Overview

overview

8

Static

static

1

Voice.ai-D...f7.exe

windows7-x64

8

Voice.ai-D...f7.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Voice.ai-Downloader-alphaver-9991b4d781284e828e20eeca9534bcf7.exe

  • Size

    476KB

  • Sample

    230704-2t11wsbe71

  • MD5

    55ce9a9a56208d47a508f277af4a1f84

  • SHA1

    353b99a87e7ba8e0c9866e9bf5bc7a56628a3cba

  • SHA256

    bd599fe01019469d0f408733761a9785c65281d5a870eec8088472e81fa0f65b

  • SHA512

    dd93b798c29a5b502980256f5619c97b56c43003d8ca19dfc0c916bdfaf4c09f5f0941f9be2e4ace6a71f639bf47303d08d54aa8888bb8a7b125e08cd9f8da13

  • SSDEEP

    3072:AkBGWOsTIJgIDU5A/cto68pMABlZQ2wpFD0raM6GYDxJ0yQfxJG:A1ssjn5Mp2w7g+MbSt

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      Voice.ai-Downloader-alphaver-9991b4d781284e828e20eeca9534bcf7.exe

    • Size

      476KB

    • MD5

      55ce9a9a56208d47a508f277af4a1f84

    • SHA1

      353b99a87e7ba8e0c9866e9bf5bc7a56628a3cba

    • SHA256

      bd599fe01019469d0f408733761a9785c65281d5a870eec8088472e81fa0f65b

    • SHA512

      dd93b798c29a5b502980256f5619c97b56c43003d8ca19dfc0c916bdfaf4c09f5f0941f9be2e4ace6a71f639bf47303d08d54aa8888bb8a7b125e08cd9f8da13

    • SSDEEP

      3072:AkBGWOsTIJgIDU5A/cto68pMABlZQ2wpFD0raM6GYDxJ0yQfxJG:A1ssjn5Mp2w7g+MbSt

    Score
    8/10
    discoverypersistence

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks