241d496d728fd83fa773d5adfb6b4ae420cd025c4ba086ac256ef2a0fb95bca7

General

Target
Venom Pro 6.0.9 Cracked.zip
Size 152.9MB
Sample260822-2s199svwfx
SHA256 241d496d728fd83fa773d5adfb6b4ae420cd025c4ba086ac256ef2a0fb95bca7
MD5 566c99f5fb6ef0b30fe32b243cfc8d15
SHA1 80ed3f335385bc95c2be4f7191ba0a78265cdc18
SHA512 caa751e12cdd5befff07ea2b3784acd7f1f93317faa3c0ac7b8ce9463299183d3cc5c67c07e00519b11f830852bddc10a8b383296709d05bcd04b1c7eb971a9c
SSDEEP 3145728:L+uKoDJmIJX2W48YdMT29Tk8k5Jfl6wcTMml/09fngaiF4F+19K1S860OFkM:L+GN/JmWGWT29Tk8KfwwPmSfngaiNe1Y
TLSH
T14878338C77BE14B8C869DAB860010F5162F5BC9897352D9E2B7931B4EEE7116B337B04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Language

ps1

Deobfuscated

Source

URLs

exe.dropper
https://protoolskit.net/svchost.exe

Extracted

Language

ps1

Deobfuscated

Source

URLs

exe.dropper
https://justrevealing.com/svchost.exe

Extracted

Language

ps1

Deobfuscated

Source

URLs

exe.dropper
https://downandgo.com/svchost.exe

Targets

- Target
  Password.bat
- Size 114B
- SHA256 55139b19a9a836c46495e79289fef4a1067267605c1623e435079a7c4476934d
- MD5 e84238c7a5561166355081f5d950e88e
- SHA1 c22a445a8dcf916786fae0f78ee0d5b277f1c6f8
- SHA512 3d5cc0eb86a3dc908f67487d3b98d9adea620fa4b07d8195cc12813d70fd8a48ab939415ee36aff4d38bc7ce91c04b2aaa1a9fa7ab352f1954d34a8ea517d640
- TLSH
  T12DB0125F52933940979325C08B2629513B8F54EF47CBE3C23100EDC975511BFC2E48AE
- MD5 SHA1 SHA512 TLSH
Score

10^/10

defense_evasion evasion execution persistence trojan
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Disables service(s)
  defense_evasion execution
- Stops running service(s)
  defense_evasion execution
behavioral1 behavioral2
- Target
  Venom Pro 6.0.exe
- Size 152.9MB
- SHA256 af4ca7b7cf77d16070949d7290e7ea31d7c7924a304b1de693be6e4325f12a14
- MD5 7685ada66abf9c96b4f4e478f9d8dcb9
- SHA1 33daf66efb172b89b33325044b8e23039ec15940
- SHA512 a944d981819b89f46f616eccb15f9042a32d80ae023cffa1f3b1a153f8b8235404eb987a173d8c3f4d520fb5921090fa4647491f2bcc77bd86ce73cfe0296df9
- SSDEEP 3145728:C+uKoDJmIJX2W48YdMT29Tk8k5Jfl6wcTMml/09fngaiF4F+19K1S860OFkd:C+GN/JmWGWT29Tk8KfwwPmSfngaiNe1h
- TLSH
  T16B78338C77BE14B9C869DAB860420F5162F5BC9897352D9E2B7531B4EEE7006B337B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4