4fff63413a45baa2dd8d0eee1b45e453adb3c4c1d79f0e4dfdbf216ddbcbc0c1

Sharing

Copy URL Twitter E-mail

General

Target
Movavi.Video.Suite.18.v18.4.0.exe
Size 112.2MB
Sample260812-w9pd5ssfrb
SHA256 4fff63413a45baa2dd8d0eee1b45e453adb3c4c1d79f0e4dfdbf216ddbcbc0c1
MD5 970403eafb48bfa3fd10790edc748d48
SHA1 8af58c6688f52320ca21a8ff9d2920f3d3e29fd8
SHA512 9fd9a3bffdc3562597bdf47301666f61fb569811848ae4c9a1db9151ebcfee527fcbe2707ff02351e924a5b688c04004ed2b9f25dc0c2c6ffd571514eb7d1c81
SSDEEP 3145728:ma0gxr0tDAr6LNlZDwey0bLL/U+h3izs+NRbl:mnc0tEKoey0bLA+hS4SRB
TLSH
T173483332A7E0ED21F6F62B307D7917A70E6B7DA32875B10E6605F45E38B1164DE20362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Movavi.Video.Suite.18.v18.4.0.exe
- Size 112.2MB
- SHA256 4fff63413a45baa2dd8d0eee1b45e453adb3c4c1d79f0e4dfdbf216ddbcbc0c1
- MD5 970403eafb48bfa3fd10790edc748d48
- SHA1 8af58c6688f52320ca21a8ff9d2920f3d3e29fd8
- SHA512 9fd9a3bffdc3562597bdf47301666f61fb569811848ae4c9a1db9151ebcfee527fcbe2707ff02351e924a5b688c04004ed2b9f25dc0c2c6ffd571514eb7d1c81
- SSDEEP 3145728:ma0gxr0tDAr6LNlZDwey0bLL/U+h3izs+NRbl:mnc0tEKoey0bLA+hS4SRB
- TLSH
  T173483332A7E0ED21F6F62B307D7917A70E6B7DA32875B10E6605F45E38B1164DE20362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

bootkit discovery execution installer persistence upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  resources/samples/stock/stickers/Comics/BlahBlah/content_1.svg
- Size 27KB
- SHA256 e35840fe174ef1907db98906f35476133af9399d90d729f24a63e615116a927c
- MD5 90f0e1b90248895963cd46191a795d39
- SHA1 6b3072fa84d835e540f8cc110f427b3b5ddab7a2
- SHA512 feab678d1fd8b0a73272238c0dce01a1d9ebaa852d8aa6058b8aea66dce6edd0761db13c026bb9aff9ad5dc8214712b4ddca917184006bec9d97dedf633dfb5b
- SSDEEP 384:UJWsrOurX+7Yoig5SN3a4l0cfHo5UDEgAKujW053AIo1tFrOgMrMpZoh7HnHlPBC:UJPjrXoVUjogp10NarOHjFJ+K5B+
- TLSH
  T1BEC2FA988B8903B4DFD80B4C8FA10D492A540C532434B6D4FB1EE9909FB1EF96E7CD69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  resources/samples/stock/stickers/Comics/Boom/content_1.svg
- Size 98KB
- SHA256 9e3e297729886eec1aebe258c9b6b8b44a5602338b3eddb808eb42f47213ca32
- MD5 5d271396bea70b1da6f02201a6add32b
- SHA1 6002dad041692f31f5b8c281dbdd1f9298f6f0df
- SHA512 522a38a31aa30cbb985f5eae013d39f4fe0e0ca6dad9aa38229541b40cdae1b59f14c6b2b3dd4614e6284b30ffa40b8976b6da75e5ea05e3bbd108f36228523c
- SSDEEP 1536:CG4wC5xNHLhz4eCi2Uu8zcItz4eCi2Uu3XWM:C77rhz4+zvz4pXX
- TLSH
  T1E6A3629F8BD747B49BC8274887F00C462B4C4C272474A9D8EB1EA4449AB1F9FCD2B9C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  resources/samples/stock/stickers/Comics/Huh/content_1.svg
- Size 36KB
- SHA256 972bc52f98399f71ef05d37d2d6a9837f0a1384b23fa91210a23e0b64c78b0fb
- MD5 d78ac063849457cc2865d56e8750a0a4
- SHA1 2716329db8794e5887ecc8aef1a5f77fb8712b5d
- SHA512 8991bca095ef2c61d72289e42dad426535e4d6c3e1b573d4935efc977febe137d0d34eb3a517940302f06b128e00e9dd7e4b2a28d1be85b2d597f87201fadfdc
- SSDEEP 768:S/GKTTsT2uEe52e5YuWCd8/VRmd8/VRvI9PiuPiTxPeE0aUauK:6Xk2uEe52e5YuWWE8E9I9XRz5hK
- TLSH
  T1F6F2F0171309C7E9EE9C152C9C242489B5D9FCC79470F3D0EB1B941ED84D4E2AA6C7BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  resources/samples/stock/stickers/Comics/Omg/content_1.svg
- Size 245KB
- SHA256 8947f25a9275e9b9270fe3efba1d6f361e2615cb17b3235168e7d1c33185fff4
- MD5 0171d0c504adb676b1ab0bc0abfbfdb6
- SHA1 c379af97c77ac9069af180f3b5d38715340e5e9f
- SHA512 8a4443d94691320a9f79d4596953ec54989fb374ea717d2f30a59053a8337e08bbfea8e4eda6faa66e4358bce722709c8a17c9d1fbfcaf32a11eb7e5545f85dc
- SSDEEP 3072:jvm0GziFBnK1fMU2kcbI0QWwr9lp7iV5TMnnO2L04gOKq8jI:ju3mruOclfWs
- TLSH
  T1E63486A4C7A881749BE807848CB51E457B62481F39309394BB1DFAB0BF73EDBA118D5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  resources/samples/stock/stickers/Comics/Thx/content_1.svg
- Size 431KB
- SHA256 15651f27cc75a164d7c2912a8979de58dcaabcd352abe1fc925cf2c77b14237d
- MD5 652e9db401e8557b3514998c5bc4d4f1
- SHA1 cf08597b659863a3060e8495262d09912a0ac2fc
- SHA512 b8bce5bce345da2e1ea3b8d72bc6c7c7d72fb606fbe1820a841849bc0bd80a9b69a62cf38e7765fb5d9a57daf4ce991c233c660a4cff48f8540b4d3c23b7b91f
- SSDEEP 3072:cTft1oLeBNm7r5sVdpV7mPWzhZRF7qXzPidlusphD3CeBudrYMTXEMJ5Bq/lf+FW:cr8q3mPKac8MRIv/jAAi
- TLSH
  T13E9463A58BB882349BDD0748CCA11D462B56485F3574E3C8BB1EF9B0BF73CE58168E19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  resources/samples/stock/stickers/Comics/Wow/content_1.svg
- Size 32KB
- SHA256 d211f4fd916c04006995fd04e49796436f8cf17885a312422513a34f51e68428
- MD5 08c87308defa4586508e9bc0ed71dfde
- SHA1 052aa9b2eb2c5106f9b268df23d95858614723b0
- SHA512 faf3b0fd294cc32b38d52bb3c67245f8f731830c16621daa8e6c742d6d0eec3d6b4dc61ef6dc5ff353b7c66d3c8db5a8d889b841a4d32c2e0a055c0d51d49602
- SSDEEP 768:eRsJen3C2jaX+Ih69kQ+UeXyz3/l+94+9fmwN8RbatOj:eRsJ6JaXAW9fren
- TLSH
  T13AE2A7A8DB654674DBDC078CC9E009403F56480E3934A3A8F71EE7B1BE32E959478D9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  resources/samples/stock/stickers/Emoji/Dream/content_1.svg
- Size 4KB
- SHA256 f188bfce93cd344d16f5ca10d277bda7e0fbd860626785fd1421bb4d37185787
- MD5 89571badd959749a696e06f26ec76bee
- SHA1 279583f1bb944b690c1c34212913f73b352a780c
- SHA512 8873ed75ab40b3bbe26c903335c3ac625f606c6dad1d3c2ac2721798313ba0cbf943f330fb95780e7d42931191b983d28507d413c8152ee4eaa944f54bce88b3
- SSDEEP 96:bTfHmaKDl7a0Vu3UcDicFsaoWipzNLNBXhRXEhK9sRhJhzIDp:vH7Ql7aOu3XimCWi1RyKiRhDkp
- TLSH
  T107916542A36CD7B66E84863A45B53C84B496EDD97030E1DCBAAF005BD80D5D0A2CC7EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  resources/samples/stock/stickers/Emoji/Laugh/content_1.svg
- Size 7KB
- SHA256 1728a3c3aef925bf8ca73380bbc474aa680364fe5f90e79781fb7ad3f840038e
- MD5 274f4a34a24cab666ca13841470c2507
- SHA1 42038210d1c87570cceb9425232156c9f3bbf438
- SHA512 3f23c3801fbe5c3fafee3ae9980118fb5dafd6f98d2cd4a238ca0b7c06d06ae32375ea3d75190cbdf3209749790a67ae5ff0669d412f23d851f241eb206beec6
- SSDEEP 192:vnll0aPucIKfIW4WIzfQ+oF4abP5rdSydk:vnfxSWIE+oFb5rdSydk
- TLSH
  T124F1EA439398C7BA7ED4413DA9352884B9D8EDC7A030F1D8BA5F1453D84D4E0D29C7EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  resources/samples/stock/stickers/Emoji/Laugh_2/content_1.svg
- Size 4KB
- SHA256 bc93d1404f96decb8a939a63e1b89dd66d07c4c4c3b039b526c0f298c7937c75
- MD5 96265caee2841c9b2160efe702050717
- SHA1 88a4a1581155fda0b30bd46f11c754d3cddc0658
- SHA512 4eb0709dcded9cafb0fd305540821da74c13887acf143980c3355585e4a3078bdfc3c4648d2f53731e9efed06abad078643e7744a43bd5ef3e204828bb71747a
- SSDEEP 96:bTfEmaKDl7a0Vu36cDKcFsaBTdwQqJYdxdM48LXRR5R:vE7Ql7aOu39KmXTCQCuxClLf
- TLSH
  T1A7A13E4B9369D7F9AD84413D89742C8874A8ECD9B070E2DC7A9F1027E46C4E4D25CBFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  resources/samples/stock/stickers/Emoji/Laugh_3/content_1.svg
- Size 5KB
- SHA256 c8230bb84c2d51a64dadaf0fb963c7b118d76fc9d86466f703637fb3c506d809
- MD5 8eca2525e30963ed4cc6c65aa9f696b8
- SHA1 fd74f22519db92d16b13ba97bef612ccb3878ce3
- SHA512 1416898352ee4f86ea6e536fd2c20ec60800f3699108bf9b16e4d8d14289cef8a143f8dc9720fc01c495d1833874d750a7927ad9f8e0070d95588b8a21049f40
- SSDEEP 96:bTfhVfWZDl0alVuc+ceKcdasJkxGyN+GN2BUkwTPNFyfWa3LydPVky:vhql0aPucYKfD6nfh3WdV7
- TLSH
  T1BDB1EF079398D7F9BD98413D14342888B5A8EED7A070E1CCBAAF1453D88D4E1D29C7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  resources/samples/stock/stickers/Emoji/Laugh_4/content_1.svg
- Size 4KB
- SHA256 f055674bfdf9398c81cbbc9a90d474c51bc21cc3b19cc6bf56019a44af639686
- MD5 392185db32cfe3561344316e2b0c879c
- SHA1 32a2945cde93f0f59380e124b49269d58d5f5047
- SHA512 dcdb6e5f243fd5f3bc254acc817d644d0337927e4fe367460275ca350671094023026852d39e32aae5510d3dc9cdde70b9345be8bdb5c3dbfe26765ae1154013
- SSDEEP 96:bTfSmaDa0Vu3xc7K9sacEXDhUZaUb3i5akqJcaJJZxJJECHtzl:vS7DaOu3sK9HX1/iyFMZp7zl
- TLSH
  T19AA122079398DFB9BD90852E89752C95B8F8ECD6B034E1D8BAAF5013E44C5C0D18C7E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  resources/samples/stock/stickers/Emoji/Love/content_1.svg
- Size 6KB
- SHA256 dca212d2e75ccabf43bb20e3f622604b3db7eec1a6e08430bd4f5c0d396b04c5
- MD5 2daa6a297f35d95a955b061fb1caa516
- SHA1 dc34903f661212475e1133142a443759c9675604
- SHA512 bebf18b82340ddfd025e67f490f77869219ba1ad595a348a293e38345ee7197d0d43a67b17a99044edaf7360f6729791f628b1068abda415b125be3fa685095a
- SSDEEP 192:vEm7l0aPucXKfExj3a+fAdSxcm+S5faHO7uCZl7s:vEmZxFjBwSKOqOK+o
- TLSH
  T1F7E1A7069358E7B9AEAC403DA8A52488F594ECE7D074E2C4BBAF5057D44C4E0E29C7FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  resources/samples/stock/stickers/Emoji/No-words/content_1.svg
- Size 3KB
- SHA256 46e97fb0abc878deed7ce7547fe31017d563515d0f5378c59c99d6ae731615cb
- MD5 7aaf17541ca1f90e6e4ba19d805f7d9a
- SHA1 9b4d2f378ec9ec817bbde0098cf6ef3f4b420a47
- SHA512 b2c6e98b363a45e7c7f080acb4ab0a74f53d7ae0fd1c9abb44f04f48972cb86dc9f12637ae5e400fd8376d8a0dd4895fa83eaf1a481d53bf8346aedb98c11ca5
- TLSH
  T103515F02D2A8DBF87C98823D4671289475A4EDC4B130D29CBA9F545BE85C5C4D2CCBBB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral14
- Target
  resources/samples/stock/stickers/Emoji/No-words_2/content_1.svg
- Size 3KB
- SHA256 5088031ec9407b15e5539504632de48da39e75b018a181502119d91651bbbba1
- MD5 3e94f59d5d48321ce60e1e4e553d1c44
- SHA1 6d86257ce54b1265152a2aca8e9b319e6ca331c2
- SHA512 e1016c7f49b23b39d161a54acb26f8c724336a33f4ae7476794fae0a8551f1f01157862d7238b1dbda7aec8b27ead2b88dcc2743668ea318dbaa17dd188c626a
- TLSH
  T16D515002D2989BB82C95C63E45B12C41B5A8EDC4B134E2CCBD9F649BE85D5D0928C7BB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15
- Target
  resources/samples/stock/stickers/Emoji/Nope/content_1.svg
- Size 3KB
- SHA256 d3381319f101c0aad5d5111f9544da9b7b6736ecf9f0439f5bd09a520be73590
- MD5 047d5823f8791f7fed8a288611cd387f
- SHA1 dae0ed3cdc4ea22918dcccc155dfa9fae3c9cef6
- SHA512 90c7c7c9f3cd5c0bd751d5165a04f6093c0e1b386f8a9f5d622d17946240a2547d10788e44335d7319d998d52906ebe85683f00c59076cfddcd2a151f39a6cf3
- TLSH
  T152612103C3A9D7B86D94413D89742C84B5A4EDC5E030E2E87EAF14A7E44D5D0D29C7FA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral16
- Target
  resources/samples/stock/stickers/Emoji/Sad/content_1.svg
- Size 4KB
- SHA256 8aedce8729d4562e5057eb299f86771deea0d54eca08455cf0b8d635198dee3d
- MD5 4caf304679c571aee3e3fe07db0273ea
- SHA1 956db76597c12d3ed3b82da956a67a24cf0e2a1d
- SHA512 eb1755bfef0e068e4f93653ea1dcd2d978c1ccab246ec5d9e825875f78d08a7bd0f7805bf6aaa8a2114b803186606c6d7da2dff9ee2c2ca74b679ebd0001a981
- SSDEEP 96:bTfkVcfDl0alVucMcCKcqsJ3movPTjqQoJum2LT/Bm2LL5n1zR2r:vk+l0aPuceKfQmsPTjqQvfzR2r
- TLSH
  T168A13E13C398DBB5AD94812D8534284475E8DDCAA070E2D8BB9F5467E40D5D0E2ACBBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  resources/samples/stock/stickers/Emoji/Sad_2/content_1.svg
- Size 3KB
- SHA256 0a4e6c1d64ea2e4a3da3bc63567c3f4d6d1636a97121317c3be826ff42f8bad1
- MD5 ab88dd821f7522225bf40fda8bc0af65
- SHA1 e6ba4ff9984d1be1d073ddf36efad81153a6d55b
- SHA512 5bbfb3cdac6a4ed28814d30a1c131062a5a66f0d87fad6ea20f7303cbe03590aa6b500935db5d32e5af7832440629c86aadf10e03bb6ba668fd1e987d864b43e
- TLSH
  T110813343A39CDBB96E95C23E45B128847995ECC4A230E1CCBE5F1067E81C4D4929CBFA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral18
- Target
  resources/samples/stock/stickers/Emoji/Sad_3/content_1.svg
- Size 3KB
- SHA256 b2905f4b80d8e75448ff03d4d438f0bd6114933ab07240a4309005c953ab9889
- MD5 a0a8fbb04b7ba19ddcf66b911b544788
- SHA1 47f2713068e0c5958eaa660531dc12ec9fb9255d
- SHA512 3042757f2259f931a190467d66414e800b48114de6f4c7f30f79c5e4cf67e2d4fbe1d79a79d793f0aec6efac812eec8f02e034ed463567c9c8733e2308896722
- TLSH
  T186616502D3E8D7B92D95863D45712C4574E4ED88B130D2DCBADF1497E80D9C0D25CBBA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19
- Target
  resources/samples/stock/stickers/Emoji/Smile/content_1.svg
- Size 3KB
- SHA256 c406845556cce31cacdfc40b1e72faa4ab6b9df1c7f6095d8af435bcb7d48714
- MD5 d3cf7be68a33b81f1896d26821b87f6f
- SHA1 5a480d566ece50741754008dd15da774c617c383
- SHA512 d620f5a7ce1ef1788514e34fa48120b021ced84e1a1c6621d7062f0509e74d79526172f7e3c3b57e9b27ea1a6383d97f87fc985dbdc3985d7a9df7b376bd4e38
- TLSH
  T13771850293D8CBB86D94863D44712C94749AEDD5B130A2CC7E9F105BD85C5C4A28CBFB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral20
- Target
  resources/samples/stock/stickers/Emoji/Smile_2/content_1.svg
- Size 3KB
- SHA256 75f552636d0a0f41e1c2f79314dfccbea895915bb987611cd9ee9ffb98a21766
- MD5 18e30210548a6820097f96dee778003d
- SHA1 b9e75d613afa075d570bd4264f531fbd03e4a1d1
- SHA512 07b77ddb0567255d72af5bece96a75598aded1d808b97f2a370329d05f480981d522c99305156514a60f50458d9d8955136a349ba61e93869b80fd66bfc35033
- TLSH
  T195711F068398DFB86D81812D897528D978E4EDD9B034E2DCB9EF6457D80E8C0D28C7ED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21
- Target
  resources/samples/stock/stickers/Emoji/Smile_3/content_1.svg
- Size 3KB
- SHA256 3f9abec7295e5c5520016b097e08d87e9ce5b52f9ebf3222406bd8fb05c778ef
- MD5 7a941802c1b666c110e5b48239060566
- SHA1 33481bf248995010f97c9f85d6de1736fd195645
- SHA512 bc5886ac5d6f57e8b44b148c8d2bf03b62924d29fa41666ce898fba41139b4f9249be2a55f847f027861de9d84b8d7c19cee50222a54d80b8c01849177389867
- TLSH
  T11E61400292D8C7B86C99863D45B4288434A0EDCAA130D2DCBE9F149FE40D4C5E39CBFB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral22
- Target
  resources/samples/stock/stickers/Emoji/Tongue/content_1.svg
- Size 4KB
- SHA256 73bc4f8f4021e5ba02673fed3a28ceeb3834137881654318f56d19321057da93
- MD5 330286e0432a8c67a8a178e8ffcc72d6
- SHA1 bb20eccb537b46b63d285b598441c16414e41568
- SHA512 ab29b3ff7a869e95b421d83f8acf8f5430237a945972a7b813369918e6b31e4f463a5f36706df157122827898fd4df569b39da17f906bd7441fb9bc659347dfa
- SSDEEP 96:bTfTV5HDl0alVucjceXTcqsJhF4+NHKN1o4z8TLmQlM:vTrl0aPucnXTf44qH+Tz8tlM
- TLSH
  T198A1430253ACE7B56D84813D8670288474F8EDED7270E2DCBAAF6423E40D9D4D29C7E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  resources/samples/stock/stickers/Love/Banner/content_1.svg
- Size 15KB
- SHA256 a001fd4c8660c9045a4bd25a243ff47851045045ace360d263273113b7530eb2
- MD5 91d3fcef0a2185fc3600e05dc371fb1b
- SHA1 89df693dbff9dd1935cc864a2383270b9a8823e2
- SHA512 9831e1ae760a0d1866d0f0bcd6d0d64ff794f6a242f571d73d5cbac38d7a3579fe5f23c66635bf9c272e5a023adce120bec897bd0c2aa3a997f28d386e14ca0d
- SSDEEP 192:vhA9Skk3nvkttaHKiCYuQgC3jZsH0Eq0jFR/xyaIVfs+apm9hF:vh1nvyQHKiCYuQgUjijqqMaIpsZqF
- TLSH
  T199621395B2886BF4CF09067C977948EA30C7C99FA5B1D04BB816343BE22E5CD5CB474A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  resources/samples/stock/stickers/Love/Bottled_hearts/content_1.svg
- Size 18KB
- SHA256 992c18d3f2198b2fe41c17f94aa695f43e4a2d49921e91b5557785b56e093682
- MD5 592f7fe058528aa69fcc5b85c637e87c
- SHA1 8c30fbe23e9890b18b17cfd5e61946e5c4e1fb2e
- SHA512 404235737d21b7bac0a5b1eaac54e429e1897b7eda62c8b40697742a6f2865d9f23eb52a040cc47c404508557ef1732b43006ff4582d785b4a62ca13658b5961
- SSDEEP 384:vhaOv3ow98HjWEMXFcztAmts1Ra8dhscKlrsT8e5L19cX5aTXGseC:ZPv3owyDdMXFcRsLaeKmT8J0eC
- TLSH
  T153920E436308D3FAAED4052C9934288475E8ECA7A470E1D0BB5F6426E48C0E5A8DCFED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  resources/samples/stock/stickers/Love/Bouquet/content_1.svg
- Size 29KB
- SHA256 41c830adbf2a346e9a0fe11acd70c177c66bbda2b3171ea9a5db01e9bf4bcbee
- MD5 1eb5e45e8c2aa674abd3f4735b48fa18
- SHA1 7f83b9d2fcb0d31777334b3be1deafcfdd6c22f5
- SHA512 d551c6d8e24144bac5c1f769619dba19a300d51a2a7788e898e99e3e073a643ae7bcfe344704f356083a188e26ae0263d6c89ea33a359610aebe0ccbf2a6f366
- SSDEEP 384:vZEbieonu4/IuxNfUcKH2MQfsgeKIAemJz5jIOeYUo95DSVk9c1DO8oNzZQUnEQF:x06u8k6fbeKIIJ6oh52C9coZSnM
- TLSH
  T199D276475308C7AAFEE9443CA9642489B9D8ECDB9474E1D4BB6F1006E08C4E4F65C7ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  resources/samples/stock/stickers/Love/Bow/content_1.svg
- Size 2KB
- SHA256 aeca8f00b98996f28a93737ff21ce9a006fbe1ba54081e47b2f2682a45dba20d
- MD5 58ded8c6894c3f6e5ccfae25686974e5
- SHA1 830c90be6c3fbb04d1aea98d0af7fa35c27b22a1
- SHA512 6e14ee9a8ebe65b758511a4eb15991ddcec115c253b8767ced17f9bb9b8e7d72ec9afd8b46daf610c9fcc58ae719fe8347315e10b7af8162c70801b041e494a8
- TLSH
  T1D451FEA50391A7B7DE42833E43F528C13595FCDBB832C5E8A91B302BE85DCC64494BDA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27
- Target
  resources/samples/stock/stickers/Love/Cake/content_1.svg
- Size 18KB
- SHA256 f306dd73f3da5e801fd71bcd6cd4ff0334c5ff4ef782de1a05f10ed3c740f563
- MD5 b8337c11cadad54ceefe17cac7c0ddb6
- SHA1 ba53f18a6cb144ad3960d123b1c81821a4428dfd
- SHA512 5798c78d7341bf222ba49f92f1fb2bf65085ddc98b68cca56d8c20eea09f232b6814b2d89f2a2dc199becd4c9d2467f41d4d0ac0cbce529d2394bd615fd5a6d1
- SSDEEP 384:vh8/D/pKEmHrUGk0r4HImw0EbWmg4hAuocCAFmLGEpc/pJiWwHfMEbw0u6wf0iEb:Z8SqomwG/+mLddKIk0Xt
- TLSH
  T1B982BD62331DE39A6E854607D9B818C5746FECFBA470E0D4B63F6037E44C0D6699CBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  resources/samples/stock/stickers/Love/Cupcake/content_1.svg
- Size 8KB
- SHA256 f5ee091b5b112ff935c893ecce8250684ee1bc7fb46ed7f4bbcb0f02a4f7204d
- MD5 bb00cffca040d4611a7b038634d5096a
- SHA1 a33b5d7f994b0ae6fb880b52ef0470e91c064ff4
- SHA512 a96272b1b005ea9336174f4ecbd535e581554fa839c692e24619af70b05a0d9748fe0722b7aaf92780024cbcdaedc8942e2d3451b4d5c447f0f5e518c0f1bf05
- SSDEEP 192:vGIMSxFZ6pSTUW8yItpEikHgX5ZE8ZuqZf4SwCgi:vGIFXZ6p2mBkHgdYAf40
- TLSH
  T15412DC035398D3B9AE88463D48752C4478D8EDDBB530E1D8BA6F5067E01C5E0A2ECBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  resources/samples/stock/stickers/Love/Cupid_bow/content_1.svg
- Size 14KB
- SHA256 3381b70ef65f393e7136db0bb2f751265e94c4b502b90c4f03cd08fb510e4e45
- MD5 e03eedebbf60b773dbf2dfdc8c5d2a66
- SHA1 52d0042195fd225c66889cc3b137ec7147b10e68
- SHA512 fae66c11419c9d0fee89abbfb9a2f3bf358c4f43abe6f83e0bb7e79e6cfe7bd99e4d770b2c24e53d8dfecbbb513a1ec3842c391afd3e08bee194c29f8161aab0
- SSDEEP 384:vZ1s8FwFfb8YHd+KFQ6bqXGDLO0BqkHd7FMLMNi:0FzblQ6ech3MLMNi
- TLSH
  T1CE62021B5315C7AAFEED442CA9642889B290D8D7C4B0E2D0FB6B1406D48D0E5FA6D7FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  resources/samples/stock/stickers/Love/Flower/content_1.svg
- Size 3KB
- SHA256 3b218b22d589ade87f30c7d1ce3149daebd2d9d772c97d1ead40292ac411a653
- MD5 19d16ec7776680ec94c7596639b91517
- SHA1 440852104127005e1c06025e31d4a71c5dcf0954
- SHA512 df4fa59446808fb4c57c805db03ad30cb19055040aeb8f37a60da3d1fa5b4c01f1860c612faa45c8a30b78ce7db25c39be4e516bfedadfb08bf9e3894e410705
- TLSH
  T1D18121865394DB76ED84832D87FA38C134E4EDE67430E2EC7A9B103BE01D9D554887EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31
- Target
  resources/samples/stock/stickers/Love/Gift/content_1.svg
- Size 3KB
- SHA256 193afbdaf2ab13af3937cebb640b18c7aecaa86fae52b7cfd4295d7e02a0478c
- MD5 bfc8277f584ff143d3a21453f8015a49
- SHA1 ccacb9f3c9e4c8d82d233f11620f1f91c634c158
- SHA512 ade335c56e20f1fdb4a103f65de77abefd54529912f4e6d10921924d97f774f104deedfb7a3666ac1d3236a2b033f46f0922dcc18c8df246f9e353145e897bc5
- TLSH
  T1CE613FA513A5D9E95E50661A07F91CEF39E7DC8BB4B120847C53213BA40E9CE29F07D8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ACProtect 1.3x - 1.4x DLL software

Checks BIOS information in registry

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Enumerates connected drives

Writes to the Master Boot Record (MBR)

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32