ee1c21da57567d17e645a9b624a535d7291bcd45cb8f5521a2cc75a4093fae7b

General

Target
PekoraPlayerLauncher-x86.zip
Size 598KB
Sample260802-x1mdvser4z
SHA256 ee1c21da57567d17e645a9b624a535d7291bcd45cb8f5521a2cc75a4093fae7b
MD5 8b0b8955ff36f1e1ff105075ff915d83
SHA1 e1f2b463ed383aa1f161586ff31a606ea219f301
SHA512 f6a6474c08c8f3961609f8fcb59c4318dab422fa5d1dfa9b538f6e1f4e875a9113ab721f369fbb865f0f6424b00d47fbecd08fd0d722b49fb8930ba59294e3f3
SSDEEP 12288:LXMN9cEbRA/gH3H3D+qHfGCZbqgdgu6nm9rZgeMkda/:LscEtAYH3HTjH4u6m99Vja/
TLSH
T146D423765ED1DB2BD35026FDAB4D33EC80127EF1FA20D29B3544B29E9297034A13664B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  PekoraPlayerLauncher-x86.zip
- Size 598KB
- SHA256 ee1c21da57567d17e645a9b624a535d7291bcd45cb8f5521a2cc75a4093fae7b
- MD5 8b0b8955ff36f1e1ff105075ff915d83
- SHA1 e1f2b463ed383aa1f161586ff31a606ea219f301
- SHA512 f6a6474c08c8f3961609f8fcb59c4318dab422fa5d1dfa9b538f6e1f4e875a9113ab721f369fbb865f0f6424b00d47fbecd08fd0d722b49fb8930ba59294e3f3
- SSDEEP 12288:LXMN9cEbRA/gH3H3D+qHfGCZbqgdgu6nm9rZgeMkda/:LscEtAYH3HTjH4u6m99Vja/
- TLSH
  T146D423765ED1DB2BD35026FDAB4D33EC80127EF1FA20D29B3544B29E9297034A13664B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  PekoraPlayerLauncher.exe
- Size 1.2MB
- SHA256 c4545a3e6d16e3942f446c7f060e42e94389b3f95dcbab9052d3bb2cfb322159
- MD5 d5c28f7657569cc9e588892f7cbe6621
- SHA1 9fc8392a5a1fd117660994dee2387fbafde49b2a
- SHA512 29490e6fcb964c89e3839d9e69a4272fd545bdca11476a9f569eabafc6ed6bb621b1f73b26986e9a83f6d69422489d84dc99b6138e689ecb4f221ffe973c07ca
- SSDEEP 24576:bViD7Qk4fZB+NsGm9yjYpADVoEUmCHQCtR4:ZyyfZ8Nlm9yjYpADqmCwCtR4
- TLSH
  T123556BC2FC0F45E8E43504F0D52A5988629F6C75BA618AC762C572D9CAB2D837336D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4