42eaf7177c75df015e71cdacb4b325c288fdd92bc623c18516e4496c48d36a2c

Sharing

Copy URL Twitter E-mail

General

Target
Lightburn.2.1.03.x64.rar
Size 183.9MB
Sample260811-z2mgcssarg
SHA256 42eaf7177c75df015e71cdacb4b325c288fdd92bc623c18516e4496c48d36a2c
MD5 5392d0d2cf18b3410fb774b132a81d0c
SHA1 f3e5b6629ff06eeaa0675a28cfdf366e67aeea35
SHA512 26c35e4608975fab4884dc354fec19997adc2d136e93e9be3a2b2836bc5d3fabb205e6d67aab44ef71a3b2b9050d88c9face8c2e1f4bee13b7a02ad743dd8b5a
SSDEEP 3145728:xx4T8LghG2SGiCrLIH7IB09W5GZjXLXsrdbOzAw7ip3wMcJ4NM1/zJu7f76/L18i:xw8otGZjbXsrdbFMJCM3L
TLSH
T1D3983396CDD2179D568C58B8409E227ADB682AFC87B4B4001FFB49AC8B4D1B7D0CEF51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Lightburn.2.1.03.x64/Block Host.cmd
- Size 1KB
- SHA256 9ce930149440feb8f03cdf4dfbe88c9f4a7edb13d0b83ee5d2f3875e2197a0e3
- MD5 b53d4a73924f8ec6b8d06f9d75a55f29
- SHA1 bddea3c2b7f90cbf2d74ca593b4bbb3655646da4
- SHA512 f8191c8329ffa2b51a9c7405f4b3053f46c5a3704dd6342aedaff61e875bb60c0ec61bfeeefb0c12476be9e16981575fa7fdfc23e02d233b6ce150e180ef552a
- TLSH
  T18231982CFD20F47C41A6C2688C34A285F566B0BF4B121CC9741FD32047B32B4A3A6DB4
- MD5 SHA1 SHA512 TLSH
Score

8^/10

defense_evasion execution
- Drops file in Drivers directory
behavioral1 behavioral2
- Target
  Lightburn.2.1.03.x64/Crack/LightBurn.exe
- Size 25.7MB
- SHA256 485ec8339d2fc861bf969cecbc5e58fa7ae4a96ba1481353a0f58f8638fa1220
- MD5 2bdd04f894a593db7e18bbc871e2eb40
- SHA1 600f2b2171015f55e36fd3daad750d27f404a2a6
- SHA512 9566328415a8ad83c25d7eeb58f06f3840c4e50840cfdc3216d50d529cf27630ded773e7649ea2a0ebd4d1bbab207a2910ec32d03a85272205fce3df2af9989a
- SSDEEP 393216:oCetRDDkmG2Ide2Dgmg4+1KpOv1Vi5VfFf06baeZuHnqipDDP8ZJII:oC+W+12OHi5bE8qn7wJII
- TLSH
  T17147BF6FB2E102E9E076C07CC75B5507E371305A43219AEB30AD8E6A5F776F05E7AA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Lightburn.2.1.03.x64/LightBurn-v2.1.03.exe
- Size 166.0MB
- SHA256 178fb4d4632b6e1aa977f2e90101153bcfe4ac5e15a69604f8de8ff9314d1063
- MD5 bf3c38b918bbe720a8b4016a9ea41bc8
- SHA1 75fc8cae5b3864eda1a2c3690451ab0c1836a049
- SHA512 aafe0993155214ff182c3ff52ab9ca2570dce97401259dd3c25bb8f2aac85b70f7fedf4c271425af4b849131a5fb91d0dedb40a3cc26f8db988072f9305ba857
- SSDEEP 3145728:O59J00GSihaw4DklfJjTvAOzDCaZ9wLCgGKpjGDSo1Xa91ks:06Sicw4DklfJXAQCaZSLLN6m92s
- TLSH
  T1B388337373CB822DEF8A177685B2942940F36868811739A2DDED01EDDFBA1472C7A345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral5 behavioral6
- Target
  Lightburn.2.1.03.x64/Soft98.iR.url
- Size 202B
- SHA256 de2c1326ba6b43221ba341e2cefba8fed64ce6217b6a20d9b9f4587cb019b99b
- MD5 e0a2b406f040211d5d55f0cd78cf1669
- SHA1 f3e0f9fb39e50717495b35a689cbf69dd192e54e
- SHA512 9cb5ce10cea73df0ca5665da4191e2c21377eb52139773a018c5c5b6affe306182dac1c53b4cea38e176eacd753331e312e819a4e907eed6e2c3a3355b7ee1fa
- TLSH
  T11CD023544A04C0F4C1A3740650F8FC1CD80D708015E6E56821C0DEC55C55051CC05B62
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral7 behavioral8