d3c5c4af763e2ae4f8fe730597a91868b70fb87c0854f0f14b75b24f3d9bf92f

General

Target
Final Draft 13.4.0 Build 120.rar
Size 94.5MB
Sample260903-vh6zfaae73
SHA256 d3c5c4af763e2ae4f8fe730597a91868b70fb87c0854f0f14b75b24f3d9bf92f
MD5 9e3ebd75f4124e450ee6252c0f165509
SHA1 dbda372f0aefdba8c8a44ba0a09f250e9cf2ccce
SHA512 02827adfb0ee656eaa7945ccbdee3c42ea0afc56e1b84ce628b33372edfc041a75165c0bdaf9bc15fe428b28b7e78d7a0f1f472dbc7d8aa06782661f2bbc04a2
SSDEEP 1572864:dJIRhW22Q4kLv38T1/c/Vh3q1SfM9XfrGqSj9VBC8sR9Ju+LuWfa0coCdkXXEf8Q:dJ+4LQNTs1/AVhqQfMjWj9VBzCJpLuAc
TLSH
T1C7283368AFE32F33F77F69748EA07589BD49A92C5C4921FE769F42E50D08207DD00992
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Final Draft 13.4.0 Build 120.rar
- Size 94.5MB
- SHA256 d3c5c4af763e2ae4f8fe730597a91868b70fb87c0854f0f14b75b24f3d9bf92f
- MD5 9e3ebd75f4124e450ee6252c0f165509
- SHA1 dbda372f0aefdba8c8a44ba0a09f250e9cf2ccce
- SHA512 02827adfb0ee656eaa7945ccbdee3c42ea0afc56e1b84ce628b33372edfc041a75165c0bdaf9bc15fe428b28b7e78d7a0f1f472dbc7d8aa06782661f2bbc04a2
- SSDEEP 1572864:dJIRhW22Q4kLv38T1/c/Vh3q1SfM9XfrGqSj9VBC8sR9Ju+LuWfa0coCdkXXEf8Q:dJ+4LQNTs1/AVhqQfMjWj9VBzCJpLuAc
- TLSH
  T1C7283368AFE32F33F77F69748EA07589BD49A92C5C4921FE769F42E50D08207DD00992
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Crack UZ1/Final Draft.exe
- Size 48.2MB
- SHA256 9f72f91e4ae84feb23a3a49fd1b08498ca80dc50e58686b2849c248c76691fa1
- MD5 e94bf097f1723a8b97fb9d04aab02252
- SHA1 e8db00b58d5148d163184bdc5434820107c8992f
- SHA512 6c9bff369ef4480bb1a84cd1eeb37eda4b0f5a5dcadd9af451fd796b69d13e0c89e357a7a73fcadfe39aaa09f300dc506dc3044d03e77fc9bd969d27faf32c8c
- SSDEEP 196608:YDJp6eby+HpcLHvWSCMHhV+MygfFvapJcKFLOyomFHKnP:MptXCLulMHhVeWgF
- TLSH
  T1E8B77B546CAD8970D90A90F1CF57BCED2221BD90BEDC6B6720B93E3EFD713421A1650A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  FinalDraftSetup.msi
- Size 83.4MB
- SHA256 e2f0142cc0161f5e20bc3dda39ec947dc4c826972a6a346e01078f390fec1506
- MD5 2108ae607aaefeff72361d0c50e45125
- SHA1 c53178988a9fd87d5ce87e5cf8e2b983a7f9a7d6
- SHA512 5a24eb2899709d4f0867fe73e8dfad289acdbd22e71604d0bfc6ced90f05059b23cd8a0f86049e22986eb383c04940e01ea93452bc3c58a116f8736ac0dbe4c7
- SSDEEP 1572864:jduOBdEQLQiNqE7ucUUuHbkP5H18sLdmncurd1wjECn8:5xdEkBNBTUUuHAH18sRmnljZC8
- TLSH
  T144183346FE039E6ED9EB4536B8BE4D3042667C288B5545CA6214B63D08F3F8C13BB536
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence privilege_escalation ransomware trojan
- Executes dropped EXE
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6