General
- Target Wondershare_Filmora_Installer.exe
- Size 2.3MB
- Sample261003-rnvltadf75
- SHA256 bf49674d532953ab5ca46027a8b4e92d33037c75dd88276213c9a789b578f709
- MD5 15c8012810c9e7efb53db9e3f0dd171a
- SHA1 1e31baa02ba13be67681812c387fd9459248eeab
- SHA512 2150794553fc778fb8e4f756dd76297713bbaa53e76a3c50a2a5c89b8ecc743941fb764519e50237626a5c0a8c1ad39f67c5ef6e554ca552acc6250f62ff0cf4
- SSDEEP 49152:eSczUCpC6gGkWce2RI0Iyo2AuFBko2sws4+KTkFpkZTiQ7kNSaF3k6n:eSczUTZegKTEpQkNH
- TLSH T18EB5BF12BBC2C0B7E2A302315466A72949BEBE701B30C9DF63D42E5C9D315D2E93A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Wondershare_Filmora_Installer.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Wondershare_Filmora_Installer.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Wondershare_Filmora_Installer.exe
- Size 2.3MB
- SHA256 bf49674d532953ab5ca46027a8b4e92d33037c75dd88276213c9a789b578f709
- MD5 15c8012810c9e7efb53db9e3f0dd171a
- SHA1 1e31baa02ba13be67681812c387fd9459248eeab
- SHA512 2150794553fc778fb8e4f756dd76297713bbaa53e76a3c50a2a5c89b8ecc743941fb764519e50237626a5c0a8c1ad39f67c5ef6e554ca552acc6250f62ff0cf4
- SSDEEP 49152:eSczUCpC6gGkWce2RI0Iyo2AuFBko2sws4+KTkFpkZTiQ7kNSaF3k6n:eSczUTZegKTEpQkNH
- TLSH T18EB5BF12BBC2C0B7E2A302315466A72949BEBE701B30C9DF63D42E5C9D315D2E93A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.