97d8a9f8f2b618c0d230cd00ef477f0039141a9dff5362c9273c268305ac73d8

General

Target
Topaz Gigapixel Pro v1.3.4 - Win - Keyflame.7z
Size 402.4MB
Sample261001-p5f4msvgmg
SHA256 97d8a9f8f2b618c0d230cd00ef477f0039141a9dff5362c9273c268305ac73d8
MD5 427d4a08450da78e5e84f182ac7673c1
SHA1 f90399305bd3153c4f5daa08227e1b84bd62bed8
SHA512 b28d9340c94cbd4f78329b8af851e57d6e26b4351fb2b71fd75221bdb7d7fd060e11d1add567921cba10f6d662303931571a6665eaa15c3b40cee198817dd442
SSDEEP 6291456:udw+PGb3IFIzryjoF0HUDhvh8wR4Rs4YehXcxMXw4JdqVg702qfUynryrZ1/KCk:u+cCzu2bDL8wR4RsedcAwiI2SnOrTKd
TLSH
T1981933F333E74A354D6BAB89DCA89839C8CB3136539E425571BB11EC7445A2F0390A7E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Crack/dxgi.dll
- Size 40KB
- SHA256 27e634d9562e6d585e2b5f60d18565742f1a703f009df961a5aec90bc46e0aa2
- MD5 7e85ad5e20f083eac7a2f40ba8651563
- SHA1 4cf2dbe110408e8e3a677486cdb3c72e0e9537b4
- SHA512 dc3585835f4a43d38277241fda140cb143be6e7026f6cad133b1dd19316167016b5aa10e1a1e9afafe8f0e7b2c6c32eaf6c0565099923464d61c63a230a7b35e
- SSDEEP 768:n8lqU9OiUeDqELgzmdFkByQdIzEnrEnpmJH:n6qUoiUgoyvzCEpuH
- TLSH
  T13913F7057AE912F5E9FBF734C9746136E672B8499930D30E0A50C6391F32713AA2DF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Crack/version.dll
- Size 40KB
- SHA256 1799892fb423a7c402dcebd458fb11cca074b95f532c87324b442bfc51675cba
- MD5 16ba04b31b6df25e8be0e59ca705ff0c
- SHA1 92b3034afce4b1d163d85e4b091fafc1d1c0dfff
- SHA512 92d67727ce243717127e91cfc31431582a113a8da532af7ac2b2d317b3e3ab93a890bcd78b9dfa8e16a2118cd1e4aa0867299a32af760008961826db72adf88c
- SSDEEP 768:MlqU9OiUeDq4LgzmdFQByQ/act8TD7E1mckVPxIiT1pmJH:KqUoiUskyAaFjE1mckVPxIiTDuH
- TLSH
  T11613E7056AE912F8E9FBF734C9756136E672B8499930E30E0650C6391F327139A2DF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Setup/TopazGigapixel-1.3.4.msi
- Size 412.5MB
- SHA256 1647c63c82c88297e81565485287325cac5c194a549c47a6f7fa195b03fd9cd4
- MD5 d7719dc8ef0ddc68ec334f3a63390a12
- SHA1 d4138bc2cea1dce6fbb89054dd98b22f5f61363c
- SHA512 f8e1616d4c178bcf21fbd9aa95a65e954049856d7ebd9862b505f1a72a0e0259e7e6f839e479595572563d2526afe516bfaa2cd949e9521218e74b27740709fb
- SSDEEP 12582912:LJZGC6dZSCTvU2N08dhcAIVJwGN0+ubCgn:LJBEZnz/3vhIVJwGO+u2
- TLSH
  T11B29332B7AD17977FF5AAB368E673B01C63174058F04A9DB11A811352E6BBD4B233342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation discovery ransomware
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral5 behavioral6