9ae33e03eaf937b60fe50975c7dc729d3be42fde60245ee9957b8472cb09bd64

Sharing

Copy URL

Twitter E-mail

General

Target

soundpad-cracked-by-2u-main.zip
Size

8.8MB
Sample

230402-wdqmbshf65
MD5

5d91e46d62c1daf9f8c03657ece66d1a
SHA1

345e5ed96c25398495f9d12fb8dc4fec82da5979
SHA256

9ae33e03eaf937b60fe50975c7dc729d3be42fde60245ee9957b8472cb09bd64
SHA512

1eeef96e955db89f332f3d609f8ff9a7e44ee0aabacee4eae6a639a3e66d17f2aa570cb07518a5f74a8db2d30a968f3721a6c752be48123b7fe915e46743d147
SSDEEP

196608:dW9Gbo1us9TLaWbrtbWvD7sndjlZIRieiUU0ReGexO0WTEyx:dWWo1us9CWb1WGjQBUGeGexOrTEO

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  soundpad-cracked-by-2u-main.zip
- Size
  
  8.8MB
- MD5
  
  5d91e46d62c1daf9f8c03657ece66d1a
- SHA1
  
  345e5ed96c25398495f9d12fb8dc4fec82da5979
- SHA256
  
  9ae33e03eaf937b60fe50975c7dc729d3be42fde60245ee9957b8472cb09bd64
- SHA512
  
  1eeef96e955db89f332f3d609f8ff9a7e44ee0aabacee4eae6a639a3e66d17f2aa570cb07518a5f74a8db2d30a968f3721a6c752be48123b7fe915e46743d147
- SSDEEP
  
  196608:dW9Gbo1us9TLaWbrtbWvD7sndjlZIRieiUU0ReGexO0WTEyx:dWWo1us9CWb1WGjQBUGeGexOrTEO
Score

1^/10
behavioral1 behavioral2
- Target
  
  soundpad-cracked-by-2u-main/README.md
- Size
  
  24B
- MD5
  
  2810905e3a4e5df09d27f3c9c6c3ea9b
- SHA1
  
  f1f1730dd83775e3b11b7a14896bd66fd329c62c
- SHA256
  
  40ad571dc0bec3c15625b301afd47dd3a33d1c5e4a38139143bc958411a80902
- SHA512
  
  b30f42cead1067574dd48d3e2680026d8cf61d07bdd9e0574291be6392654ded79f739e2e17d3d61aa5e51a4a0bbe65f87ba9e0bc5aa926617dca1dda3df5195
Score

3^/10
behavioral3 behavioral4
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/Profile/CRACKED BY Ray_Black/SteamUserID.cfg
- Size
  
  61B
- MD5
  
  153727cf7c0c2dcba555e2cafb579e98
- SHA1
  
  4ff945c2feff28ac936994aeed626caf17a37f45
- SHA256
  
  2c2f3f8d579f9d0703fe251d162456572c9d4c07408493a512b0f069bb892a98
- SHA512
  
  412af8e396b5eb13f33bb7d3c23591daf09e28abf131547299ba5c30c6935ca6620771b44fbea12050d1264cb91591f00a1bdedb4a51a9182ff81123f9ea8974
Score

3^/10
behavioral5 behavioral6
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/Soundpad.exe
- Size
  
  10.9MB
- MD5
  
  0ae4f60d72e0d1c159505500b8a08ebb
- SHA1
  
  bb352dafd3c3ebebb4414b799010fe5ebddbef44
- SHA256
  
  ed3371229647ef876b45cb5940e48b461df58d4e68ad4932f5877eba90c8d379
- SHA512
  
  88495911df544a04a4e09828ae10b57d3d945c41d6e28964c2d4d077afa43fec1c82a8ff6dcce57a3c7b9e5d02d1e47f800f557b022866f5f7be4a2db9b07536
- SSDEEP
  
  196608:fDRlger67uOemwy1LR/XU3gmsRM0wWM+wC89ooEvu:UerSwAVE3XsRMiJpsf
Score

7^/10

persistence upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Registers COM server for autorun
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral7 behavioral8
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/SteamConfig.ini
- Size
  
  135B
- MD5
  
  8aaae6e65f734e7f90b2d11966c76a16
- SHA1
  
  f910a899891026e6d22305d176a73d2588b99715
- SHA256
  
  c2702d244e84cb0abc4f964062b9ecf51b1697712ad4c03b37d345f93d045bba
- SHA512
  
  96f0c7cd0b8e2ce8365f907a03c8229ed733fdcd07a826d82aa242c870f5994d04b1987263ba2a8e0a314ab281d5cf9905cc562177e09b499a99fe3e8d3cfb5e
Score

1^/10
behavioral10 behavioral9
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/UniteFxControl.dll
- Size
  
  1.1MB
- MD5
  
  6ac19cffc0c58ce35ae704c381c4f702
- SHA1
  
  c43900c5d56d62311a337b04c9489afc1c75c175
- SHA256
  
  afe6075ea7dd1bdcbc47b38385216d11cdd5ebc3f82eeedfa6d766e9249d6252
- SHA512
  
  61197228b9a1bb9810c68cc04928fd47e2bbe78d36f71c4a2ee498742fea8fd6c950cf43578fa20c6009f1ed6343bf8ca7bfb155512018aac88a4191fad4f939
- SSDEEP
  
  24576:XBLW5gqPvbSfiCRcXw0qU6RmWByuAy5a/owH/1:ZqPvbv/Zwm4yi5aQwHN
Score

3^/10
behavioral11 behavioral12
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/UniteFxUpdate.dll
- Size
  
  442KB
- MD5
  
  0ee743073ee6b68f8222be2661d95315
- SHA1
  
  2e642772ec19edf73422fe25a8d45db1a006ff85
- SHA256
  
  562b17370c7283e92a3353b76ab2aefd301c2e78782fa60ec9ee35676ad44f96
- SHA512
  
  c3f2037bd37cef7978187f67f1d0633ee3067b4837e0ad9ae2a5c8efab8ec4ce6a14c1d88e200ffaa8677f74fd5995789297e6a7b5ac18d19dc9d53b4d9170ba
- SSDEEP
  
  6144:12UHPCFzuxTmVCp41NpA9+2pVbW+i6kdIkl7haKGrgEOHWeohg6yKJIGFEph:12NzSC1Na42ekuMs2eoqO+Dh
Score

1^/10
behavioral13 behavioral14
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/installscript.vdf
- Size
  
  631B
- MD5
  
  1a792aff29d6f07d1c3381634ba6baff
- SHA1
  
  f2c7bb49ccaf63ffcd38d06dd2d51095b08d4344
- SHA256
  
  270d2a3eef463b768ca4368e62444a7ccaff4e98c71f2ca05b721bfef2e03e05
- SHA512
  
  3971dee038f1cd1aacf9151196a53e2bfbf4bc9a665f60ae79309b5544d81a733e3f7b9db422e17c5a95ba2930248be408e6fbf877f8eb12235277f46af5a4f1
Score

3^/10
behavioral15 behavioral16
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/languages/cs/translation.mo
- Size
  
  48KB
- MD5
  
  5e8a5fee87f5795b0c3c8d02a6a83eff
- SHA1
  
  6f86c686a7f29260d7d9b03180488fe668765c47
- SHA256
  
  ca876dcfb11522ee63977c07e176cd3fdddc8bde374fde53a6a7367680638214
- SHA512
  
  13fbd8912a361b59bd23b9ecb2ad4a80e0f6e32fc91fcf0befda5d31b182b1f492cd0ca6c095550383e2fb75258d6fc6230ac5f70e34d18e0a4c65e90262a5ec
- SSDEEP
  
  768:4ZPGJavWhcadx7PW2DH3PdVvW/h7jUUhllX+XVSlngTvDpzWAAePn:4AJaehc6xDFDH3PW/hse+XVSlWpzWA9
Score

3^/10
behavioral17 behavioral18
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/languages/da/translation.mo
- Size
  
  46KB
- MD5
  
  aee77e5514dadabfc575808e3e3b4cd6
- SHA1
  
  a1518effa9c956e4048918f3c53a4b9b5ef11b26
- SHA256
  
  c954cca2b32bab1cb5a8a8a578329c72c49368598126b90ea480340b7aacd524
- SHA512
  
  0ea132359196b292d4de350172f5675baf1f1eaaee42e0075ff3d74362abff05214ed76f62da54d55817bca3c115699c6ba6f204b6a324809113760f0247e2e7
- SSDEEP
  
  768:4ZPGJn6rW6U7PW2DH3PdVvW/h7jocsAP+AVvmocV/ZVrMrtbwQFc:4AJn2YDFDH3PW/hgdAP+Yv9cxmJXc
Score

3^/10
behavioral19 behavioral20
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/languages/de/translation.mo
- Size
  
  49KB
- MD5
  
  6ff1d323c51c2ed88f05ee7ff468900f
- SHA1
  
  49c7d5042fc7644c094c3be52d7d0666c268accb
- SHA256
  
  5220672f99b439b1db77479ab170a5a0f2b65b4b14416b72447ded6f1ebcd40e
- SHA512
  
  32c065115ea0ebca406fb0d5831c39c79acb7c8e45941df8f0074a3ebd4077a61e5b8b6661a3a001114269b085877f3cdb39a456f0db42c5d492adcb06aca97b
- SSDEEP
  
  768:4ZPGJO77PW2DH3PdVvW/h7jCJrAWGNVu+6hI3uY11zxdHFXeZwxzU8d:4AJgDFDH3PW/hqJrbGNVKuLFywnd
Score

3^/10
behavioral21 behavioral22
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/languages/es_ES/translation.mo
- Size
  
  50KB
- MD5
  
  f0be4e99dca44e2aa70c3b32dccfa82a
- SHA1
  
  61c49931b877f4af8ede44dd9e29d2ff4fb7d420
- SHA256
  
  d35905c669534e8770849dd51ba74071836f43e1047a7df7ef99c373ca185c73
- SHA512
  
  eb32e5c6360822eed54c0274bd365db19cc69c56aee083ba17d07777b302c69554c50e16cf12e155fb53d35b2e34e4efdf27d1c960f1ab6f558e0628b32b300a
- SSDEEP
  
  768:4ZPGJC2pFxC07PW2DH3PdVvW/h7jdsSI6Nrc45OFHztG:4AJ5pFxFDFDH3PW/huFhG
Score

3^/10
behavioral23 behavioral24
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/languages/fi/translation.mo
- Size
  
  48KB
- MD5
  
  05561f37a16002c2ca8f65faef7d1749
- SHA1
  
  260d64b7e458039316001eb15b09d844e909135c
- SHA256
  
  8dcf58474fc5ab1514461e1f9b8e336ef0c13b49f26f7bceb14d477da7a85b6a
- SHA512
  
  7a3c4c8c11512383d9db9173caa4db6203bc21bc931c1bf3f5460296589cc41e71b30b20018e201c95ee7aeae34f0c4fb9016b8049d2142c927f091e30d2fa91
- SSDEEP
  
  768:4ZPGJyWk2M6bi7PW2DH3PdVvW/h7jfYPko2FAvikYPMt7i7:4AJyP2M62DFDH3PW/h3yj2qikYPMte7
Score

3^/10
behavioral25 behavioral26
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/languages/fr/translation.mo
- Size
  
  51KB
- MD5
  
  9fd6ad7c6bc2b8fa3b155a97f0326fbe
- SHA1
  
  862379e994419c9492b9f502cdbb3741f95fa54b
- SHA256
  
  bf44674158ed2dec81843c7bfd0dee6595bb36946bec92e09ecfb9943fd0e5a4
- SHA512
  
  c030d773818b6c0d41c09ad1ef2d965656708f8c53a1b8e6012d70a8059e25a5652fcd65d18a6be3d7b6ec1c99403068a6497178a40ecd3c075ee403365ed919
- SSDEEP
  
  768:4ZPGJS7PW2DH3PdVvW/h7jdfXRHVEzKDx0EyhtIRJl:4AJSDFDH3PW/hFwe7/
Score

3^/10
behavioral27 behavioral28
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/languages/it/translation.mo
- Size
  
  49KB
- MD5
  
  896a7d5d126e4473cedf237b76dbfae6
- SHA1
  
  9729f9fbbc1810b31ee86094d68edba2b4e1766b
- SHA256
  
  9e5fb77abbc5b636cca97637a07c9d40e03af74981afa2835900e3b65beeaf38
- SHA512
  
  052e16ffb72c3e9576fee2a2c4faf47fbfa443ceec7cae65f12312b56d998b4ea89ccd5bbd3e7993822812a3798892c31b429b4b4b6409dbc96e87719bd4870b
- SSDEEP
  
  768:4ZPGJfdV5iOoUh7PW2DH3PdVvW/h7jngOgZAPdUlLfci:4AJfdV5i/ODFDH3PW/hfgOgZIi1fci
Score

3^/10
behavioral29 behavioral30
- Target
  
  soundpad-cracked-by-2u-main/SoundPad/languages/ja/translation.mo
- Size
  
  54KB
- MD5
  
  d16294852611eb3fbe3d7407878148b0
- SHA1
  
  990c4500a0c11e82639d15c0bc66f4a0686b0540
- SHA256
  
  7a6b8050163aace177a004a2cf14eaa825229e7e3366318517f2ed434563cd87
- SHA512
  
  010a9a614c413ce5ba2ba1244e5c2c2420ed7c76be4fc20b4f01c4784fdeb7c39df7e9de98334a5327133557116c6d6cb6d44e346fb4e7f26288b1842382d257
- SSDEEP
  
  768:4ZPGJGCVca7PW2DH3PdVvW/h7jhQhq5Kzil6jwjohno:4AJGCiaDFDH3PW/h5Qq5Kzil6Aohno
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Loads dropped DLL

Registers COM server for autorun

UPX packed file

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32