Analysis
-
max time kernel
129s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
26-03-2023 00:05
General
-
Target
sidify-music-converter.exe
-
Size
127.7MB
-
MD5
5d81a8b89b8c4f0188f121076690666f
-
SHA1
2ef1844257ae65d3e231a16a7f5fcd0014f6ad98
-
SHA256
5236a11246db86b322a47ad0a2d49af93f5243d227e2219d9c54cf048fe3ce48
-
SHA512
fc4075cef2032f54f3314cfe2b4e3ed81aa5159fe07eb90a9f1e050e631da01540ac8a29de755b691c8199ef0ec2f3fc2803a57571b602c19d8cd3a002cd95b5
-
SSDEEP
3145728:nQ55IT7cvRo54dkoBjb4DsclGeLXh/R0SOVpdgVYW6DYG:njTORb4YsPNqSOVpdNW6F
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 64 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\sidify-music-converter.exe"C:\Users\Admin\AppData\Local\Temp\sidify-music-converter.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\Sidify Music Converter.exeFilesize
122.7MB
MD5fb9a053f9a04e78611e60c76239399cc
SHA1d6e4f67e1e690e277833a244322c9906b02e5b94
SHA256f04b1da84f4a810345561336ce0e8f4a4491c377a03d335ac54ac6fd8d0de39b
SHA512d50f0df44d51735f84dc26776b71df99b61f9e8433a3984d1094911eade5eb9cd29e3041d94df858b25bd6024f4166bece05f966449593c7b5bd2e2802415710
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\core-js\modules\library\_regexp-exec.jsFilesize
9B
MD58733db8bb02cf7abd5d7d07601acc332
SHA19f8c54fe2dad4a5f9adbac98d1f814b1a6728bec
SHA256909c50607a29630c8b3ba42ccb712816ced4a96ad97d346cab88e3b0ebfc02a2
SHA512912775ee690a8850d06086fa3a000af67c38687d587972d021ece658f6e663a43bed3c0f6b88243b1ce211dbff6be1337513fca4778909a464f0293f365bf9e7
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\decamelize\licenseFilesize
1KB
MD5a12ebca0510a773644101a99a867d210
SHA10c94f137f6e0536db8cb2622a9dc84253b91b90c
SHA2566fb9754611c20f6649f68805e8c990e83261f29316e29de9e6cedae607b8634c
SHA512ae79e7a4209a451aef6b78f7b0b88170e7a22335126ac345522bf4eafe0818da5865aae1507c5dc0224ef854548c721df9a84371822f36d50cbcd97fa946eee9
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\domutils\LICENSEFilesize
1KB
MD5d5b9cb3bc7f6ffd7bea8661f30447c11
SHA1a4b5765e26b195e972e961e2c241a54eff51dafb
SHA256cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164
SHA512ea3679d79a1a7161ff68dd4265d7e89b9ee2bfff4f32d8da4802692d6fdc5c1706ff9edd5dce36ad4e88f7aa5f76061cf4cc8794a010efbf39b5bcb1ef08a550
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\electron-store\licenseFilesize
1KB
MD5915042b5df33c31a6db2b37eadaa00e3
SHA15aaf48196ddd4d007a3067aa7f30303ca8e4b29c
SHA25648da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
SHA5129c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\ffi-napi\deps\libffi\config\mac\ia32\ffitarget.hFilesize
4KB
MD54ef9928ec21c398681ed3357aa400c48
SHA15bafcdf7c4ff860ce7f94c5260159e7bf063243b
SHA256ce9a87677a9b9af9dcc6f8f632b62948214824174b65fe4361d3b662cc72aec0
SHA512c0f5f26b249cf3ca72b2d334008a7ab8b7332f286e57edf7c700b5c4a80960dbce14e3db940829134a3bc593a087f56b41afb757daf3f03e32611ab1172c1f6d
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\ffi-napi\deps\libffi\config\openbsd\x64\ffi.hFilesize
13KB
MD54c8fce7c4f0bee30b8f03d94fba5b66c
SHA14eb6b34a1547e2da9b1a0daa9c9f7a32569a03e5
SHA256bdd54f5f8517f32767d864921edb878224068a75eff7e0386a55105d61e44466
SHA5120f077d7c2a9801eab3134d4c56793f64fc1c8434e8eabe9c749d0f7d0d875b1750ad0f32873b49778bbb7b5864c280c4546fd72775ad0ec49eb091ec26ee3848
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\gcp-metadata\LICENSEFilesize
11KB
MD53b83ef96387f14655fc854ddc3c6bd57
SHA12b8b815229aa8a61e483fb4ba0588b8b6c491890
SHA256cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30
SHA51298f6b79b778f7b0a15415bd750c3a8a097d650511cb4ec8115188e115c47053fe700f578895c097051c9bc3dfb6197c2b13a15de203273e1a3218884f86e90e8
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\normalize-package-data\node_modules\semver\LICENSEFilesize
765B
MD582703a69f6d7411dde679954c2fd9dca
SHA1bb408e929caeb1731945b2ba54bc337edb87cc66
SHA2564ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
SHA5123fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\LICENSEFilesize
1KB
MD5ea817882455c03503f7d014a8f54f095
SHA1dd164bc611bca7ba8ead40ec4c2851081e5a16b9
SHA2561e76029602ae9b21cc4e612db2496d92febed882ba13ba745f8b3309e85f9d39
SHA5120ea343d0e696ba27877dc0611766c526aa73f6e7af46df5a0f83840dc4c7851fb5837b7f6bda8a014302bf877fe3b4b3e392b943cefb3af979e8afc67559a5ff
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\ensure\file.jsFilesize
1KB
MD564b5170e69a526a763550fa2ad46f6e7
SHA1d32cef7ebed1fbcf2af72481690042bf10cfa641
SHA256a55ad2781fce21f8318603b68b8bdc9595e696ae840022fe006be21ad58412ff
SHA5128e14b3317ed09cf5afb3b43cc646305869ed9c19612bbeb8a6cb2636d24cdc639de55eea9bc02ffa2cc8dfe6287d0922039ce70dd197ca83d77564b49ef9b40e
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\ensure\index.jsFilesize
623B
MD527a43257b6009138ffaa8a7462ddba66
SHA168e93d6534353e9665f5d954de79edb27297b68f
SHA2566c8e1d92d85d04c25c1a076b1270e26dfaa36583ba95d6d5b7874f3b1700cead
SHA5127957919ba39c0cdb4c9ae7b1a72e2493ec199aa58d5306bb263b6b0038e6428fe4183897f9a2c720957db9a79000ad23f822fcc03aaaee032fabcbae1003305d
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\ensure\symlink-type.jsFilesize
698B
MD5155e5c9621a19c25c4491e39807d56a5
SHA1a7303f6372ea7442c2750c3e1de89802c06e61b4
SHA2569cc0b6884cf394e8bebd149fae5ce82124ec8d19552c570b9873f46ad2b9856d
SHA5129009c9b793a758b0e103a40e967a07fdade1494ae2e021981f62e0d25102fb85b47b048ef89a6915137f07581357483e5bcb2be1e2697a7edb86a4c285145c38
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\json\index.jsFilesize
509B
MD565c99247836f90e407100d7e5a5678f1
SHA1f538a10df9409e9d86f7425494c71a447b5eb03a
SHA256984c3badc1522a11a7ea91df9f4f31b4e4faf7d18f489d496d06449d361c3fd1
SHA5120046b7e2d19fe0381f74f43589a9c95a325fd6d18d930c9309abff838dad378294771c21dbf5a03d5b7426197e8698f2d5d54131bf846794c914d8a35673ff9f
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\json\jsonfile.jsFilesize
291B
MD57d102112627165675ef82fa088f74a79
SHA11297c067a16ad6bd438f7c6ab0a5da1a35036472
SHA256857ad5cc1569d6455e53ed4be618d836257a0fce5d4db3bcda49c5510ea4b26a
SHA512c7133fae55697a6a78d027e698acaa4b8b77947d0b17864aa253fba9dcd52b3ab8b03e1119e98841f009d0305c460afc88d7466f8f2349ca67ca32e5bf65d366
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\json\output-json-sync.jsFilesize
375B
MD5fb4f4c64e393e7c204005a5e584f4c0a
SHA1f7493b6a58851fb7581145f9e552a3fdb9c58a3e
SHA256f8388235c1188eb35cdb7790829009207931f983933fedd7812ae2138f9124e3
SHA51240a2bdfb3569dc05cf4c77f21d86d985d281eb91dd3f17c12d515ed3ae2acf780727106c00191367bed3ffacba4ff10aed6181003666435ef2ab4cb74c24d094
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\json\output-json.jsFilesize
657B
MD550bdcdd65fe055450aa2f6cc19b7091a
SHA1f5c69a2e7862acbfd3fcc3046df6cbc9b7228299
SHA25695d5328ff48a993a442dd537e362f5bc19ec60cd205683d3f401cc561d59615f
SHA51222466635b4887fd96861102621f6ec500c09e7571444fb173f2f27a0dc7102f17440d050a25e582923232533095f371beb9f52314f85735b9411b9f5101e6179
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\mkdirs\mkdirs.jsFilesize
1KB
MD522bc944ac5bfd0fd7698a2138494e2d5
SHA16d9d5a662a7d1defd64be18ec7b21cc201b8b7bc
SHA256f1e959fdf83c06a9434df900f81c4372c5948a486de9c398ef5e1667dc4c67df
SHA5124805a8dbe42de9d6d565057ebcf5049589f758499223955c32f908f1a3274a2ebf1e28d2828cac428ca1578a5b1b1b4304cab261384f41af9319ee010459ecc9
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\mkdirs\win32.jsFilesize
517B
MD5e448738ca3b525573489825507eb9417
SHA158e782f3ffc3b048fc780ad54670e6e5d25abc5b
SHA256a58409301aa73ea6e2ed07dc1278638efec23066f20d16f295ddcd1d1805a61c
SHA512e9c4f5b4241515aa90ea883c9227307b0f10082b3b161a6240234dc9cdf9a7cb8b91c80097e39cb19dc9b7f5c61b93ab48b7f9c2882e02a06b9e0085e85f8749
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\path-exists\index.jsFilesize
263B
MD5dfb2813673ea5279a9aa7305e5fe33f3
SHA16e6491c1ab3389433d1b39a33b3ac8760649a2c8
SHA2565ce096c95daec0259817248921b39a9e0df4d342db171138ccb62440cc7a0cbe
SHA51253d93b66ed4a2eca23046e6f2b08fcbe4cde40a2b841ab38db838ac75b0882947371024cb74ae43d2c9a2e095e2457e2207979c45f07d46e6e2b5f99efcfc794
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\remove\index.jsFilesize
165B
MD5e8c6a5092ac319dec6888ff3686e1dd5
SHA143a7630664db987ce37fc634b7474b6b9428ab4e
SHA256dff95c5640a0b4b769290126940a7683e0e6d29ec591df63b7296712f81d9c56
SHA512279cd38d75bbe85536c175f6080ed91891a90e15ae81da328b465049ee6a1593d721481f060058280ecb29e2b05e4caa8dd141983fdaa66cdd95fec3123a6642
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\read-config-file\node_modules\fs-extra\lib\util\utimes.jsFilesize
2KB
MD5551e957f5fff4c9b64be6358b5292db7
SHA1519c3dcfbd5d695328b4b0cf039dec4ccc820994
SHA25635541d309c85b8b6f0dab9dbc5f93d7f7a3db30fa41718655a9cb4bb5932fc93
SHA5120370aa09a908df15ed81c97c139628d496d8342e03f7dfcd0f32b7234d0ee943bbe93822d331ccdc86fd6c8be2292b2774c8dc87a4a82501eea6727d61172180
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\temp-file\node_modules\fs-extra\lib\output-file\index.jsFilesize
947B
MD5b0adfc74c8e51ce2ab659bfc13752ed3
SHA11b0879db53a00bbfeddcfdc0c190901387bab7bd
SHA256a27d1a72ed1ecddffc57e70187a4b72467ed0dd34092b7e3d2817b9f4359ab5d
SHA5124bd96fa626592e856431c3da18f7f2c5262fcf7f8fc95a4fa8b3ecd6bd7f53e82ee27d3255711df0addaaaa3fc7ba5e11104dd448f90f490e5517eabc1cdad42
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\node_modules\type-fest\licenseFilesize
1KB
MD5d5f2a6dd0192dcc7c833e50bb9017337
SHA180674912e3033be358331910ba27d5812369c2fc
SHA2565c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
SHA512d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2
-
C:\Program Files (x86)\Sidify\Sidify Music Converter\resources\com.sidify.spotifyconverter\resource\img\product-support\logo.pngFilesize
33KB
MD5eac68de0a33db710e6de3e4ffaa01df4
SHA156bede64568ebcaf1f7f98a5eeccc63621eca02a
SHA2567dfff6bfa80692008dafed7ceef736582ea2bc740ab831890fdc7f0d0341858c
SHA51251bc87550602230135b4d3061ad2bde2ffcd3d2083f7dc798f87b1c4ba72bf0f482d27c09c4c7a90ed9c3d37b2a052626e5517d4f8c85e4398b3c9dac364dfcd
-
C:\Users\Admin\AppData\Local\Temp\nsx1B2B.tmp\AnvsoftNsisPlugin.dllFilesize
1.1MB
MD50929466d9848e3f63841d7f005a97080
SHA18a20db1102d2051c01a8ccc40d5717736dc37ae0
SHA256c0ac3ddeaa391c043bf53d78e8616a237ca5123ea828387a5319a18c654a468c
SHA512666b6884135392d33238f18c163274865c80d0bd28aeb03fa242561a5d4d28a717bd9ab8d9b85ac12075d47f33d3804323e93e3608f6f7c34a19c5a627d6b0af
-
C:\Users\Admin\AppData\Local\Temp\nsx1B2B.tmp\System.dllFilesize
11KB
MD575ed96254fbf894e42058062b4b4f0d1
SHA1996503f1383b49021eb3427bc28d13b5bbd11977
SHA256a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
SHA51258174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
-
C:\Users\Admin\AppData\Local\Temp\nsx1B2B.tmp\nsDialogs.dllFilesize
9KB
MD5ca95c9da8cef7062813b989ab9486201
SHA1c555af25df3de51aa18d487d47408d5245dba2d1
SHA256feb6364375d0ab081e9cdf11271c40cb966af295c600903383b0730f0821c0be
SHA512a30d94910204d1419c803dc12d90a9d22f63117e4709b1a131d8c4d5ead7e4121150e2c8b004a546b33c40c294df0a74567013001f55f37147d86bb847d7bbc9
-
C:\Users\Admin\AppData\Local\Temp\nsx1B2B.tmp\nsProcess.dllFilesize
4KB
MD5f0438a894f3a7e01a4aae8d1b5dd0289
SHA1b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA25630c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
SHA512f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
-
C:\Users\Admin\AppData\Local\Temp\nsx1B2B.tmp\res\slide00.pngFilesize
26KB
MD50e4b145f519fc7e6d98f477f0dbc5ac2
SHA16eb1ec832f1dda9c3719af77e20f68558dbee463
SHA256dc8424d80e064c7b0fc0ee52cbbefebbd5bda21b810a6b95406afccf849f3296
SHA512cb563ecfb023ac73758d91da9af8ceb6991daa430a1204b4a4b5d312e95b360317a059cc065eaa1cd294d218af7d015294657f9a9737cd9cad4382fbf3b9a430
-
C:\Users\Admin\AppData\Local\Temp\nsx1B2B.tmp\res\slide01.pngFilesize
26KB
MD55c9a8bb251e2114f784a7502df308a58
SHA1fb8d3202f97e88164a8c75124c01612af991b9dd
SHA256b46f027c8cc0fd2dadfb02feb9445d5099da23fb5d22ba34982c49cc91cd4a9f
SHA512399e86cb2cf5a8de737b944690e7064630e5d16a6616bdd3018a020ed388cb0e909c96c971ff69509e9305767dbba9997c813afb416f28ce434dfa63728f1290
-
C:\Users\Admin\AppData\Local\Temp\nsx1B2B.tmp\res\slide02.pngFilesize
19KB
MD53d8054974417ccc561b15650c7299b15
SHA16754d98a432d1566d614e5319178bd3d7aa0c639
SHA256e4d0610dd3a46483e5c9321ae7246e1c7fd8fafc875a22e40601aa5c8f22c333
SHA512f311f9577f85f67a8f6621ac53e3e4a2b9d4bc5a85dfe5a9a5126802be9ed714c4c7a805edfda289bdc111c6fed893d8b861806ba38516c50cfa75359cf059c4
-
C:\Users\Admin\AppData\Local\Temp\nsx1B2B.tmp\res\slide03.pngFilesize
18KB
MD5a28cea98c3a6b0aa5b675ac4d8a1a4c4
SHA1d3e179184ec7b27fa9dd87c691cb11bf09668f28
SHA25659ace6c5f1d5e7d79cd5a75689ba1b1940317a90fb6e67a4b9a0ecb84dd6a511
SHA5122d39845a2a8d69d93370a82f38b4f688930835948c0ad295cad469f6d24573c4af6fe2dc0a5253453a385f22b349cf264f7d97459a2c022b8de87293fb4b65af
