General

  • Target
    Topaz.Video.Pro.v1.7.2.rar
  • Size 210.3MB
  • Sample260922-skddssxerc
  • SHA256 23c99e4e0761f0249629067dd3cfdf67e5824838f410fc84ebb48fb4f18dbe4f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Topaz Video Pro v1.7.2.exe
    • Size 205.4MB
    • SHA256 925e9e5843cc82667a6c66090b4e32cc29c50a3b352fee0d809d091fe00cf1e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

    • Target
      afterpatch.exe
    • Size 2.7MB
    • SHA256 4efe70b475e5d9059c4e5ecfec321bddad066bc65833eba49116374b48b4f1fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks