9c2d50901189a934ad3ead48e17ce729a3bc11681044969edf43bfb40b5abb1e

General

Target
Stardock Start11 v2.8.0 (x64).rar
Size 38.0MB
Sample260907-eegblswwax
SHA256 9c2d50901189a934ad3ead48e17ce729a3bc11681044969edf43bfb40b5abb1e
MD5 d31c792213085a0900fef8b1536cc30e
SHA1 565b29f54c7f7cb5ba34403bc8c77f3fc697977a
SHA512 cfe18a86a39a4ddabd10a5be1a8e06eecc2cd9e9bd97819e3b9f2c03bfd89b24b6f59e31c692b43eb9968f2d314f32c6a8f6de2b0989639f938d280ffef82122
SSDEEP 786432:hcp/qwwLIxKf4py3kHX3eswGV9no8niHBjlatihTqnN1gvc:cwLIxKf4pv3eswGV9r+ZlatMTqPD
TLSH
T1569733DA3F370012E87CCF150F38D42D86188238E8874A516D2ABD925A6EC7D97A5D9F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Stardock Start11 v2.8.0 (x64).rar
- Size 38.0MB
- SHA256 9c2d50901189a934ad3ead48e17ce729a3bc11681044969edf43bfb40b5abb1e
- MD5 d31c792213085a0900fef8b1536cc30e
- SHA1 565b29f54c7f7cb5ba34403bc8c77f3fc697977a
- SHA512 cfe18a86a39a4ddabd10a5be1a8e06eecc2cd9e9bd97819e3b9f2c03bfd89b24b6f59e31c692b43eb9968f2d314f32c6a8f6de2b0989639f938d280ffef82122
- SSDEEP 786432:hcp/qwwLIxKf4py3kHX3eswGV9no8niHBjlatihTqnN1gvc:cwLIxKf4pv3eswGV9r+ZlatMTqPD
- TLSH
  T1569733DA3F370012E87CCF150F38D42D86188238E8874A516D2ABD925A6EC7D97A5D9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  AppDoze.net.txt
- Size 40B
- SHA256 e8a95a0229180266a8488f4426a21c3ed2f9614f5b9d01a194c0871de7d50680
- MD5 2dd1226195391da5333d9bb15d84c984
- SHA1 27adc3755db62bb654721cca69f858e81010b0d1
- SHA512 eddc06ce797c0329dad6ccbb0eca29fedaa32f652716fb779c2903a28462f93e1b713135940eba86f228d7465726a891a183ee754a1cc6cb9f39e32cbdb31404
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral2
- Target
  How to Install.txt
- Size 541B
- SHA256 0c5e2b14939863814b7995b029d6ebb9c75eb502fa7a8e683f037b43e3cd0e3d
- MD5 c43b4552e163cd19a30ed69f02744c7d
- SHA1 25a5981b4eb129d8bcc7eb42397dfc7f68eb78fa
- SHA512 f1d9c98c3160ea325e3755036706555f901f8b337fa04b7a4eac3040055c5ca56798178851a94ff3ace942ab0147fb64095f11c11f2116b33bf13e60b348cc9d
- TLSH
  T1B2F09E7B0B17A190B32E21C4078E1E44F02B501C5F93ACD72999C36CF910B5AF2C67A5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3
- Target
  Setup/Setup.exe
- Size 41.1MB
- SHA256 ea1bd0976a3f943c0f6a5f7a28e72018e3ebe80ac46ec6fcfa8b2ca9a0dc20d8
- MD5 e334b76e2575f96e2cfa0cf63b0435e4
- SHA1 c99d5d0ee2636a5f59a0217be81d5c3451640451
- SHA512 9884f04d49b7c441e3e325c92c7c6568f47c2e051861ad86527eba845eec619a349cbdea5233f1ec26498759c8cd485a6af3f5c2ac5490968d36431f943d5795
- SSDEEP 786432:aj3G3iAklPdAIgSatRlp+Srt2EiCc1kV6bAw69N0J2iVCfa:aj38i/llAVSitt2/CukVrw69NriT
- TLSH
  T169972316E284612EE0A716F51AF781B099377D2275128D9F87F83D4C8F3B8516E3E2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution installer persistence privilege_escalation upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral4