9a4e54a6781e17f7f646a89f2c3d5e622c59205b6f40c152802eeeee239fb7eb

Sharing

Copy URL Twitter E-mail

General

Target
NVIDIA PACK V4.rar
Size 3.9MB
Sample260809-akpgysga44
SHA256 9a4e54a6781e17f7f646a89f2c3d5e622c59205b6f40c152802eeeee239fb7eb
MD5 75e24b99c8be9bec727074846b7bd51e
SHA1 07d52911d73317f82fcd62fcaba6f3cba31eec92
SHA512 e35e6d8a83eebf44d68fd30eafa1c955ba1be01717aacc6ce973cb77e97a5010c47710067034a7db948335634b41aba12306baeb1e0f9b29268a9077399b836c
SSDEEP 98304:QX+8ttEt56rGo21mg9J9n9951H2euv1SaxB:QX+wtEt5668g9j3qeuN9
TLSH
T151163382BDEDD3E9F39EF6444C2DF12487A88ACD110E5273443A5D906DAA45933237EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  NVIDIA PACK V4.rar
- Size 3.9MB
- SHA256 9a4e54a6781e17f7f646a89f2c3d5e622c59205b6f40c152802eeeee239fb7eb
- MD5 75e24b99c8be9bec727074846b7bd51e
- SHA1 07d52911d73317f82fcd62fcaba6f3cba31eec92
- SHA512 e35e6d8a83eebf44d68fd30eafa1c955ba1be01717aacc6ce973cb77e97a5010c47710067034a7db948335634b41aba12306baeb1e0f9b29268a9077399b836c
- SSDEEP 98304:QX+8ttEt56rGo21mg9J9n9951H2euv1SaxB:QX+wtEt5668g9j3qeuN9
- TLSH
  T151163382BDEDD3E9F39EF6444C2DF12487A88ACD110E5273443A5D906DAA45933237EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution installer persistence
- Executes dropped EXE
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
behavioral1 behavioral2
- Target
  NVIDIA PACK V4/Afterburner.url
- Size 80B
- SHA256 406a450d22291f33ae517a50a1a0512e4fcffa7c2d75002d64d46eb34e8f72a5
- MD5 0af3a308b4de127b221773d72da988ba
- SHA1 5f0a4b8786d7f6727d9020046edf146a96758523
- SHA512 c8164cc7a03ee036063e778708e3b05f9ae851ca716ce6f40ef5127ae76a9bab38099557de2de27e6a63a19f7c7fa8d388ba33f3ecd59f8a630c94a8e2ad7a57
- TLSH
  T1DFA02473C40DC07C5707041C4410DD30C403D440C0F3C0DCC35457040447033CD50304
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  NVIDIA PACK V4/Clean Temp Files.bat
- Size 1KB
- SHA256 bad63a42f7a2b3d49b2f1afd046337e1d78ca744814ced577b084259ce23f15d
- MD5 71fd0ae93297ac4599d568cc881d6e97
- SHA1 d791e8ba66eebfba552dda87c90be170f4d99d23
- SHA512 d8f1a73075871daa223e884a79867018464bbb4fc6168b28229c089e54a1f1ac8dff156e39871f501e8db6256d42dca5f08bf48cbeb3ea7425f3c221ed942ab8
- TLSH
  T15F31C00135F617B085F25D6A328F22F3D20976CA95AC09340AD051F0EE655EB1BB73CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  NVIDIA PACK V4/MSI_util_v3.exe
- Size 45KB
- SHA256 695800afad96f858a3f291b7df21c16649528f13d39b63fb7c233e5676c8df6f
- MD5 6c748415c350f14fd5b78fa5c37173a5
- SHA1 332d64f5885a738d6ce968172b79b1101303cb5b
- SHA512 c53c5d8ab355d950ae27022dc79f168def1aaeeb64398a553bb96f73d5f1c4df2e085b977a3c558329979b86f99a940fa94e33e671c9dcc5cd7a1310d2eb7461
- SSDEEP 768:1AthLhXIHo+tMCXCBU4copfP4xSwpPO0zsU9RXMJmiuofnC8+d:2kztMCSBU4copwVXz9dMYKfz+d
- TLSH
  T1D1234B0177DD4B3BE1FE0AB85472100507B2F5BA6531FBCE5D9960DE5CA3B808A61B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  NVIDIA PACK V4/NVCleanstall_1.19.0.exe
- Size 3.8MB
- SHA256 9dd36ef956af927cf41fa441f91b329a7973e13965e4e7d70e6fa9c1df1cade6
- MD5 b2c6e0b0e19a3e1657761b7e8c3f1716
- SHA1 36c5a84f88c13c94a998904aeb14a2faa76830fa
- SHA512 944cca789c3006effa72c73eb0804ed14b557dfa86bc91f1d2b8fe3ce951a203063d02e635c482c03d670cac08d9d64e0a32d3d6bf3a3bfc003a020bbb3eef15
- SSDEEP 98304:nq0Kv4bIAe+9hHjQNsbUEBE6frVLSt+zcyk:nq0u459ZkNc7WwrV2ozY
- TLSH
  T17D0633DD5ADFF87BD6CA4DB1829B0FA2CBAE45B68024A79E75015978F4222BC170D034
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

installer persistence
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
behavioral10 behavioral9
- Target
  NVIDIA PACK V4/Nvidia Debloat.bat
- Size 1KB
- SHA256 b0c127b4781125b2417941958f0f20fa338f6d0d17610a2eadc5297122ae47d3
- MD5 08c8a4166d562518c0a1312631f531eb
- SHA1 fd0e06f392176ad08974a9342a07c6f7137e03a9
- SHA512 e7134df1e0977b4e62b0dd38b0571ae8abda06acbdcdb392109efecf569ff2d3822735c71cb808d7f752b2bdc490dd10aa407a7e3ea4801852a792340e31c078
- TLSH
  T16B311103670EC0BA62D1807AEFA35D22FE264401915029473B95D3EAE7CA5CC57BC558
- MD5 SHA1 SHA512 TLSH
Score

7^/10

defense_evasion execution
- Stops running service(s)
  defense_evasion execution
behavioral11 behavioral12
- Target
  NVIDIA PACK V4/Nvidia Profile Inspector/Reference.xml
- Size 213KB
- SHA256 5a31c0500500713efd83160cef3db3f56b807b7c4f7a8b4ee7f4ffe05c676081
- MD5 1a8493bff2d17c83e299101954dcb562
- SHA1 439258f42f755d40311a31b37f6d37f447d546ba
- SHA512 75f2383f73fd3e03fdd17e93091cca7192919cb76ff564cafa7ee8d33d50db83d94dd3905d06b67c01f52f580b73573b490beb61f9a58af3cad3c0a29ce0aa2f
- SSDEEP 768:4wPznLJY2cI2YDqbcSQ98orYfLERQe1jE9Vv+hpGT6yYfoBVxL0n:vLKnI2YDqSDrYxUjE7v/T6yZBVBI
- TLSH
  T12D24D64950F8986ABB3445F1F6172A29DEA2528B07864329F99C06436FB3CDD12D3D3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  NVIDIA PACK V4/Nvidia Profile Inspector/Risxn Free.nip
- Size 23KB
- SHA256 4438f0915f5d9f225ab137cd9f97fb5ec86de2a6a3389219c9f9b67487e42ec7
- MD5 8cad237e31b02791b63988b6ed2d2779
- SHA1 828e8375519cc7cf77301bb4a973083cda55304a
- SHA512 ee3928d609405c0328c26d486d064e3eb665b7442ab91e0fcbf226d6fa73b75fc4ef144bccdbf5fdc7cb64745dd29c49c2873f437fd09af1865b9e882751d15b
- SSDEEP 96:PKIRcHEH1HGHkHyHoUHIHxHWHhHUHQH/HqH2HyHMsHrHeHSHMRsHAHf4BHwrHXH0:iIgRSM25y5DJtHC
- TLSH
  T13AB2F66D71C56A0FA2385DD6F66A9339DF28612705534070F89E760F2F239EA03E7E06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe
- Size 535KB
- SHA256 1233487ea4db928ee062f12b00a6eda01445d001ab55566107234dea4dc65872
- MD5 ff5f39370b67a274cb58ba7e2039d2e2
- SHA1 3020bb33e563e9efe59ea22aa4588bed5f1b2897
- SHA512 7decec37c80d1d5ad6296d737d5d16c4fc92353a3ae4bd083c4a7b267bb6073a53d9f6152b20f9b5e62ba6c93f76d08f813812a83ce164db4c91107d7ad5a95f
- SSDEEP 6144:4sP/zdlaCgMOx9mN1S0Mi11iBFmEobpU0u5p:/P5cCdOHmN1S0Mi2BFmLU0A
- TLSH
  T13DC4BE4D35ECA99AEB0804F2F13F25259A5BEA560A85532CB97C26B37363DC811C1D3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  NVIDIA PACK V4/Nvidia Profile Inspector/nvidiaProfileInspector.exe.config
- Size 158B
- SHA256 383b8dcb968b6bd0633658d9bb55c4acaf4c85a075aa456904a42d4e4efd5561
- MD5 ce6d0bc7328b0fab08de80f292c1eaa4
- SHA1 ae505d6f60a71259b91865f6d5a3d674e9de0ebe
- SHA512 f009ad44131f19997c7c7be38144132d9f701fda4492f3782a2717b92859f189196fac5a7d7e6ff6952f2c1735f27ffaddf0f7acbb45b98a7d85572e96c16c00
- TLSH
  T164C02B9940347C37CC214F139360C1254FF83262F434000CF0AFFF68062004E830A396
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20