03cd6772429cf599957bc6fe12200974863aba04db2d3bec8305baf13c8e3f37

Sharing

Copy URL Twitter E-mail

General

Target
trapcode-particular.zip
Size 676.6MB
Sample260731-xq5sfseq8s
SHA256 03cd6772429cf599957bc6fe12200974863aba04db2d3bec8305baf13c8e3f37
MD5 869fbafd8c384b3b0c87f967ce51c73a
SHA1 8877e40a4350eb97e33f6419a263c7032376a740
SHA512 387788582ea50d0cd597e20cf9d7f781a2ef3d2021cbcf57379afa2f8ab6de6bcf1579c74e3708c61900d59ced067e5b665809adf3e2243046ed70085c679bc7
SSDEEP 12582912:BMu4peqjDX1WV1LE/QQty0Z/FQ4ypmGoccb3ecwBqQuivmlYsfgLByZuEbwDYuex:i1pFjr+lBl8GmDMv9suBkbwDjlZgse
TLSH
T1167933E0C9ED9835D38F305945889A05ADD676EE93B1DEB0BB05E7C8572E0CA3876703
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  trapcode-particular.zip
- Size 676.6MB
- SHA256 03cd6772429cf599957bc6fe12200974863aba04db2d3bec8305baf13c8e3f37
- MD5 869fbafd8c384b3b0c87f967ce51c73a
- SHA1 8877e40a4350eb97e33f6419a263c7032376a740
- SHA512 387788582ea50d0cd597e20cf9d7f781a2ef3d2021cbcf57379afa2f8ab6de6bcf1579c74e3708c61900d59ced067e5b665809adf3e2243046ed70085c679bc7
- SSDEEP 12582912:BMu4peqjDX1WV1LE/QQty0Z/FQ4ypmGoccb3ecwBqQuivmlYsfgLByZuEbwDYuex:i1pFjr+lBl8GmDMv9suBkbwDjlZgse
- TLSH
  T1167933E0C9ED9835D38F305945889A05ADD676EE93B1DEB0BB05E7C8572E0CA3876703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Red_Giant_Software_License.rtf
- Size 206KB
- SHA256 b02e2fc969bf08b58d7d279a33f92a8e8e3072676c3602805c6afaa95e4217aa
- MD5 d18cdfbd5b528d35164ff99ec37c208c
- SHA1 b310eb717af6333e2e48753e5cb970d1c09dcf8a
- SHA512 ab2f422b6fabc721355b445c7c2290715f1337101ccb9ce4c4463cd833f5da450fdb8a142776d85d9f4fbe61baabeacf3562e60c4253f7f296984eeb9cf0735d
- SSDEEP 768:23eXeSeteAe7e2exe0eve7eAelee2eXeceteSe7/eYeseneie9eQe5Ae5xe52e5j:2abVO3KEUZslYn89ZNpo3OxYMX6
- TLSH
  T1E2242398644347DF7DF6CB023997C285C22CE1D4A6EFEE8F33681D125375A986C4368A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Scripts/bin/rgdeploy.exe
- Size 1.6MB
- SHA256 b1f725274992f0181a6de63c1d0103b43954ba57b113931230c1c5a3e5d18b7f
- MD5 0e0d8173592bbad460f63ac4c986f35a
- SHA1 fdff076a5fd361288e1efe91d51a2d7aabcf12fb
- SHA512 ea4878ff893449aa2b4930a738923d1da5abb2b8dd6192d2c8b00dd501e44d5e160b523aebb32c71bd076c80f771207fb8b0ecd00d18d5ad4500aa894ec4069d
- SSDEEP 24576:nF1+zegQM9gePfPsd//SBXARrpW6yzTD0pn0NhWejlcQCUlvDXwzIYTY9A33Kn7E:nN6geP3w//SBbR0p0TDjlLlvDgsYTAjY
- TLSH
  T119855A1B22A841EDD0ABE17CD9465E42F275744B03B18ADF07A00AA72F576F19F7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Scripts/bin/rguninstaller.exe
- Size 684KB
- SHA256 bf64c30391d657b0d9cba43addf3007b0cf00436c1c3f32566e045c52f045620
- MD5 2236f9c535ea5174010ebab665c315ab
- SHA1 8acfcfc47fbbb77a0724aded95a35c2d903b696e
- SHA512 37c721899e0d3726db837acb3fbb0cbeb9b78680c920d6ce15c36f43d9654928407590423a161097132a148d5c6df77aacd7dcd166d694f7f97d7c12af62b30a
- SSDEEP 12288:h58nJGpXvMGgFwYSAgbVV2hzFKER81ZgGZK6hITGbfRdRejeoCcyzA:h58JGpXPa4K6IGbfRdRe6LC
- TLSH
  T1CAE46B2AB29841FCE1B7D13988865A56E3B1745B13319BCF53F04A6B1F2B6F15E3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Scripts/install.bat
- Size 218B
- SHA256 61c73d46cde7ef92e7f331ac0ad141446dcb45a814507cdf6b42098ce2af4b38
- MD5 3acc0c21af40f28004786216c326b2ff
- SHA1 59d842088ed7b33b85260b7697a9a57ffd9995e2
- SHA512 54eeacd1c987723888b9c9447fab343cec9ed40967e37686aab303434195a963e301059bf992541c9eb5aafef2c5b4125cc225428ab564a9127826c8b1300377
- TLSH
  T18CD0A732FE0ADB605400CF45F0BF801DB3DCF25A1D60E05E37492317B545D4B0806B89
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Trapcode Suite Installer.exe
- Size 2.8MB
- SHA256 d4e717ec49c17d6c4d3e3e98f83d765f8b6c3d230e0964fde5c6872ef61ad1d5
- MD5 8a3ae909646eb53a27265541ae26c306
- SHA1 790c7039345e91b57eab61db0ede470533554080
- SHA512 c509abf8e8f979975bbac4b847000ca73241f935179c4e26ccd803f58dd674bcdb099348d3ef793d410d3858e12ee83a1dfa5f41bf52acfa4e38c25b1aeabad1
- SSDEEP 49152:rNfqZbqg5jcmcigLA1WgMUWNsTsKD/j5PgSW0ssSw0V4BHWlf:+WBtWaSl7By
- TLSH
  T143D5285621A73EDDF4B6D27C9971EA01D13DBCC603668ECF17A078125E372A07E36A84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  packages/com.redgiant.rgbranding.zip
- Size 1.6MB
- SHA256 bcdd3bc9564b29b6f152807c8c7adb5f2a3bd275a635c8d3d4062291cb877f3b
- MD5 1513310f4ced4f22f6ce00ffdf2961a8
- SHA1 13b420e229bca170b854288a5025b9f06260f25e
- SHA512 55b3904aec0a124c53e0c0b48855e7448cd7f1613a2d07703f3630eff76305a96e6b07e6d398f1b945d9a23dd36a3b53b47a7ec4fcd5f5a0cd3eda0b09e56120
- SSDEEP 49152:HSuIydpuPYra/8lgwSZ48BL+iP4DVoozC:yuIydKYeElgp+iP4zC
- TLSH
  T1D475334F4572FF1EAAA05891A9E0542A757B9D3F10DF322ACB670D6CF35871A40128AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  RGBranding_rgmanifest.xml
- Size 1KB
- SHA256 7370b3afdad922cab0660aff5edef92904839d9a31147297ac1c66a41a589f85
- MD5 2014a3bf16e08b8ef117934f3f1a4dee
- SHA1 bea1b3f3b3d54daf0423308fda00a1180b1991bb
- SHA512 0c23aa3b2b5b2cc7edbc30fcbe03afdd9544aaa70bf1e618269b49575d69d76bf0644338573bdd5484488b8904b5068ea6c72b507bdd04cc7dfd21f0bd9b50b5
- TLSH
  T14621AC79F5F982A116F4823F59F4EB6A1EA8232701840DC4B0CD36566F63E10E553F98
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  packages/com.redgiant.rguninstaller.zip
- Size 302KB
- SHA256 d41b43b71a5c4b2aaad6312fa067c5eeb88766e31d4d410e256770f485bd44e8
- MD5 e69291a788c1bf455515a195496465d1
- SHA1 1ba1a92fb71c46ed395d43347924905643c4b9f8
- SHA512 0a9d41a4165cad85c49d2ebcecd55d2ce039a89d9619a46b3a8f6a2f0ec1a78fa57cc916cc2e482183c44cadbc9bbc79bd1fbcb8cdcdaeb61e16170d4c48ad98
- SSDEEP 6144:tFH6cH91YonEXedNcFjlqhZ9+3BGa8NH/fGpuMrJO8Q0jRabo6y:tFHHHYoEOdNc9lqhZ9+RKuLt3QYKo1
- TLSH
  T1646423BBF8A938D8C9805EF574E5B02B19274DEF00891A13FC0530A177F66DAB85F991
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  rguninstaller_rgmanifest.xml
- Size 1KB
- SHA256 2606f84af1049cce6b7b90cdae5eb2312c30097efdc4f250454d5d214e3c66f7
- MD5 9c61435345536260fcef544dc8c3666a
- SHA1 727ffbe326a223e1808c6eafee337ccd0a9efaec
- SHA512 232739d24e15cc39fba58eeae85118b312be03ae4681aed94a082fbdf741928d80b171c8d8ca01900fb20f68223d05b43dfc8aaa6963ebca25ab735c1c0db488
- TLSH
  T12031AB6AE9F882B26E18873F5D67DF765EA422270184038470CE36146F87E909947CA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  packages/com.redgiant.trapcode.3dstroke.zip
- Size 3.7MB
- SHA256 840046bb056f8213d372b2a8eb5b2ab603ae80ec8d87feffcbfa2b1ce9d7da73
- MD5 aa97a9d7a55a139116ee4c68b388bcf2
- SHA1 ca2302f0385ea9e901e184f482e81c226b62737b
- SHA512 a4208204b77c7fff9a1e430eec56f225b75fc86613cece38854a5641d99622a46cbe8dee0c00b0cd2101c965963228b1c513f386a62af9bdd59a13837d1a00b6
- SSDEEP 98304:/2TZyHBStEQ4z2q/wz6K1csGzftTKrKI4LQoVVu+F:/2T4HBdsdz6QGzftTEj40ol
- TLSH
  T18206332F57746095F28CC676C48355833109CF97988E79D38B92E83C0AFEA19E57BD28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  3DStroke_rgmanifest.xml
- Size 2KB
- SHA256 f5191ec90df122edf5ade1f99462da17653ef798f32b2391eec52d24157c818d
- MD5 6c86bae4821f48b6fbb4d969b62848e6
- SHA1 de83738a4ba752c433fd9801134a4517d4e976e1
- SHA512 a4f721c22252d728f8ad61d108773950967565092515e1c593df86f96c08b57c07e456e48068e86a686dd00cb10bbdf7ce3fca7a4bad241bad50e62b112bbcfc
- TLSH
  T1FB51CA1AF5F8E2320874957C6970EAD37EAC10B781840489B0CD36961F4AF0159EBDBD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  presets/Basic Circle.svg
- Size 1KB
- SHA256 d759158970d5d61ef534f2b6c73327d8cb1157ec13323acac30235a44d7179bb
- MD5 57d9e8e4aabc6a005a99179b45f1641c
- SHA1 24817caa7a0dcc4c45087e2ce6d4480db46c7906
- SHA512 96460597feb379dd860c8863c8278461757d9c1228b8e2c3b57881c45be0a5dd2489c7804c1f7353fb584262c306aa161fd460bd22a82a4e5e86008fb733274a
- TLSH
  T10421545C5794F36650D0F76C91B41DE46331B0805CC62DEC820F1FAAD29F9FE6640268
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  packages/com.redgiant.trapcode.TC_tc15_2designerframework.zip
- Size 16.4MB
- SHA256 4a69f3cd601393448fec3e6af1906eee7bcd15debb4a71f597dcb466c0ddb748
- MD5 f6eba26c2d393565ec747a1627b640ea
- SHA1 f0b41f7d4ec263f9e7ca4d9bb91d1464ca083ee5
- SHA512 3372480e95d11d8625be12007be74ae714592b6907ad64c1e3ed05828c871e3410a373da60c38ccb38851be4538586111a6ad8cd318a8e3847c9d5c12cabe01b
- SSDEEP 393216:LakijkeyUTLUbjWr1MMFn3p3zTKKSHLKod/C:urjkeyUc6RMMtp3zTmKohC
- TLSH
  T14107339AEF41CCC66A7C355855D99608FC26B48FB04D2F946BE50C7A6C2F3CE6639C02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  packages/com.redgiant.trapcode.TC_tc17designerframework.zip
- Size 16.5MB
- SHA256 e5ad0f801ea89cf89b4e12822c5b6ce8dfbddc7efe62736fdf571591766fa390
- MD5 4a91574678a5a22b17dce8ed3c732475
- SHA1 e3d2575a1cbc947bb38fcd625212cd432eff5358
- SHA512 f63d663fd147ff8e9a767fed3a05628ab7ac9cb95a60bd28073e2d3b77f093cd330d422a4a9c212d80063ec6cc17bf5d02f2e3600ce402fd6445b6510eedb017
- SSDEEP 393216:EakijkeyUTLUbjWr16MFn3gFOlCay8RcKgG0ULn:jrjkeyUc6R6MtgFOlCaNRgGzr
- TLSH
  T163073347EF52DC8B77693A2801999A08FC76A80FF44D2F915B920C766D2F3CE7A65C01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  packages/com.redgiant.trapcode.echospace.zip
- Size 182KB
- SHA256 8a388b384697b74d47d528da0f8674c2c6b973b40c7042e30cfde9ef2dcf5e64
- MD5 56a8223b790e9eb3f191c8176524d316
- SHA1 1c372b92092dd81403dbbc5ad130d0f32f2d602b
- SHA512 ff1c637e2a9c49e0f49b2d7d112f8911d7a4f1ed8f27dd6371589835a7e966aa70565aedeeb0af4233404e61927069ff44bea1822fae0d928a55b1ad44ef78f2
- SSDEEP 3072:MRqydcnV7IqbzXGrefALk1GyBYQ/PDwE3ykQ1Auqq/ImCkn+UV4/oRb48ylr:MeWSWaALk1GyBYQ/PDv3yr1AZq/ImvVe
- TLSH
  T13704129FFC7DC552D703D6AE845F4567FC2A19CCC09A4AE1C83B68B03B62A097E851B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32