4c22a7adba2240867c8b72be44ff8b94928beac970c006e72ebb0430a4968df4

General

Target
Topaz Gigapixel Pro 1.3.3 (x64).rar
Size 403.8MB
Sample260818-enngaadr2w
SHA256 4c22a7adba2240867c8b72be44ff8b94928beac970c006e72ebb0430a4968df4
MD5 baee2c361b30c29776aa9ac4f4b1039d
SHA1 45aad9dda655e1ab1346d3e2066de764d7af722e
SHA512 0f11882d3013a9cea787fea51dd2eb77f36857424771e0450dc5184bf6a106fdcc574155667ec4e88f2d0a1bfb63a50f76b1a0e610c1fa58ea066d306f95d886
SSDEEP 12582912:EcSOcyYo1KXpzatAdHW/+vvo0SRLzJBSLm4Fwv:EcdICAdHWWvA1xem4Fwv
TLSH
T143193354FA3D9CF30994F6896E3E7EBC912098F805A4CFB21610487B6784E5E78B52F1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Crack/dxgi.dll
- Size 40KB
- SHA256 27e634d9562e6d585e2b5f60d18565742f1a703f009df961a5aec90bc46e0aa2
- MD5 7e85ad5e20f083eac7a2f40ba8651563
- SHA1 4cf2dbe110408e8e3a677486cdb3c72e0e9537b4
- SHA512 dc3585835f4a43d38277241fda140cb143be6e7026f6cad133b1dd19316167016b5aa10e1a1e9afafe8f0e7b2c6c32eaf6c0565099923464d61c63a230a7b35e
- SSDEEP 768:n8lqU9OiUeDqELgzmdFkByQdIzEnrEnpmJH:n6qUoiUgoyvzCEpuH
- TLSH
  T13913F7057AE912F5E9FBF734C9746136E672B8499930D30E0A50C6391F32713AA2DF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Crack/version.dll
- Size 40KB
- SHA256 1799892fb423a7c402dcebd458fb11cca074b95f532c87324b442bfc51675cba
- MD5 16ba04b31b6df25e8be0e59ca705ff0c
- SHA1 92b3034afce4b1d163d85e4b091fafc1d1c0dfff
- SHA512 92d67727ce243717127e91cfc31431582a113a8da532af7ac2b2d317b3e3ab93a890bcd78b9dfa8e16a2118cd1e4aa0867299a32af760008961826db72adf88c
- SSDEEP 768:MlqU9OiUeDq4LgzmdFQByQ/act8TD7E1mckVPxIiT1pmJH:KqUoiUskyAaFjE1mckVPxIiTDuH
- TLSH
  T11613E7056AE912F8E9FBF734C9756136E672B8499930E30E0650C6391F327139A2DF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Setup/TopazGigapixel-1.3.3.msi
- Size 412.9MB
- SHA256 96e78ad1b603b697a796e4eadc10311bfa3cecdf02d2bd02dee9f6240bb55fa1
- MD5 d20dc6df15ec94b2ae5222b7b33889ae
- SHA1 b595e41fd4248997a6f31459b5f9de2ee810743b
- SHA512 7081ba466b476b8a510b9d95ba9f660a00809fdba1b84011864187a27e3be170a7a5ccee7de7af315f353e30b2ba0b9ca47aa9ed1405822ae23ae23a7f632587
- SSDEEP 6291456:d7a31p3nZVomXfjvjXUWWPAgPwdt8UyLxJeolFrECtGBcMJnNP:gpXZumPrIWJg4dt8UQxJe+1ECGnl
- TLSH
  T13C29332A7AD07827FB6BAA35CA627700C77174058F05EADB556C01392E7BBD4B532383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation discovery ransomware
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral5 behavioral6