bdce81d7b0f5240512700d4d2eb01ff2853abfb7b303d93c26812c58081391c8

Sharing

Copy URL Twitter E-mail

General

Target
SPEED.rar
Size 10.1MB
Sample261102-td291sdv3j
SHA256 bdce81d7b0f5240512700d4d2eb01ff2853abfb7b303d93c26812c58081391c8
MD5 361995e0f574121f381eb5f7b3624975
SHA1 e54ab6939fbba08667aa6e397da660684a652de8
SHA512 8585d05385fff5d19df39fc57209edc36e6f65ed1f22b55f7f868b8ca126b65d6af7e5633ccb2ee69f140d2a17a026e27016eaa58dd8f5b057969027681ecaa5
SSDEEP 196608:wzDFmM06VlBM//Es+gfGW4K7iPvjJG0TwWpojxkm/UinZ3sfQfAdSt6H:w3FX06V7Ox8W4K2PVG00WpoWiFOQfAIU
TLSH
T14CB633EA9BE255FD8B281808E05604372FFBFBB159BB749716354BE23DE5C1811E8423
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution vmprotect

Malware Config

Targets

- Target
  SPEED.rar
- Size 10.1MB
- SHA256 bdce81d7b0f5240512700d4d2eb01ff2853abfb7b303d93c26812c58081391c8
- MD5 361995e0f574121f381eb5f7b3624975
- SHA1 e54ab6939fbba08667aa6e397da660684a652de8
- SHA512 8585d05385fff5d19df39fc57209edc36e6f65ed1f22b55f7f868b8ca126b65d6af7e5633ccb2ee69f140d2a17a026e27016eaa58dd8f5b057969027681ecaa5
- SSDEEP 196608:wzDFmM06VlBM//Es+gfGW4K7iPvjJG0TwWpojxkm/UinZ3sfQfAdSt6H:w3FX06V7Ox8W4K2PVG00WpoWiFOQfAIU
- TLSH
  T14CB633EA9BE255FD8B281808E05604372FFBFBB159BB749716354BE23DE5C1811E8423
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SPEED/Speed/Setup.dll
- Size 528KB
- SHA256 6d0a06b90213f082cb98950890518c0f08b9fc16dbfab34d400267cb6cdadeff
- MD5 b7c9f1e7e640f1a034be84af86970d45
- SHA1 f795dc3d781b9578a96c92658b9f95806fc9bdde
- SHA512 da63992b68f1112c0d6b33e6004f38e85b3c3e251e0d5457cd63804a49c5aa05aa23249e0614dacad4fec28ca6efdb5ddee06da5bfbfa07e21942976201079f3
- SSDEEP 6144:FshVOadaiL9mUHQMpgL8LgpqClZNKX6SumisBEb/NUidzSky3uDMK/LXTMBQqN5T:hOL9J2L8E5VKKSuLGEhXGstCXoYkc7BV
- TLSH
  T1D0B47CA9A6781AB9FD3BD13AC8834917F7B234110B62DADF02E166750F137E2167B314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  SPEED/Speed/Speed v3.exe
- Size 10.2MB
- SHA256 3028dcb3151b2322ba4005c4316ed1b73709be31aa47e7d94b901c912c15f71f
- MD5 3daa275794695442e785614061aa4336
- SHA1 dc4746e32e61a0780ac4229d205ad3e673c08ea6
- SHA512 7f1a71d7530dd5757201898c168f701e718b49ffebf757fb0945d759177b8fdefba7c54f37e98fbcb67edb0455b49a6887f8ded5eb60757b8643e52c8c4691b2
- SSDEEP 196608:WYXelU0LUurDa7VO7pBrGHxUvf0BEIYdhctIgQPMkJJcCCldkaNNUvX:xOZFDVImvf0BENDxWlldksNU
- TLSH
  T198B623AE611C73A8D02E89344432BC49E1AA211F4DF689FDB3DBDBC45756423CA07B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Drops file in System32 directory
behavioral5 behavioral6
- Target
  SPEED/Speed/iobitdefrag64.sys
- Size 97KB
- SHA256 003e370b2065138dd6e5b7fdd8348b7df075f5822e94bf061de04f92c93b2370
- MD5 43a67ed9d9e35254a09060d3e685c81d
- SHA1 112ea00e4d32155759ae6e2013eb4e5190f88629
- SHA512 7292bd26f3b56795ba4ea7ca7d26412f8ab2e8ef79024ae0f885336172ffb37a0727c3f25a7e9d5bbc190d3398a4e96c6fd0639cf2cdfb65efd3b951ec7a410a
- SSDEEP 1536:SMxTUWdWSp1zVnTG/mYSirUxnyGaFx9sqJiLdyN7MiPx7:PkSLz50mYSiWyGatELdyN7hx7
- TLSH
  T1F3A3E916E7A650E4DC76D17D8BA2362A79B038184B356BEB47108B620F71FE4EB3D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  SPEED/Speed/lua53-64.dll
- Size 528KB
- SHA256 6d0a06b90213f082cb98950890518c0f08b9fc16dbfab34d400267cb6cdadeff
- MD5 b7c9f1e7e640f1a034be84af86970d45
- SHA1 f795dc3d781b9578a96c92658b9f95806fc9bdde
- SHA512 da63992b68f1112c0d6b33e6004f38e85b3c3e251e0d5457cd63804a49c5aa05aa23249e0614dacad4fec28ca6efdb5ddee06da5bfbfa07e21942976201079f3
- SSDEEP 6144:FshVOadaiL9mUHQMpgL8LgpqClZNKX6SumisBEb/NUidzSky3uDMK/LXTMBQqN5T:hOL9J2L8E5VKKSuLGEhXGstCXoYkc7BV
- TLSH
  T1D0B47CA9A6781AB9FD3BD13AC8834917F7B234110B62DADF02E166750F137E2167B314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  SPEED/Speed/vmdisk.img
- Size 466KB
- SHA256 c98759df4ced3dc19de1265f96c2384a2637984c09c170c1be7858a5740bf614
- MD5 c50b9376df81869850f0ea23dd994a16
- SHA1 2aedb88803e3f9f895e8174e16f31d9df022778c
- SHA512 980fd6e89b37738d4674311fe9983370255e3432b32127a7db794f0b58fc3cc0000d75adf334ff618c5323014e2cff7d0853a5da0a5b7c032a92ae356125c226
- SSDEEP 12288:UaxEQZz4HduTmK78J/eT9kwx/faKcE25jQ/ayPImEoL:XO03TF78JS9kwx/faKcE25jQ/ayPImEo
- TLSH
  T1B9A4F937E7A39168D117E2781B8BC6D1E5B078B80734A8CF73E609766B226904F2D3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

VMProtect packed file

Drops file in System32 directory

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11