22bcd129c11f17fabbbfc4535e03f1aa7b7e0aacaeb051c5052029e922429c51

Sharing

Copy URL Twitter E-mail

General

Target
Final Draft 13.3.4 Build 117 [FileCR].zip
Size 92.5MB
Sample260820-cnd7haba28
SHA256 22bcd129c11f17fabbbfc4535e03f1aa7b7e0aacaeb051c5052029e922429c51
MD5 310596ccaaff97b71edfa95987dc6008
SHA1 d3eb4f0df26d528a0d34ff1d802a7a9fbc6796b5
SHA512 a96e61adb04c3b04486de55ff89fd6c78c57dd8b037133e472fdee47da8074531966f387632ff5fdc1789a386a851f775052515deed290d90d764903959b4d91
SSDEEP 1572864:+oS7NSOE9x1Pflfp9u1vnDCsVRqKf/un2puDRF3gGAwgg6cDoM9I+rzw7Fl06DbS:+o4N+tPdfpqne8qKf/yLwhg3oazYFl03
TLSH
T12028333334E0C29FD17F9E299721D765E62B563C74BAC94882AFC470C660B6C6C6817B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Final Draft 13.3.4 Build 117 [FileCR].zip
- Size 92.5MB
- SHA256 22bcd129c11f17fabbbfc4535e03f1aa7b7e0aacaeb051c5052029e922429c51
- MD5 310596ccaaff97b71edfa95987dc6008
- SHA1 d3eb4f0df26d528a0d34ff1d802a7a9fbc6796b5
- SHA512 a96e61adb04c3b04486de55ff89fd6c78c57dd8b037133e472fdee47da8074531966f387632ff5fdc1789a386a851f775052515deed290d90d764903959b4d91
- SSDEEP 1572864:+oS7NSOE9x1Pflfp9u1vnDCsVRqKf/un2puDRF3gGAwgg6cDoM9I+rzw7Fl06DbS:+o4N+tPdfpqne8qKf/yLwhg3oazYFl03
- TLSH
  T12028333334E0C29FD17F9E299721D765E62B563C74BAC94882AFC470C660B6C6C6817B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Final Draft 13.3.4 Build 117/Crack UZ1/Final Draft.exe
- Size 49.1MB
- SHA256 2c8aef569e1ad1016e4fcd9babb6b7b3257c531624eaf44f5c100a8b7b7d31ef
- MD5 53429c8b33159bbf05c6c8b5aed7f126
- SHA1 f62219b594c1eb15274c311616816d8548b24b10
- SHA512 4c248d874459cb37e471e67c066b126c22943707d31cc845194b92989d52fe44c54120dcdd0ee89e7f559e4d6320b43596da0986aef554fe7e0cd691ebc81957
- SSDEEP 393216:7LSSvkOcAd2uH3li1kPCgkueYEKvwylEF:iSvnFd2uHYkrsYpl
- TLSH
  T1E9B77A542EAD8C71D909A8B1CF57BCED2221BD907ECD676710797D3EFD723022A0A11A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Final Draft 13.3.4 Build 117/FinalDraftSetup.msi
- Size 83.2MB
- SHA256 20244d1fcca58bab63243713362fd6b26a16a4317c7ecd540a6954e07e921acd
- MD5 3115efc7dd2298c8075541f00f090ff7
- SHA1 86d9b5fcafed103fc55d76466067a1bf74f44b6b
- SHA512 70a98fe211e929ce9a25c3c98dc9f9c0369847065ae77f5818755d40981b5ecfe3facd8598a1d66efa790222224d650db25f09b5cd7baf8e546b20e78d53ebb3
- SSDEEP 1572864:l80BNEQL4i1JOsE5xtAl6Hv5g/1mg7gluIf9BWsmJY//6hjRMyLxdZCr2U6:lVNEkp1Y/XtAlWvq/1CluU9SJY6MSxdB
- TLSH
  T167183341FE039D6EE4E70537357E8E350226BC684F6185EA2254B63819F3F4C237AA76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery ransomware trojan
- Executes dropped EXE
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6
- Target
  Final Draft 13.3.4 Build 117/Readme.txt
- Size 485B
- SHA256 b43538fe7a602e13c82af920d953292dc2b034db5e1a655f3db924b3ff582cb4
- MD5 8e188af9d329fc2c933a3216990a5610
- SHA1 c18c9b864ed1c28ade11820b4cc75e5fc7a0219b
- SHA512 1c77d5c9b4d55d37b4a43c5c72b44235360248b3904681910bc248d6744cd1999dae15cea0e4650150cf951e4e449e5de4e531c005bcb9df9fac3a64f4d3ca1c
- TLSH
  T18EF05C9BAE97D3F22210E259258E8CE0D30B408DD0C18441346DC58B36646D945CE0CD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Badlisted process makes network request

Checks whether UAC is enabled

Enumerates connected drives

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8