6e26b82c2c4ddde48279868ffcca051d854119a6b2f8ebaf20c03cb1131bc1d5

Resubmissions

12/08/2026, 23:03

260812-211cyawfqc

12/08/2026, 22:45

260812-2pebbswelb8

Sharing

Copy URL Twitter E-mail

General

Target
Sapphire 2023 - Win - Keyflame.7z
Size 697.8MB
Sample260812-2pebbswelb
SHA256 6e26b82c2c4ddde48279868ffcca051d854119a6b2f8ebaf20c03cb1131bc1d5
MD5 069ed27a5c230aca2ce58a666b30526c
SHA1 bba2c9513ae9d07234a5e08019f80c4e64813d94
SHA512 0d82cc0f1b1ffe3362c1a72a82b3cdc4b34cbffd7d1c7168deb14b170ff74d3dc88ac2e82280276b8b4ee1899abcca31c8b41dc128b991ad68ed6b4777dce157
SSDEEP 12582912:+C7e3mK5qReivf7J+7VzSTPzOHBC+4giEGd50pFt7LVJr3dwvYiiMj+n9:ty3b5qNl+7VmT7aV4oGL0x/VV3iiMj+9
TLSH
T12A79331F4ED3829B3D5E764348ED79E22F67B1FBB14C21C45160AA2A0D21E0E5E5CFA4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Sapphire 2023 - Win - Keyflame.7z
- Size 697.8MB
- SHA256 6e26b82c2c4ddde48279868ffcca051d854119a6b2f8ebaf20c03cb1131bc1d5
- MD5 069ed27a5c230aca2ce58a666b30526c
- SHA1 bba2c9513ae9d07234a5e08019f80c4e64813d94
- SHA512 0d82cc0f1b1ffe3362c1a72a82b3cdc4b34cbffd7d1c7168deb14b170ff74d3dc88ac2e82280276b8b4ee1899abcca31c8b41dc128b991ad68ed6b4777dce157
- SSDEEP 12582912:+C7e3mK5qReivf7J+7VzSTPzOHBC+4giEGd50pFt7LVJr3dwvYiiMj+n9:ty3b5qNl+7VmT7aV4oGL0x/VV3iiMj+9
- TLSH
  T12A79331F4ED3829B3D5E764348ED79E22F67B1FBB14C21C45160AA2A0D21E0E5E5CFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Boris FX Sapphire Plug-ins for After Effects 2023.03/Crack/GenArts/rlm/bsphr20230314ae.lic
- Size 2KB
- SHA256 b3d632c631aa0f2aedd792ac2a9eb967ef0a8e36059aa20397252bed5287ee04
- MD5 16f2f1218bf3c35c60fddb43fcb74494
- SHA1 72927ed2be6a5f08750d8c7057b3b7a2ad7b0fe4
- SHA512 784b505c74295f1cfcbd3d9acf2747c19e05a10e3734c726af25ca2f00ca24735a4038adb354d6afa4aef8f9869989e0d88220b21b1d95d3f6bb56e9b2ba2c5e
- TLSH
  T13B51CD80E6C053F4E68D3BE716BD3331B592736022D6B60B54AC5A6C50D3DBAE6570F4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Boris FX Sapphire Plug-ins for After Effects 2023.03/Crack/sapphire_ae.dll
- Size 64.2MB
- SHA256 342272bc87c161a54e66f0c60aa91b65a5419b091b9d8471f100b2164bc0d07b
- MD5 0c361250216750b73144b654c824c6ea
- SHA1 3b78ea806e83984b041e0fd83653efc25bb9a800
- SHA512 5babefb7926ab5e105872b044d88619d36bb87e766d3bfbdece041fba8a68832b1247400f2e925795c30948858f7b23e0958727bc2e9dee06febbb7c903f94dd
- SSDEEP 393216:lkLCALzbIQHOn/GEqlEifOTdH3sp8ivzMijaM3w:ubzLpHT
- TLSH
  T18BE78E47E5E1CA87C5096434546BEBFDF239BCC140201AA3A7A83EB73EB77605357229
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Boris FX Sapphire Plug-ins for After Effects 2023.03/Instructions.txt
- Size 505B
- SHA256 1bcebfec94f636113421a7851282255ddf4fb5d4d449ce58ed10a5bf8982254e
- MD5 8dd80479df2ba66142a2a81e097372ab
- SHA1 8c29c99a0d168f87aa75cf8cfde8813d05ef70b4
- SHA512 93657c4118caa28640cca56c90ac0f6c96e26fa1283b8fcb35560559494e9da672977306426bfeff0e36a6f477586ce4765848d96c8299dcefcec7eb88639412
- TLSH
  T193F00ECE6943D3A520C303ED0B1D1904FB61DE66925A0A3A398D908AB11D70062FE0E9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
behavioral7 behavioral8
- Target
  Boris FX Sapphire Plug-ins for After Effects 2023.03/setup.exe
- Size 633.6MB
- SHA256 6d5e18fbe691f727969f385c2186dbeafd9fdb067e62c47ff0b79e464b34edfe
- MD5 1b541a44b49c9a41beeaaa3bc671592f
- SHA1 8ba0099d9ba9c0a968c5edf492b68e5ca244426f
- SHA512 7fa1f5177d85d5491ab1f9354c373ed833a2529738a60332de24eb11ba3b7be1924af91a2a6771b970bd4b99761c2c9cafd9756a5dcf9e65c8edbc0b4441fae9
- SSDEEP 12582912:3IK7Its5i+NatDbMOZzJM1FmU4sugt29Mh8o/gv/t8B/33IzS9gIjZxh5Y77t5S:YK7ItnnXdJaFmyh8xKYzS9jZLmK
- TLSH
  T1C66933860CED16AEE2903B693D51FE6AF8F7B063E10B588E67B0525D53F094E35A3143
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery installer bootkit execution persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral10 behavioral9