6b4acea811125f084a6ce045cf3e6915f9d8a7fe5645884625567b00c0931f61

Sharing

Copy URL Twitter E-mail

General

Target
Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual [PeskTop.com].rar
Size 815.6MB
Sample260907-s36s3ack7y
SHA256 6b4acea811125f084a6ce045cf3e6915f9d8a7fe5645884625567b00c0931f61
MD5 f49aa6b0bd98c40760ad2f9b18b356e4
SHA1 ef6e56719206a2bf54ca8854e80f138608ba8647
SHA512 3f58a89b70734286e30be42a7c786b2c753e8cb0a84f600a6286e38218e2f5876846329ed67c21106e60f32eb60c07ee078460880349075e68d9c118ebf0bf10
SSDEEP 25165824:jkB7ujfFfVAxj7sTLsrn8zGeWTWJllxUJbXOC:sCj9fVAxj7sTLAn8yCJCXOC
TLSH
T1B69933BD73B2E96BE7C24917D26E91D100E642A165F07F51A0B28F3411FE1E8CFB5988
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual [PeskTop.com].rar
- Size 815.6MB
- SHA256 6b4acea811125f084a6ce045cf3e6915f9d8a7fe5645884625567b00c0931f61
- MD5 f49aa6b0bd98c40760ad2f9b18b356e4
- SHA1 ef6e56719206a2bf54ca8854e80f138608ba8647
- SHA512 3f58a89b70734286e30be42a7c786b2c753e8cb0a84f600a6286e38218e2f5876846329ed67c21106e60f32eb60c07ee078460880349075e68d9c118ebf0bf10
- SSDEEP 25165824:jkB7ujfFfVAxj7sTLsrn8zGeWTWJllxUJbXOC:sCj9fVAxj7sTLAn8yCJCXOC
- TLSH
  T1B69933BD73B2E96BE7C24917D26E91D100E642A165F07F51A0B28F3411FE1E8CFB5988
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual [PeskTop.com]/Install_Sibelius.exe
- Size 781.2MB
- SHA256 85bd01f92fcf7cd0172e7927a1f3e839a421d5cd556d79966089390ee004f475
- MD5 737d0a1665387edd1dcc705494f57c45
- SHA1 bbf2bd8a32c1068d3714a1a29adff226ab77feca
- SHA512 256d0b2ba9d96cee34caa3411836ad5ec456f034ae8715a402c2e57dc1eb86ef6261c27b11971192c5d0d98453d9126cc5571ec5f5c8c660d63f7747ade3431b
- SSDEEP 25165824:c/HEaLm+oMG3JCNBrCA01ym/+GLPmgQNmNxU:c8aLoMasHCA6yPaZtN6
- TLSH
  T19F8933A7244C843CD6679F321C9F8C717BB1AC2AD8171667B904EE0D5FF9281AA5342F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery defense_evasion execution persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
behavioral3 behavioral4
- Target
  Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual [PeskTop.com]/Readme.txt
- Size 323B
- SHA256 90211ffbd6ced3e2045a103a7fd05b6e84377508f0b768d48c8a02ace198b4c7
- MD5 42d7688a728e87b2b8b746b91140285e
- SHA1 81669746748e756083510899acb6e157e1014a8c
- SHA512 197cb178ecc80e864bcef51ff872fdcc635bf93ac0b178f812e683049afade57367f0497371e4e4b800fa295f8d23190908020433d49b045dfe8872047ec6bb5
- TLSH
  T1F8E0A79D5C4FC9B13211EAAEE5070926C7220A1B7D4C0144B555014D39C9442DF2E49F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Avid Sibelius Ultimate 2022.9 Build 1464 (x64) Multilingual [PeskTop.com]/SibeliusTC_Medicine.exe
- Size 36.5MB
- SHA256 4551e177e5ed451e90a848116ba26bc13dbdbe0d12333807c5d622a18808582a
- MD5 432a0db1b4e649f1ec96108c87dddc3c
- SHA1 a1316e4a4858ef0cd42eff462e27f91a8b35665c
- SHA512 29820a91ac32105922172474dbb01a15f7b81063c182c7b85a2d3a7ef18b004d8a7486d23e3c3cb7d4e3aaf1f8669b2c99ad8e6f5d41fb572bcd5952bd2f5bca
- SSDEEP 786432:9eqX73FR8hPCkpSr21fwzDidrkTNW771XsdGJcDR+kYznGGnmD8S4iVyDP:QqX730tCOpUsghW71pCRbuGimD8IVwP
- TLSH
  T125873351FB4A9871C5222C72852B0B3051773EBF19ABE2EF83D2785D6A710B4C967273
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  Visit www.pesktop.com.url
- Size 122B
- SHA256 42e647086d0d6d89c283279ab7974260ed242b0b925d683c8856af8c004ea430
- MD5 ec78904d048134a63c41a2dd63a5b201
- SHA1 31423c68a5d5a9401a973d2cbd6c8d84607821d6
- SHA512 e0edfec56103424fe78d6e6d32ae80c91369bd2327753c970ef778ac585467e31a2413b00a46d569b256b3b81fd005cd69167890714fb50384722c1a0cc5e861
- TLSH
  T106B0929D410581AAE651980AA0F5F946990EB9A088C2D4DCA680DEDB0D840C2C469B36
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9