General
- Target averis crack.exe
- Size 63.7MB
- Sample260804-vsqefatsaw
- SHA256 a0e60b408d9728b54750e3faabe9653c963ec1992f82545967681c1dfe2c98a4
- MD5 2e3f9d7a0b93c4ed08ebdd102191c55a
- SHA1 09e130d480153803f58637257e0c0d8c13e8defa
- SHA512 aa1658c2ee893a842df77732836914f36cee8b23de4c774a0ffec3a7b244d827c76562e170cf26a9713ff1b6a2875dc3928ee5c749527e54f33fee7c7fa30dc9
- SSDEEP 786432:kyx/i+iVjEUfeA8vRgr4m1aQBhFKPt8ga0iBQ:kyx/i+iVgUfeAdr4mEQBhFK
- TLSH T1CFE7724C24500AE4915BE815EAABCF1B5FE9DADB5BE8244DBCA88E740CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
averis crack.exe
Resource
win10v2004-20260513-en
7 signatures
30 seconds
Behavioral task
behavioral2
Sample
averis crack.exe
Resource
win10ltsc2021-20260513-en
7 signatures
30 seconds
Behavioral task
behavioral3
Sample
averis crack.exe
Resource
win11-20260513-en
5 signatures
30 seconds
Behavioral task
behavioral4
Sample
averis crack.exe
Resource
win11ltsc2024-20260709-en
5 signatures
30 seconds
Malware Config
Targets
-
- Target averis crack.exe
- Size 63.7MB
- SHA256 a0e60b408d9728b54750e3faabe9653c963ec1992f82545967681c1dfe2c98a4
- MD5 2e3f9d7a0b93c4ed08ebdd102191c55a
- SHA1 09e130d480153803f58637257e0c0d8c13e8defa
- SHA512 aa1658c2ee893a842df77732836914f36cee8b23de4c774a0ffec3a7b244d827c76562e170cf26a9713ff1b6a2875dc3928ee5c749527e54f33fee7c7fa30dc9
- SSDEEP 786432:kyx/i+iVjEUfeA8vRgr4m1aQBhFKPt8ga0iBQ:kyx/i+iVgUfeAdr4mEQBhFK
- TLSH T1CFE7724C24500AE4915BE815EAABCF1B5FE9DADB5BE8244DBCA88E740CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger