Overview
overview
10Static
static
1Ableton Li...er.exe
windows7-x64
1Ableton Li...er.exe
windows10-2004-x64
10Ableton Li...er.exe
windows7-x64
1Ableton Li...er.exe
windows10-2004-x64
10Ableton.Ll...er.exe
windows7-x64
1Ableton.Ll...er.exe
windows10-2004-x64
10Ableton.Ll...te.exe
windows7-x64
1Ableton.Ll...te.exe
windows10-2004-x64
10Ableton.Ll...en.exe
windows7-x64
8Ableton.Ll...en.exe
windows10-2004-x64
8Analysis
-
max time kernel
64s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27-01-2023 11:26
Static task
static1
Behavioral task
behavioral1
Sample
Ableton Live 11 Suite Installer.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Ableton Live 11 Suite Installer.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Ableton Live 11 Suite Installer.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Ableton Live 11 Suite Installer.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
Ableton.Llive.Suite.11.2.6/Ableton Live 11 Suite Installer.exe
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
Ableton.Llive.Suite.11.2.6/Ableton Live 11 Suite Installer.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Ableton.Llive.Suite.11.2.6/Crack/Ableton Live 11 Suite.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
Ableton.Llive.Suite.11.2.6/Crack/Ableton Live 11 Suite.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
Ableton.Llive.Suite.11.2.6/R2R/Ableton_KeyGen.exe
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
Ableton.Llive.Suite.11.2.6/R2R/Ableton_KeyGen.exe
Resource
win10v2004-20221111-en
General
-
Target
Ableton Live 11 Suite Installer.exe
-
Size
6.3MB
-
MD5
05517715339d0202753043b809857877
-
SHA1
c3295ef7bfe8f474d468fa39ed67c65b66733163
-
SHA256
9a79efd66dafa62b75f8dfb77defa5ce06858c6501dbcc90930a959827583271
-
SHA512
75a125fe5fa11cba0b6d0545b5fdce3b0e0360dc4d3b2c10ee8d2bed81af31566f9f05dc02b6c5343257f4e8ad6f6b9ed0fae429b42682923999be2cd96c9d9b
-
SSDEEP
196608:xmD/cRu3LyA8OYtgd/bS/4jqJK7nmLAqq:xmq5KjS/ojnB
Malware Config
Extracted
raccoon
4ee4e2ee5aa36d394f5d44408a602375
http://168.119.60.182/
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes:
Ableton Live 11 Suite Installer.exepid process 2504 Ableton Live 11 Suite Installer.exe 2504 Ableton Live 11 Suite Installer.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
Ableton Live 11 Suite Installer.exepid process 2504 Ableton Live 11 Suite Installer.exe 2504 Ableton Live 11 Suite Installer.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2504-132-0x0000000000400000-0x0000000000DAF000-memory.dmpFilesize
9.7MB
-
memory/2504-134-0x0000000000400000-0x0000000000DAF000-memory.dmpFilesize
9.7MB
-
memory/2504-135-0x0000000000400000-0x0000000000DAF000-memory.dmpFilesize
9.7MB
-
memory/2504-136-0x0000000000400000-0x0000000000DAF000-memory.dmpFilesize
9.7MB