64c00ad79c7885a59da3936ef118ae617eaa9746027c8d5ba14973e5e6741f6b

General

Target
CPM2_Trainer_v1.0.zip
Size 178KB
Sample261014-ar39pas13r
SHA256 64c00ad79c7885a59da3936ef118ae617eaa9746027c8d5ba14973e5e6741f6b
MD5 5be03748aee2eff940cc81dd606ebcf8
SHA1 82d86e9aede974e2c656c7c3b49a4d34eb5cd18e
SHA512 068ce63c3c7e278a8b39c8bc0a1ae9d848587678b3e66cfcb0a535a9470bb2ddb3dffc05d9f02b85e97a8cb24d6ae0b095f5e8e43ad70df12ecd6d6d9d601e15
SSDEEP 3072:kMjQDRJVObz0JKcSmYRWpp1ugztxuLabIB/Oxt/9nqRjK7+SWpp1ugztxuLacpKD:kMiV/JVSmYQ+Qt2abkM/ejKSl+Qt2acw
TLSH
T111041356A19D6CA0DDD91A3CF4A56D23E2864A0FA2AF0E335BE1748B7050F14C6F13EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  CPM2_Trainer_v1.0.zip
- Size 178KB
- SHA256 64c00ad79c7885a59da3936ef118ae617eaa9746027c8d5ba14973e5e6741f6b
- MD5 5be03748aee2eff940cc81dd606ebcf8
- SHA1 82d86e9aede974e2c656c7c3b49a4d34eb5cd18e
- SHA512 068ce63c3c7e278a8b39c8bc0a1ae9d848587678b3e66cfcb0a535a9470bb2ddb3dffc05d9f02b85e97a8cb24d6ae0b095f5e8e43ad70df12ecd6d6d9d601e15
- SSDEEP 3072:kMjQDRJVObz0JKcSmYRWpp1ugztxuLabIB/Oxt/9nqRjK7+SWpp1ugztxuLacpKD:kMiV/JVSmYQ+Qt2abkM/ejKSl+Qt2acw
- TLSH
  T111041356A19D6CA0DDD91A3CF4A56D23E2864A0FA2AF0E335BE1748B7050F14C6F13EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  CPM2_Trainer_v1.0/CPM2_TrainerSetup.exe
- Size 190KB
- SHA256 2be5de601b37118386eee0bcb1bf3c91da0a44041f5dbd8a8d452a12e3777c07
- MD5 2bd5506cd92af68fa06f72f03794856d
- SHA1 0564921c738bdd1d9ae1aa9a1f72fb1ea3b99c72
- SHA512 2b37e9889a7a83c16ccbcacd3bdb11441871b898106f2c3126e3215d27a814e4ef1534681a5e03073f314ca58ee08d551f434fc212eff019d5d9633fec42a6b9
- SSDEEP 3072:ABuvKlEqQi7Wqa/AcxXC0YAqBm40WfnWpp1ugztxuLacpb7joRgz1sdJ:JiqAhAi01+Qt2acR
- TLSH
  T10914194D1BF49463CD243B3BB4A3AD364974A7D1782AF34D6CF611E645A2F82AC20763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral2
- Target
  CPM2_Trainer_v1.0/changelog.txt
- Size 1KB
- SHA256 27367974aec37d9b25a34ecdfea951f01009589a8dedd876dc5c97c5eb8feb10
- MD5 43465db8c8084016d2589687dd9b5d3b
- SHA1 f890c96bcf7b766416542ee8a43205a466166da1
- SHA512 2d07621e87f192b8d859c86a1307a4c1e50cea5706eff04680e15d2e1e463ab2759114d00fe94e4b126543db8d8a1320ac0cec7d817850b19c40f33759c5372b
- TLSH
  T17631DBB75F26002A346FCA0F1A16300176297642BF376519286BB009D7CE73FE6B4DB5
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3
- Target
  CPM2_Trainer_v1.0/docs/HOTKEYS.txt
- Size 914B
- SHA256 5393510d3942907faaa4312dd3df92b53c592467699770a7de5b7af65604c180
- MD5 7607e2c8f1ecafb3809044ace9cb4d45
- SHA1 459f387039a3d2bb54c7fb44727a4832e4f6da85
- SHA512 9ea3a1ee8bbc63c281059662cf3e559a74aff51f00e6aa3896e23fddad0d24f894530a894047880a96c4c3553e71cd482085892f67fe562661dfb050ab425b24
- TLSH
  T11F1121698F0A1059AB3FDD0E1D41F722EDB68F81A826A04235DCB84CC306FA5D4B42DF
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral4
- Target
  CPM2_Trainer_v1.0/icon.ico
- Size 148KB
- SHA256 135be8659725d200b3b6400be10654f10e2324346b0cd661ec43dd98ee36ba77
- MD5 c71ba1cf1987b7c46b16ef12f5bf4754
- SHA1 111205d7030308def28c01d05c37d312c20b163f
- SHA512 cff9ca6d32d9afaa9e6326ff71a4573484b945d5410f242f68964c9eab4d6da2d2ac60e154622da90d22daa90251e3373864c575bcf5ecbad5b8e7255fad83bf
- SSDEEP 3072:kFzcHXA0YAqBm40W/nWpp1ugztxuLacpb7joRG:azxAi0B+Qt2acR9
- TLSH
  T1E8E3E64D1FF194A3CD243B3FB483AD3A8C7493D1381E7398A8B615E155A3F8B9C61962
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  CPM2_Trainer_v1.0/profiles/profiles.json
- Size 1KB
- SHA256 1dae5e8d2e2015533ddbb8ce08e27696559ea9f0cfa5dcdd440de87543a73fec
- MD5 c788a10eea57cdb3926b38a4c1d959bf
- SHA1 f11ef9709ac9ef8918b5630e4641f69361a96a5f
- SHA512 4324a067a3c230933650763363aa04d148d2d3b2150ed736e5e63e2e2271b3051a1be0217a2d386dbf21b8ab63db858934416c68ed29d3e4fff554040066b34e
- TLSH
  T163313115C8A14CFF05BA6A6DAD99DA53E3A0831339264CA7FAF9910C3F775353002EC9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  CPM2_Trainer_v1.0/readme.txt
- Size 3KB
- SHA256 115a79e29134668ed42c7aad98f9b954245ecdeaae102044fb973272d4db4853
- MD5 534fb47bd85fa0af9ecaf66099a8b1db
- SHA1 1fd3ea080b42aa36aeb5c62cb1f88cae086dd2fb
- SHA512 9fcd6b402435dd2ac7eeadf197c6f8a7442b74c7e60962c9910f7c1b28619c4e9308e6cf143c7cc259d735be32ed915f9b3dd5fee883636444bf780f7c633bfb
- TLSH
  T1AD61797F535A316A3B7B550F5A523202F4233062A3A665573CE6B028DD3DF0EEBA0345
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7