afb042f3ea9289153cdbcbd35498eadc87f3f1e489a709b34f0c96dd5565ab86

Sharing

Copy URL Twitter E-mail

General

Target
VEGAS PRO 18.rar
Size 693.3MB
Sample260826-pbry2sdk8z
SHA256 afb042f3ea9289153cdbcbd35498eadc87f3f1e489a709b34f0c96dd5565ab86
MD5 c4d70bad0ba7d02bcba4dfa3aa5ed27c
SHA1 b24c3ccfa78cf2ed3c3ad49007d86cbc458ce4db
SHA512 6eeb819712868f569dd7fd0c8004ae2f29457d3305134c942c502d9cdfa09d6b924fdd03888ecdb5357be0cb13842a655da2b69b279fa309c7f74bfe05485603
SSDEEP 12582912:qYy/lI2+PZ918w0fz2173Td5wtwfm1BpyKHnI6AaUAA94dsuOooibdDWjY3Z:SNA918w0i73Tf5AQKHI60AA9kJ8ibdIa
TLSH
T1497933980298F88D33016F97B15CB92E3AA74F2CFFE4846B21745B494E25F532CE925D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  VEGAS PRO 18.rar
- Size 693.3MB
- SHA256 afb042f3ea9289153cdbcbd35498eadc87f3f1e489a709b34f0c96dd5565ab86
- MD5 c4d70bad0ba7d02bcba4dfa3aa5ed27c
- SHA1 b24c3ccfa78cf2ed3c3ad49007d86cbc458ce4db
- SHA512 6eeb819712868f569dd7fd0c8004ae2f29457d3305134c942c502d9cdfa09d6b924fdd03888ecdb5357be0cb13842a655da2b69b279fa309c7f74bfe05485603
- SSDEEP 12582912:qYy/lI2+PZ918w0fz2173Td5wtwfm1BpyKHnI6AaUAA94dsuOooibdDWjY3Z:SNA918w0i73Tf5AQKHI60AA9kJ8ibdIa
- TLSH
  T1497933980298F88D33016F97B15CB92E3AA74F2CFFE4846B21745B494E25F532CE925D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion
- Executes dropped EXE
behavioral1 behavioral2
- Target
  VEGAS PRO 18/Crack/protein/Protein_x64.4.1.dll
- Size 3KB
- SHA256 d328c59733c4953ca4a923ccf04b37a4de8839e54d9e8901730797311c7ab6b8
- MD5 4f1ba0bef9467b2525ec453792461b31
- SHA1 799fded6489ad4df7d3459cc3bb7ef167c04da6c
- SHA512 cf9677fbeba412a8a43eda4f67dc2711b89e8262564e425b949ce8e52be75bbbfc75ced1492d7b84113f7cf373f4d3cb1b5ad5e43d11c4fe40749a803448db9c
- TLSH
  T138511942BB79E41AE0BEE43C4E09DD2075A16CB8D7E151894B45322F5CCFF052B30B60
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  VEGAS PRO 18/Crack/vegas180.exe
- Size 45.3MB
- SHA256 7f486830c02c2b9f66b62068b5ac7b44d84632a4a9d95d5eb57e26cd11201b23
- MD5 d932a569ee0f966bd8e0be4912354dbf
- SHA1 f3f4bafb99ddbda654881f57e5c2e71f15290395
- SHA512 3fd11f79e864e67a7baf01923adfe31d14e91f13316dcae2daccbe9a5cd0d8d4bff4cb87b2ae0bc910b024114ec1f0785e8c3f2c5b2aa83da8625ff6b29a2e5e
- SSDEEP 786432:roJ+9MQQmondAy+d0mpjsHBOOopBnktRSYSOfvz08BCjjUOE:roJk1QF0tpjMAZ/ktijjUJ
- TLSH
  T190A78D0173F48189F2B3A6388AB69652DA727C555B3186CF365C764E1F33BD08D3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  VEGAS PRO 18/Setup.exe
- Size 693.2MB
- SHA256 3988557312ceca76bee86e2df0c34f2cdc7b2dc370846ba8390ae1d36d61e900
- MD5 1afd68147ac485753917930116210a40
- SHA1 8c8deec48a8a7c3d4e5af8e26e8b3d09decad08b
- SHA512 4cd02d60b7f30c7b5e08e312330342c124c9fb4cda01ba99e8d765a4040ee7832760a25c1d9e32a5e5a3a4521a4bd2c2a75a6b48395f32da1959f2117dadeacb
- SSDEEP 12582912:bGbk9hNMUyBXnkRSuLBCF8WwX2VX0I/wY3jCMQRoMCb+RSGcYHqEtZF8:lM5XnVTSX2VX0I/fjCpob+RSGdx8
- TLSH
  T15379330572F9A69AF0B7A2344975E215B5263C019F34C6DF22D4FB8E2E726C08E36717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence privilege_escalation spyware trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral7 behavioral8