184e68fa5a4a2a11074fd42622161064c2b545e5936706403a941432d1708fe8

General

Target
tzi-crack-release.zip
Size 10.4MB
Sample260916-td8f2a1tby
SHA256 184e68fa5a4a2a11074fd42622161064c2b545e5936706403a941432d1708fe8
MD5 705694a2eb8b1395407e8e8a99f958c0
SHA1 8b10f983f6d11adfe7f79c263766b6af0a5e1b24
SHA512 924eef2f8a00212b89d7a1300eff8af8b1047855add29616927a1f274931de88c4a45b41b4a7b3047a7174b0d1412ca85427c8606212be0cb57fb01aee873df3
SSDEEP 196608:bJlivV4fIu6VyS3HHxV542etcBZ1BuA4gAKfn3iJmW/EY/tnJqxXtdewNE/:VwCfIuKySXHv54dancG3edEY/KHU/
TLSH
T111B6333894A8D0A4E050D2F75793E6B360BC9C5A18DF995A1FB7AE3034819D11B633EF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  tzi-crack-release/attach.py
- Size 2KB
- SHA256 f1e01e94151dc61f32fde1f138b786c0f7e4dcc5d6efb8afec5b5fdca6bba16a
- MD5 18928809e2dae9236601be3bd228becb
- SHA1 f83ac52963d1195061dbb1ac1fbef8e82a467f86
- SHA512 80502de8e54f2d20e66910b2c85953f9cd29611f703638b2a4f273635304e9be0da3168bd6b783c3c2e68bd72bec05c0f95d89b6e536255086d96c41746d9c8a
- TLSH
  T12941B6239C2819F3C281481298AEF1119766BC07839117347DFCD6942F6D474893BD75
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  tzi-crack-release/bypass.js
- Size 5KB
- SHA256 b253130c8d17f7a4d64f803e39ab241cd9575f36674a0d3bf2d77187b022881f
- MD5 8e9f792d0b7f7b023ef02e4b384c2bfa
- SHA1 1f644d03040106284e0564a03a475482f3c9fb4d
- SHA512 341a049e5b48df5a15617e903a44f3f63eacf6ecca2ea90a68101d3de85d4d38c1b0fbc42552f0f6ed2a0f6d942480007b37093d99046270e0f3da39a1896c8b
- SSDEEP 96:3Xs30qKxEeNotNQ3v7K0kGIi3yyHfQycoXTfay6E96mRo/Sy7P4R6DEy:3XtqKKeN8NQG0kQiy/QycoXrayX96mRG
- TLSH
  T12DC1845B01FF10224123E0664F0B9416357EE4473744DE69BA1D83A5AF93968D3B2BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  tzi-crack-release/tzi.exe
- Size 11.4MB
- SHA256 4a86429fb2cf90850de930af6a569b6f83e27e385c7945b992fb2bb39800a5ac
- MD5 24863ebf048eb8b65af91a8be7b80b40
- SHA1 652db3956ad62b4b6e48cf8059e6971bb19ecfd5
- SHA512 5141a72d2d50f76cef729f3fb0dcf93013034da6918ea77bfe360aebe2a97eb265a535e45239017419f1b918842682d1c183f5808cb9c2f9d7fc2af8ca0e3e9b
- SSDEEP 196608:GfEvd1jQTuCQZzjlIK9TQ8QHyQLu7yFE/++7XVoHpw8LojBcjbA47FYWc2:GKd1MTuCyPuK9TQQ/XVoHpw82Bc3A2
- TLSH
  T13FC623C7658A0EE2ED2429B158E10A6A21925559BF4027DB7C2C9009BF3FCD1CE75E3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence trojan
- Downloads MZ/PE file
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3