ad0955197daf93200f0234f9c95fcd2a5a680f02c973f6ad7c67e8475b8677b9

General

Target
PrivacyKeeper[91199475445].appinstaller
Size 3.9MB
Sample260809-d78e5azbmf
SHA256 ad0955197daf93200f0234f9c95fcd2a5a680f02c973f6ad7c67e8475b8677b9
MD5 e63126aede00bec72325c96ce7f4d1a6
SHA1 292ed89abf43aa96498458289c674052ba9e51d7
SHA512 750ccabd19b2a93a2390d6d644863f08cc3cd0e26cce60db0200cacf817eb5b937255b08c1f6e9d047698143953ecba7e0fd7eeb6beb8e85f22218c015c9e28e
SSDEEP 98304:/RJpe9R7LL4sU8zYQA9aHJTmkC58YWCED1nvYQ6X2J1UMdX:/R67A3899k8YWPDxvkX2XTX
TLSH
T18916331C6753E62FE229113CF29E0DA271518AE7A3E0839343E9B15B4581572CD1EFEB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  PrivacyKeeper[91199475445].appinstaller
- Size 3.9MB
- SHA256 ad0955197daf93200f0234f9c95fcd2a5a680f02c973f6ad7c67e8475b8677b9
- MD5 e63126aede00bec72325c96ce7f4d1a6
- SHA1 292ed89abf43aa96498458289c674052ba9e51d7
- SHA512 750ccabd19b2a93a2390d6d644863f08cc3cd0e26cce60db0200cacf817eb5b937255b08c1f6e9d047698143953ecba7e0fd7eeb6beb8e85f22218c015c9e28e
- SSDEEP 98304:/RJpe9R7LL4sU8zYQA9aHJTmkC58YWCED1nvYQ6X2J1UMdX:/R67A3899k8YWPDxvkX2XTX
- TLSH
  T18916331C6753E62FE229113CF29E0DA271518AE7A3E0839343E9B15B4581572CD1EFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  BelezaAIPrivacyKeeper.exe
- Size 7.3MB
- SHA256 0274302e1027e12231d96e7518199d88a48736a5dceb75cea177dd554ef79531
- MD5 00d1426822ed8ab9790fbf460ae1cdac
- SHA1 5be2d406ce2899548b19c6ecf71254ccbe7de416
- SHA512 b955bd580f4a3ff8d60e71677713ba90d58d35106ef808391a46ab8c3d4e0aeecf6836f58b5158f67685673b1dc32dd47c49f982be3f4738c2aa356ad603d674
- SSDEEP 98304:Ab3R+R2NxF76Q5VGBel2Lv2nuPYsOqh+s:AzR+UxD5VgqaCqh
- TLSH
  T128766D03F6A281ECC06EC174835AA733FB72B88D4530B2AB57E45B212E56F50AF5D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral2
- Target
  WebView2Loader.dll
- Size 156KB
- SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
- MD5 b7f10b8066ee96c628e09c439b8d0b9b
- SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
- SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
- SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
- TLSH
  T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3