167C803
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Badlisted process makes network request

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18