0964c6fdd49045799b7362d8e8fe653a8a2f09ebc9a8cc39a4c04841d99645a7

General

Target
z6dc7.Final.Draft.13.3.3.116.rar
Size 92.3MB
Sample260903-sdqesaaa33
SHA256 0964c6fdd49045799b7362d8e8fe653a8a2f09ebc9a8cc39a4c04841d99645a7
MD5 fc98dd6b21bee396790460bf4f2f5e06
SHA1 a8863662c74cea4aeb04105aef3bc7c4900e843e
SHA512 9b7884ae5948714ab9fafdba15338e437d1a653e545a4d5eec83eb6bd09673d0d48ba4319b76af440b2027e7a4e9201d9fee353dca9b4bc31d6217e78f71163e
SSDEEP 1572864:18euQlO/tZvqlej1YGds4GqIim3OA1x+uKeQfh1yIctOVBgiHk+MOYzS8fE9gLPI:I/fKeiGbMim3OA10uKeMII5wKaS8fcg0
TLSH
T1E828339E4BD7735EFD52A1F414A6D908EC6FD11852CD70A608AA73CF3E9EA01A804F71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Crack UZ1/Final Draft.exe
- Size 49.1MB
- SHA256 f22770f9897926f5b3127fde61afb4fdd8d05e9c1ba11723b5cfe8b65712e502
- MD5 7ddc8a2746ce801932653d68be962c4d
- SHA1 c5032d2cae9d8b99ef9614877f509e2f6c1f2df6
- SHA512 07cec9fc8e03fe8193c23d464e6a128e2f6277c2329991826c29ef37bc028fa688bc4ce1ac30586b297a9b69e5fb5f887e61285b8cc42d087e68c05fa31332df
- SSDEEP 196608:NTi3429uOEZFEX5IrMkQIfPYhDbTprXLBhb5lw6TRLXWGkHcaFLOyomFHKnP:NTirqTEX5IrMpThDfJXLLb5lFT0GkTF
- TLSH
  T18AB78B542EAD8C71D90AA4B1CF67BCED2221BC907ECD676710797D3EFD713022A0A15A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  FinalDraftSetup.msi
- Size 83.2MB
- SHA256 9f3cd3763ff21bd75ff6a03a93ed3251fab3f6c3d4192ef8b4847ebd066f1aaa
- MD5 8e8a2528bcf003763d1620fd423b4b86
- SHA1 a02176cbde064a0b555398fa8a96a4b61d0081cc
- SHA512 76a80c61e455ea45244be0afba0254d1764f08249c08b29bb27caabaa604a526826da1e6a8f035b551d6ef3196c0aec238fd368e673ba8519f6173f3bf13ce54
- SSDEEP 1572864:uk0B1EQL4iROHBDu2S7Xj9iPDC7fV65IqVoDbcjpxzXsANW:uN1EkpRsdSbj9iPDC7Q5IOWbcFxzpN
- TLSH
  T16218334AFE078D3ED8EB0532B87E8E309265BD554F6146DE2251B67C08F3E4C132A976
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4