Overview
overview
8Static
static
4Serilog.dll
windows7-x64
1Serilog.dll
windows10-2004-x64
1Setup.exe
windows7-x64
8Setup.exe
windows10-2004-x64
7Seven.dll
windows7-x64
1Seven.dll
windows10-2004-x64
1V2.dll
windows7-x64
1V2.dll
windows10-2004-x64
1d2.dll
windows7-x64
1d2.dll
windows10-2004-x64
1data/App/D...p2.scr
windows7-x64
data/App/D...p2.scr
windows10-2004-x64
data/App/D...p3.scr
windows7-x64
data/App/D...p3.scr
windows10-2004-x64
data/App/D...p5.scr
windows7-x64
data/App/D...p5.scr
windows10-2004-x64
data/App/D...p7.scr
windows7-x64
data/App/D...p7.scr
windows10-2004-x64
data/App/D...p8.scr
windows7-x64
data/App/D...p8.scr
windows10-2004-x64
data/App/D...p9.scr
windows7-x64
data/App/D...p9.scr
windows10-2004-x64
data/App/P...re.dll
windows7-x64
1data/App/P...re.dll
windows10-2004-x64
1data/App/P...pa.exe
windows7-x64
data/App/P...pa.exe
windows10-2004-x64
data/App/x...al.pdf
windows7-x64
1data/App/x...al.pdf
windows10-2004-x64
1data/App/x...ll.dll
windows7-x64
1data/App/x...ll.dll
windows10-2004-x64
1data/App/x...64.dll
windows7-x64
8data/App/x...64.dll
windows10-2004-x64
8Analysis
-
max time kernel
153s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
24-10-2022 13:25
Behavioral task
behavioral1
Sample
Serilog.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Serilog.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
Setup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Seven.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Seven.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
V2.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
V2.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
d2.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
d2.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap2.scr
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap2.scr
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap3.scr
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap3.scr
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap5.scr
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap5.scr
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap7.scr
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap7.scr
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap8.scr
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap8.scr
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap9.scr
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap9.scr
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
data/App/Program Files/Common Files/VST2/Propellerhead Software/ReWire/ReWire.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
data/App/Program Files/Common Files/VST2/Propellerhead Software/ReWire/ReWire.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
data/App/Program Files/Common Files/VST2/zalupa.exe
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
data/App/Program Files/Common Files/VST2/zalupa.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
data/App/x64/ASIO4ALL v2/ASIO4ALL v2 Instruction Manual.pdf
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
data/App/x64/ASIO4ALL v2/ASIO4ALL v2 Instruction Manual.pdf
Resource
win10v2004-20220901-en
Behavioral task
behavioral29
Sample
data/App/x64/ASIO4ALL v2/asio4all.dll
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
data/App/x64/ASIO4ALL v2/asio4all.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
data/App/x64/ASIO4ALL v2/asio4all64.dll
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
data/App/x64/ASIO4ALL v2/asio4all64.dll
Resource
win10v2004-20220812-en
General
-
Target
data/App/x64/ASIO4ALL v2/ASIO4ALL v2 Instruction Manual.pdf
-
Size
247KB
-
MD5
882f5c35fe9bd596cef83b7582a6b47b
-
SHA1
70ebbd871b4e1b33487178e8e9b017b9c15f3f73
-
SHA256
94ce78f6b9b6d42c2c1a149e074e7f3aa2394dc5be002996a16d0b425a7a3f55
-
SHA512
3a61411a1bb4872f626ebce8bf8c7046ea20f01f7bd66caf051f276e0ec52a4359a6b6c4c0d5a84e4528f5220c67e49f57f309f497d8da3edd25b39ff328702a
-
SSDEEP
6144:Yen2ej43h1ghTADBNh3tc3KVJ3crl26aXq+3+U/V:bn2f3h1gEIaVJ3+PUq+uU/V
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 604 AcroRd32.exe 604 AcroRd32.exe 604 AcroRd32.exe 604 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/604-54-0x0000000075451000-0x0000000075453000-memory.dmpFilesize
8KB