General

  • Target

    sidify-music-converter.exe

  • Size

    127.7MB

  • Sample

    230326-ac7csseg64

  • MD5

    5d81a8b89b8c4f0188f121076690666f

  • SHA1

    2ef1844257ae65d3e231a16a7f5fcd0014f6ad98

  • SHA256

    5236a11246db86b322a47ad0a2d49af93f5243d227e2219d9c54cf048fe3ce48

  • SHA512

    fc4075cef2032f54f3314cfe2b4e3ed81aa5159fe07eb90a9f1e050e631da01540ac8a29de755b691c8199ef0ec2f3fc2803a57571b602c19d8cd3a002cd95b5

  • SSDEEP

    3145728:nQ55IT7cvRo54dkoBjb4DsclGeLXh/R0SOVpdgVYW6DYG:njTORb4YsPNqSOVpdNW6F

Score
10/10

Malware Config

Targets

    • Target

      sidify-music-converter.exe

    • Size

      127.7MB

    • MD5

      5d81a8b89b8c4f0188f121076690666f

    • SHA1

      2ef1844257ae65d3e231a16a7f5fcd0014f6ad98

    • SHA256

      5236a11246db86b322a47ad0a2d49af93f5243d227e2219d9c54cf048fe3ce48

    • SHA512

      fc4075cef2032f54f3314cfe2b4e3ed81aa5159fe07eb90a9f1e050e631da01540ac8a29de755b691c8199ef0ec2f3fc2803a57571b602c19d8cd3a002cd95b5

    • SSDEEP

      3145728:nQ55IT7cvRo54dkoBjb4DsclGeLXh/R0SOVpdgVYW6DYG:njTORb4YsPNqSOVpdNW6F

    Score
    10/10
    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Tasks