d89d17412b0ebda952e389f3e8ee40faad7d4b22b26ed1204ea3ddb52dcf04fe

General

Target
SamFwToolSetup_v4.7.1.zip
Size 54.0MB
Sample260913-blc1zsan6z
SHA256 d89d17412b0ebda952e389f3e8ee40faad7d4b22b26ed1204ea3ddb52dcf04fe
MD5 424dd999d1c11513aaf4835cf7a23966
SHA1 aa447845a64e29145a9489f43972beebcb33cfba
SHA512 e446c143fac865687197437e81076d43b3de0c9fae1b2b2d3b2da2314c978bf88ba421cbc9737bba76a1583aa9edec2584bcf14269af3f109043ba10f55223f2
SSDEEP 1572864:uBZhPtkB1AKfSVIBoKSjTdLqdq7SSiAA1:kF2KKC9jpeSTA1
TLSH
T14AC733DD69030E842E384EF8E01F43065AB5A6DBBA3F36574E83F853967814FA119778
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  SamFwToolSetup_v4.7.1.zip
- Size 54.0MB
- SHA256 d89d17412b0ebda952e389f3e8ee40faad7d4b22b26ed1204ea3ddb52dcf04fe
- MD5 424dd999d1c11513aaf4835cf7a23966
- SHA1 aa447845a64e29145a9489f43972beebcb33cfba
- SHA512 e446c143fac865687197437e81076d43b3de0c9fae1b2b2d3b2da2314c978bf88ba421cbc9737bba76a1583aa9edec2584bcf14269af3f109043ba10f55223f2
- SSDEEP 1572864:uBZhPtkB1AKfSVIBoKSjTdLqdq7SSiAA1:kF2KKC9jpeSTA1
- TLSH
  T14AC733DD69030E842E384EF8E01F43065AB5A6DBBA3F36574E83F853967814FA119778
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  SamFwToolSetup.exe
- Size 54.5MB
- SHA256 c4d6d9af8e71bedd9992fbae5e889cb50f7606cff4afb3ba96fca57ee34c9071
- MD5 a1eaa5bf2b450f8f0da2622147574817
- SHA1 419bd1c74e9be93014bef98010e804d98785e86f
- SHA512 3dd4d8454b69a3809a3d08d2e88582ee3065c4eac6ac06f83153d22ffb6fbe2c7b816cdd100e55973c68eb048a5e66959ec14beabf8b13ea84a4d7c519bef96d
- SSDEEP 1572864:YzhJBpGbZkyd6T6Ni2E9XBpW9YzosEEyD:qPeKyIL9xMs9yD
- TLSH
  T1F0C7337FF205553DC93A0E71847B83009977BA92B82B4C1B0BECB84ECF755642E3A665
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

costura defense_evasion discovery installer packer
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- SmartAssembly .NET packer
  Detects SmartAssembly .NET packer.
behavioral2