36bda33964e70d2bb893657a7b1b8ecd5b01604d01494b365dd6e9cf7c6bd8ad

General

Target
check.zip
Size 12.3MB
Sample260919-pgc23sbr2t
SHA256 36bda33964e70d2bb893657a7b1b8ecd5b01604d01494b365dd6e9cf7c6bd8ad
MD5 48d32ff6a8bf6fee2effa60d2d89c069
SHA1 7fa8a2aee0f0e7ca62552d8e4ec497d67a2830be
SHA512 33326fa0ccb8a88fe8e7982dd82f6b724269d83ae05d95f8de41c9ce086341d2d41664fa8a5695611a56e7c24578102f7c0dc15f45e5c4b12eb963b1791dfc6d
SSDEEP 393216:0zmkEtSYxWHYjSQihcIogevr98djmLEc3JlLlT2zU64z:s+3eHQqZMr98pQEqjLlT24R
TLSH
T13AD6334158012BC70DA92BD157A15CECDB8E2B68F41C2F56ECCA4E1793F2534A4BB27B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  HTTP Debugger Pro 10.10/HTTPDebuggerPro.msi
- Size 12.0MB
- SHA256 aeea613a3d7f1f6480457ca6c94e25cb63354d2d419c11ed002a761e1949f677
- MD5 32f0ca2925f3dfb28c5c56a4135084a1
- SHA1 392bf3d9924a49558584ebb28e4d58526151df09
- SHA512 71d4517eb395d10375456cd029bf024228e3b7a76f46dfdf48bde7990a0ca0d055436b1433fd4a1abbb1acb95d71fc40ebdf1d597b009925f2c3ca2a936dc078
- SSDEEP 196608:8qglk7EZ5vq1PO0yPqG85bUvraCg52WNegYYoG1JYHC1frqy19ggWXwcRl1XxMSn:8qgcEb0NyX8lUvg2WwXYoGn++frqoWXJ
- TLSH
  T1F3C63306B4B00716C49516B205AA7F7CC7736F24A91E1A3BA5C59C4A2FF2710B7FB2D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery ransomware
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  CORE/cr-keygen-x86.exe
- Size 630KB
- SHA256 ebc09645ea6de1bdfe4be4cf6dad540ee2d04e5b305493278b7eeb216ebc5619
- MD5 00e70c082d730e8bcc40219c43e64a8b
- SHA1 14135ed313471a76d2ebdd825db6867fcf643f5d
- SHA512 a7e3b9a6be70257f52fad4068a1017e39ed40c2bda687ec61cbab76166dae5bdf459a054895cf9caaa680c99ae4ed976237de3463ee9620fcb98537a2a5df3d5
- SSDEEP 12288:+f8Z62z24/zLU6NuUytqatZeBB3KU8BIwxhYqT303uvWt8RcUtjlyQ6j:+f8Z1//zLU6vyFtgPWfxh/E8W+Bjlij
- TLSH
  T149D423529E7AF94BDC3A98F01D31D8AEAEB6387D3014D3491D841A1BA1C821CE05ED7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral2