3f32fc7668eab7dc09898ff8684204a73bedde8c6cb48069eed399c8a9ef37f2

General

Target
vortex.zip
Size 13.3MB
Sample260823-entcjasena
SHA256 3f32fc7668eab7dc09898ff8684204a73bedde8c6cb48069eed399c8a9ef37f2
MD5 efeac026893cf8607431edb7c1277b5a
SHA1 91a71cd5f84de6f93141c72ea7f8614fe0ce18ed
SHA512 88b277fb783a5927b1bbf837db9096519b486bcdfd94de0aa78d395d3dd67891f4207840a962cf146cf87be4e679fe49f6513f322021c95bf44c4a40b4d11ece
SSDEEP 393216:z4T4psLDAwlrLcZijgBOrGvHzVcQzc3dsbCY3kVJ/St:k5vAwhKmgBbTVcQzcds3kK
TLSH
T1B0E633F2B59DE1AD8590A306A907D808043CF56097E0C9C548B68FA64E5B7CF9E1BF1F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  vortex.zip
- Size 13.3MB
- SHA256 3f32fc7668eab7dc09898ff8684204a73bedde8c6cb48069eed399c8a9ef37f2
- MD5 efeac026893cf8607431edb7c1277b5a
- SHA1 91a71cd5f84de6f93141c72ea7f8614fe0ce18ed
- SHA512 88b277fb783a5927b1bbf837db9096519b486bcdfd94de0aa78d395d3dd67891f4207840a962cf146cf87be4e679fe49f6513f322021c95bf44c4a40b4d11ece
- SSDEEP 393216:z4T4psLDAwlrLcZijgBOrGvHzVcQzc3dsbCY3kVJ/St:k5vAwhKmgBbTVcQzcds3kK
- TLSH
  T1B0E633F2B59DE1AD8590A306A907D808043CF56097E0C9C548B68FA64E5B7CF9E1BF1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Vortex/Vortex-Bootstrapper.exe
- Size 14.6MB
- SHA256 4ac1c40118de6166bece58b04ec937c4b9975a5541e4ea96eba9d7ba87a48d33
- MD5 b098024d0c8dbba834f76bb49c62e2b0
- SHA1 1b01ec9117032f9a37c46d130e988304467595f5
- SHA512 b8fa33248851d4262acb14868faeff569d77c37f05f1d739a1b8b42f9865679b6b585a1c14b69cfcc9a40bee17332ff7b86064ad4b9ff6f80e5bd6249a7757e1
- SSDEEP 393216:WJsYIdRMOzHN+jg9yD4ty9TPRuUrzQLOW/Ki/8lZG3:6udRMOxQGyDtDRuUrzUChlQ3
- TLSH
  T182F623C3A1DE87EDD48396156A4712CAA4C5B056DAFA17143ECE0D0EFE06C4907CBBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution trojan themida
- Downloads MZ/PE file
- Executes dropped EXE
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3 behavioral4