348fc8b37f888c43eb99aef84855cc188226feefb35fe50ac88607697ceb96a4

General

Target
metashape-pro_2_3_2_x64.zip
Size 202.7MB
Sample260908-m5lysaxyfs
SHA256 348fc8b37f888c43eb99aef84855cc188226feefb35fe50ac88607697ceb96a4
MD5 f230ea78820506beba99f555560b2662
SHA1 7b01098a1947a839ae84688651b0894a4cf2d54c
SHA512 8b12d2e4c674cbd270abed419ce6054971c35054946c73a55cdffb83b8c37067eb203482e0fe9699b9275a3b11a453214820f91166c864568cb331583237a2e1
SSDEEP 6291456:zh1eBLEVAHFB22NY3HLOZoEE02mfoFViAdMZsyR7:z6BKAHFB2hq8pFVPosi7
TLSH
T115A833875942D0E76A91D606F6793DA2100F3D6D23199A2AEB35F78060FF183B1F885F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  iphlpapi.dll
- Size 6.5MB
- SHA256 dde19914fe4b569cf182b8b6a3eda485a31d9d0a8e3654d659d3d3baf403d09c
- MD5 9e898d21d590bc6f1ffbcf27e48852bf
- SHA1 58edf08f8f955890a701261f23bd6824c1a04673
- SHA512 96a1dfe9eeaebbe4ad8f7f4c1b203cc3648b551461eec399482c24d1351b2a89222c8fb9ba3b9b7a075874c47e461a57c90891436aa37ccf79acac4180b48c06
- SSDEEP 196608:T1DBRDaIerGZ+r/27Hd9N6ARqh1XsdIwQojy:xtZCrq+6J68qh1Xsd6
- TLSH
  T1656623AE62543368D41AC5389833BD45B2FA504F57E9C57E72CFBAC0272B911E682F07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  metashape-pro_2_3_2_x64.msi
- Size 199.0MB
- SHA256 975dfdcd1fbc2419d1a714bd04e668c0120c872464a128998db9003afea9f128
- MD5 bfab0e72448088754db8c6e1cca929ac
- SHA1 6c09621d950f6575c881afec6feeafff4488cdd4
- SHA512 8cd970f1ee5ce73f97beaafe31de0d84582ca0dae23af6d1fc6f28e6abad1845764b6c11a4c9196a300004d7abd8883c536f2b8d3bc312285c0ffae28800142b
- SSDEEP 6291456:+K9QSpobU0WkX2R3bDAfgvN1v+gQHpEEHamKxjIz0:+VSybU0WKqb/941HPwI
- TLSH
  T172A83341CE42EDD6E13582369332E701CA3BBC55A3A504196978B52C1C7F3DA2EBEC5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2
- Target
  metashape.lic
- Size 105B
- SHA256 8bd44e0471b714595aa8bbc27be77886ec58204a24862f562cdd7772e74eed0c
- MD5 0231afc2fc83f5bc376cd586e4d448cb
- SHA1 38559d62229c89763686f5a2855b9f09c6f9b889
- SHA512 27b300a2bf0da44fc8f8852e2b523a4618490c9621afa76ef97ab1eed1e43708989017a2cf1a35b4450bab3e494fe39e36fb275b54a0f665ccf6ad2c3e4364f1
- TLSH
  T1C2B01275E03494166E408095C3559DC73ED027A723DE2C410AD2E1A21C2A21CC3580D1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3