3e0136d222b0572cff41ab5d6fe0f36eba7e7532b7371d77f9a9fa0e32d4a89b

Sharing

Copy URL Twitter E-mail

General

Target
DeltaCrack 1.21.4.rar
Size 942KB
Sample260730-sv8bxsbf62
SHA256 3e0136d222b0572cff41ab5d6fe0f36eba7e7532b7371d77f9a9fa0e32d4a89b
MD5 adf1601b3c47c028cb39480b2df6b30e
SHA1 7f59c6826eb24951bd3eb8c7fccecdbe0984cebf
SHA512 57bad29da30405248fd36635cd4459a69000948b2cb9e4bd5ba5aa6f5f9ef8304fad4c671740828338abbee752d580defe97e0f154f1f79ff0190b4a069f7cd8
SSDEEP 24576:l9isvVP+zjXIU1W8kMWaTkG2oCgW0hDRmFq7v:yu5wkDHaTlCIhQFQv
TLSH
T114253352F39B71CB546AA3071C8D568275AFBB3BEB38BC1CA6C64EB05011C0770576EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  DeltaCrack 1.21.4.rar
- Size 942KB
- SHA256 3e0136d222b0572cff41ab5d6fe0f36eba7e7532b7371d77f9a9fa0e32d4a89b
- MD5 adf1601b3c47c028cb39480b2df6b30e
- SHA1 7f59c6826eb24951bd3eb8c7fccecdbe0984cebf
- SHA512 57bad29da30405248fd36635cd4459a69000948b2cb9e4bd5ba5aa6f5f9ef8304fad4c671740828338abbee752d580defe97e0f154f1f79ff0190b4a069f7cd8
- SSDEEP 24576:l9isvVP+zjXIU1W8kMWaTkG2oCgW0hDRmFq7v:yu5wkDHaTlCIhQFQv
- TLSH
  T114253352F39B71CB546AA3071C8D568275AFBB3BEB38BC1CA6C64EB05011C0770576EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  DeltaCrack 1.21.4/DeltaCrack 1.21.4.exe
- Size 785KB
- SHA256 eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1
- MD5 bca6478b230b6920fe79b97a3066e835
- SHA1 f61e771c53c63f35f5a2b416c260c74d29329adf
- SHA512 463f16b737768ac2bb285efc09e69781132e95c234e2eab37eb98be797606e45d1dbb38df3a6ef55144f4f7e1b08a213768e915b7d967b8c90bd03b216a07ff7
- SSDEEP 12288:/AstffLBk3Q45wU0/St0Z4j9lAx5ylTxEIyTXnxYV:4s9uQ45oyj9lE5yFuTXmV
- TLSH
  T1CB058E6A66AC01F8E0B7D17989964907F7B27845137197CF43A087AB2F276E05F7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
behavioral3 behavioral4
- Target
  DeltaCrack 1.21.4/gup.xml
- Size 4KB
- SHA256 92717951aae89e960b142cef3d273f104051896a3d527a78ca4a88c22b5216a5
- MD5 abde55a0b1cb4a904e622c02f559dcd1
- SHA1 1662f8445a000bbf7c61c40e39266658f169bf13
- SHA512 8fe75fb468f87be1153a6a0d70c0583a355f355bfe988027c88d154b500e97f2c5241d9557ebb981067205e2f23ad07b6a49c669cd3e94eaa728201173b235a0
- SSDEEP 96:rrxgFDl+72Y+WbPRkrm1+U4YeJS2kG6QrABYUCJ8PYPwJrkFI:rVgFhunzbpka1+UNQo2sBCPwJrkFI
- TLSH
  T19491944B57DCC3770C3112A178AE9191D33409F932B5500138A8809BA36ADA6BBBF7E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  DeltaCrack 1.21.4/libcurl.dll
- Size 4.3MB
- SHA256 01806dae2e38aa051661e5d28812c73bd7400d099b77f0b48c6dc21842db5c8b
- MD5 3b66977e20aa5765c7fbf3fd0e846493
- SHA1 06476f4051439410c9eee751f77730ad61353417
- SHA512 baf0fc6ba61de6ba35efc2a82c67d17bfc30b0426f3522dc9f264f1d16f0883aa65439838599663458b1b71e020292b3c046bcaf7ac59611fcc7facf9257ed3d
- SSDEEP 24576:6whGkogzqcbQgTcOjw0T9Cl8sx/Y3nOjrpKpB8IbFltt69l5wk4QsouTyLFXnqCB:hF48Mc5qOzZe/L9lUCVQxUow7kO
- TLSH
  T1552638D5564D192CF014BA3C895BE05BA7F1BF0E2960DEFB65C2DCB3682F940B663A10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

Loads dropped DLL

Command and Scripting Interpreter: PowerShell

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8