c55e0db91810cc83a32037a31115c8c5df85e8aa83f077a9483ca484b8a671cb

General

Target
Topaz Video AI 3.1.10 (lofix).zip
Size 649.8MB
Sample260903-sdtr7saa38
SHA256 c55e0db91810cc83a32037a31115c8c5df85e8aa83f077a9483ca484b8a671cb
MD5 89734e217294cded2e7fea5df35787af
SHA1 2699c222885d17648dd3cf78407d039573189701
SHA512 3e48b1b2e3b5cbbf969024a3c4ebe7f0a94f02abd4f38a6900a7d435933aff971b08cc6a0dd0fad4fb3de36ff596953287f4adab20629959551b39a4de9678dc
SSDEEP 12582912:SsQzkuDBw7RooufGccewq5ERwAeeHnpgKLwi3Z/8jBHilhK2YEQESCyJ+rQDS+G/:SsQzHN4fe9mlpdLwi3ZkjBilhFhSCyJO
TLSH
T1BE6933926812DE3C718C4FE44E3A48DA78336CFE7C2C2BA5E4015735B85949A2F947B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Topaz Video AI 3.1.10 (lofix)/Crack/login.exe
- Size 4KB
- SHA256 218b4699de28f9aabc7cf682b31613e37a20ef581ca815811133d54250af91dd
- MD5 86c97fe515b63259c4e1446d547d7696
- SHA1 b767277f97a532ff74e0f3b77766ed9ff2d4437b
- SHA512 1f8de88d7b359d3034e304d36bd7be142eacb34726ee247776bc7c31b665cca775331a9d275b8b4e3d3f2d060cdda1f070f78456c290462ca8ecb73498322e8d
- SSDEEP 48:61kH2Q9wETtwTajlPMPTp6NMmH2FYOJvMoZsiIqm54tM7lX+Q/FCpfbNtm:J9wEhMajlPMPyHkLko1IXl+bzNt
- TLSH
  T1C9919554A7E8423AE7724B32ADB313508636F7519CABDB5E38CCA2173D17B140D62B71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Topaz Video AI 3.1.10 (lofix)/Crack/videoai.dll
- Size 588KB
- SHA256 c4c7ca7d28b093d9ea012551d9d30cf626e9952dccc0b110bae9df5dfc12bdfc
- MD5 ed0c03b1250f8c5c2f20d5ef1f6feca6
- SHA1 3667f3799705d39a8bc44a7c38f901711da1b887
- SHA512 dfe824ec276d24172c22c38c37e1df23cdbf0b9d2435c81a2a6f06f28a4dd6a66e7772db3392bafdf46c6582d1b927a9b68643c6e3595203d6142e2f786d7006
- SSDEEP 12288:m4wvN2yMTzJsQdk9wQSoAmXQE8gLHIMZYeIdrzv:m4wvN2ycRdk9wQSoAmXQE8gLHIMkdrzv
- TLSH
  T1F9D45C2B625803B9E07BD17DCB47CA03F7B6344603618AEB039186661F5BBE56F79720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Topaz Video AI 3.1.10 (lofix)/TopazVideoAI-3.1.10.msi
- Size 652.9MB
- SHA256 eb0db8b8cb8703c79a7df53168db1adc917e342d4d32ec8532339282e829ef00
- MD5 a6a8316cf0e4c1c0c06bd8e1add24f25
- SHA1 28c161f81be840148128feab365c0aa2415d7fd5
- SHA512 bc47233857df4a5665969c901b5170320432650dd0506a10d052443974fac13e84e3ce879361cd4052af7c9a71ecd4cd0da2029b0b68c2d463aa72070f68aa19
- SSDEEP 12582912:3uOBslNG7R5WzInfYRFrPDZUyZHavt1aPizy5AzvrOQk0TQJKFvSwBPqiaTEg53:dBsjaWOur1UyMvtMqzy4vi5s0ZwBP63
- TLSH
  T153693383774F13BAE7ABE234417542088930BE25676492CB1BE4B7DA1FB32D1617C25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral5 behavioral6