f57e6480805803ab5ee2c836565d5cfdd8191798a7c2adaf91d3284f068885a2

General

Target
AOM_Factory_Bundle_v1.18.3.zip
Size 177.5MB
Sample260802-wkyxaadp2v
SHA256 f57e6480805803ab5ee2c836565d5cfdd8191798a7c2adaf91d3284f068885a2
MD5 09074a067f57bd3afbd35c674e85015a
SHA1 329f0dc15ebb8e120f733ad3c85b6f00a4b40db4
SHA512 8a74ff519805f7bde3fbbbe127d4c3e04669d26894bdafa2b4de6ed75c3b97fdcc144694f6041dd97d1e7f4cab3b4924585985558bf82b97034dcd2d7f209be3
SSDEEP 3145728:apX4YVHODJ9qFfaIWfAoH+NMyu9CqT/zDemoGk2nOyxxEzGVYAErmoER+0OYOwJH:at5ODGtGYU+G3T/zDhgAbxgGVYAErmhf
TLSH
T13C9833AA72E3A98434EF0BB9E803A517DDFC5DE55801CCCA4C5B6355F0E00A5A11B7BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  AOM_Factory_Bundle_v1.18.3.zip
- Size 177.5MB
- SHA256 f57e6480805803ab5ee2c836565d5cfdd8191798a7c2adaf91d3284f068885a2
- MD5 09074a067f57bd3afbd35c674e85015a
- SHA1 329f0dc15ebb8e120f733ad3c85b6f00a4b40db4
- SHA512 8a74ff519805f7bde3fbbbe127d4c3e04669d26894bdafa2b4de6ed75c3b97fdcc144694f6041dd97d1e7f4cab3b4924585985558bf82b97034dcd2d7f209be3
- SSDEEP 3145728:apX4YVHODJ9qFfaIWfAoH+NMyu9CqT/zDemoGk2nOyxxEzGVYAErmoER+0OYOwJH:at5ODGtGYU+G3T/zDhgAbxgGVYAErmhf
- TLSH
  T13C9833AA72E3A98434EF0BB9E803A517DDFC5DE55801CCCA4C5B6355F0E00A5A11B7BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  A.O.M. Factory Total Bundle v1.18.3/A.O.M. Total Bundle v1.18.3 CE.exe
- Size 178.3MB
- SHA256 1fb2b5b0110eb37e84fd5bb83b03689b09a292c830f4be44bd6e821ed8a5d037
- MD5 f7301e2ba8dffdadd8372178ae011c04
- SHA1 0f0638b096e1ced4bb038fac1f4b75a2e8ff45ca
- SHA512 0d8e6fae62c140187ed5b70ed446b0fec8a0fe9da873cd28513634481a597cba04fdbf581cd2e15ee40e186e1bf20f9033146bc3686fbacb906d04763d617f73
- SSDEEP 3145728:bxtaslJW5zVcvJAay1gUHgHsGyRWojZ5X4QCs+eB6o1n+h6J82636mENI+GsGPym:bhPW5qxUSagMXjZ5XDQ0l186J82636v+
- TLSH
  T13298336FB1023F1DD13A8A7A4953D1247D7F22FA3E238D0B19B67985EF90841783A15B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery installer
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops desktop.ini file(s)
behavioral2