a98ceef248724dd47e8d56854942ae095ce4d09118ac3788dda761560ae06268

General

Target
Initex.Software.Proxifier.v4.14.Incl.Keygen-BTCR.rar
Size 9.5MB
Sample260824-bza4jsbg67
SHA256 a98ceef248724dd47e8d56854942ae095ce4d09118ac3788dda761560ae06268
MD5 170a91500a670a57add46390e49e3e3a
SHA1 5739128b332f28c4954cea38eccb533f80a638a1
SHA512 70cf22719355ebf5f5c4c49f5d0be5acd7ee39460e633048fde191f12d00eac8e1b62dceca2c0a18dea3c5b7adab0d59b02b79a5cbd695164f584c0fc670ad5b
SSDEEP 196608:NnN2lxB1zwJ/TvshEK2lxB1zwJ/TvshEd:NNa71zwJIOKa71zwJIOd
TLSH
T13AA633004FB8DB478BDDDFA91AF6825AD21070062A4B7B1778852F287F65F909931CBD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Initex.Software.Proxifier.v4.14.Incl.Keygen-BTCR/BTCR/Keygen.exe
- Size 363KB
- SHA256 0617e135f671589bfe24120b3112c1918eea2db717d75fc69a255df8e84b9e1d
- MD5 68d062e523903ca2dd4a0ec6660d70a6
- SHA1 1caaab131057fbac6da93047602e5457c11f2b41
- SHA512 0eb634a75d07195564bb7e9e4a9b4dc4551db8f1e3982a7566a3f24cac7ae0e13251ad0ac5b43afe72c6eda1038d62fa8366a781b9577cb02d465b322ddd6b4f
- SSDEEP 6144:A5i0kMlP3ewiHr8SCgZ/YEZT4KPEDPPIckOGlGcl3V:AVk0LiH3CgZfZEKb7OG/
- TLSH
  T1AC84BE5E67C88697D1187CB2B383520DD11F5EEF85BF33046AA57E7CF8AEC249120668
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  Initex.Software.Proxifier.v4.14.Incl.Keygen-BTCR/BTCR/ProxifierSetup.exe
- Size 5.2MB
- SHA256 db20473361892bef8a3516b7017ea414790edd12ba2ef1b41a7350375c31b4c4
- MD5 b0555419cfcc370e7e724593ca1e149a
- SHA1 9344e89d85b87d9f6219b9d8165d8454a813d854
- SHA512 b60c14b65c8a56b1d02fd3864de2285b9ecd0a1150a7b4828c0e88f4718a5103dfc00c13dd3839ad4ebda54fc039cab4dda0923161b4e896d5b7345199b514d7
- SSDEEP 98304:VSiyEqQwhGKDqYmtK7JVPy3fFDIT4CkAKPf2z7J:UEihGKmQn63fFkcCktPuz7J
- TLSH
  T19446023FB299E23EC46E063141B396509CB7EF91641A8D1E43F0B57CDFB65202E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery installer persistence privilege_escalation spyware
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral3 behavioral4
- Target
  Initex.Software.Proxifier.v4.14.Incl.Keygen-BTCR/ProxifierSetup(fk).exe
- Size 5.2MB
- SHA256 db20473361892bef8a3516b7017ea414790edd12ba2ef1b41a7350375c31b4c4
- MD5 b0555419cfcc370e7e724593ca1e149a
- SHA1 9344e89d85b87d9f6219b9d8165d8454a813d854
- SHA512 b60c14b65c8a56b1d02fd3864de2285b9ecd0a1150a7b4828c0e88f4718a5103dfc00c13dd3839ad4ebda54fc039cab4dda0923161b4e896d5b7345199b514d7
- SSDEEP 98304:VSiyEqQwhGKDqYmtK7JVPy3fFDIT4CkAKPf2z7J:UEihGKmQn63fFkcCktPuz7J
- TLSH
  T19446023FB299E23EC46E063141B396509CB7EF91641A8D1E43F0B57CDFB65202E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery installer persistence privilege_escalation spyware
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral5 behavioral6