Overview
overview
3Static
static
3MTalk.zip
windows7-x64
1MTalk.zip
windows10-2004-x64
1MTalk/MTalk.exe
windows7-x64
1MTalk/MTalk.exe
windows10-2004-x64
1MTalk/Open...c.meta
windows7-x64
3MTalk/Open...c.meta
windows10-2004-x64
3MTalk/Open...n.meta
windows7-x64
3MTalk/Open...n.meta
windows10-2004-x64
3MTalk/Open...ar.bin
windows7-x64
3MTalk/Open...ar.bin
windows10-2004-x64
3MTalk/Open...n.meta
windows7-x64
3MTalk/Open...n.meta
windows10-2004-x64
3MTalk/Open...f.meta
windows7-x64
3MTalk/Open...f.meta
windows10-2004-x64
3MTalk/Open...ix.bin
windows7-x64
3MTalk/Open...ix.bin
windows10-2004-x64
3MTalk/Open...n.meta
windows7-x64
3MTalk/Open...n.meta
windows10-2004-x64
3MTalk/Open...f.meta
windows7-x64
3MTalk/Open...f.meta
windows10-2004-x64
3MTalk/Open...f.meta
windows7-x64
3MTalk/Open...f.meta
windows10-2004-x64
3MTalk/Open...f.meta
windows7-x64
3MTalk/Open...f.meta
windows10-2004-x64
3MTalk/Open...ys.dic
windows7-x64
1MTalk/Open...ys.dic
windows10-2004-x64
1MTalk/Open...c.meta
windows7-x64
3MTalk/Open...c.meta
windows10-2004-x64
3MTalk/Open...nk.dic
windows7-x64
1MTalk/Open...nk.dic
windows10-2004-x64
1MTalk/Open...c.meta
windows7-x64
3MTalk/Open...c.meta
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
MTalk.zip
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
MTalk.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
MTalk/MTalk.exe
Resource
win7-20230703-en
Behavioral task
behavioral4
Sample
MTalk/MTalk.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
MTalk/OpenJTalk/dic/mac.meta
Resource
win7-20230705-en
Behavioral task
behavioral6
Sample
MTalk/OpenJTalk/dic/mac.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
MTalk/OpenJTalk/dic/win.meta
Resource
win7-20230703-en
Behavioral task
behavioral8
Sample
MTalk/OpenJTalk/dic/win.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
MTalk/OpenJTalk/dic/win/char.bin
Resource
win7-20230703-en
Behavioral task
behavioral10
Sample
MTalk/OpenJTalk/dic/win/char.bin
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
MTalk/OpenJTalk/dic/win/char.bin.meta
Resource
win7-20230703-en
Behavioral task
behavioral12
Sample
MTalk/OpenJTalk/dic/win/char.bin.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
MTalk/OpenJTalk/dic/win/left-id.def.meta
Resource
win7-20230703-en
Behavioral task
behavioral14
Sample
MTalk/OpenJTalk/dic/win/left-id.def.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
MTalk/OpenJTalk/dic/win/matrix.bin
Resource
win7-20230703-en
Behavioral task
behavioral16
Sample
MTalk/OpenJTalk/dic/win/matrix.bin
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
MTalk/OpenJTalk/dic/win/matrix.bin.meta
Resource
win7-20230703-en
Behavioral task
behavioral18
Sample
MTalk/OpenJTalk/dic/win/matrix.bin.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
MTalk/OpenJTalk/dic/win/pos-id.def.meta
Resource
win7-20230703-en
Behavioral task
behavioral20
Sample
MTalk/OpenJTalk/dic/win/pos-id.def.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
MTalk/OpenJTalk/dic/win/rewrite.def.meta
Resource
win7-20230705-en
Behavioral task
behavioral22
Sample
MTalk/OpenJTalk/dic/win/rewrite.def.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
MTalk/OpenJTalk/dic/win/right-id.def.meta
Resource
win7-20230703-en
Behavioral task
behavioral24
Sample
MTalk/OpenJTalk/dic/win/right-id.def.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
MTalk/OpenJTalk/dic/win/sys.dic
Resource
win7-20230703-en
Behavioral task
behavioral26
Sample
MTalk/OpenJTalk/dic/win/sys.dic
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
MTalk/OpenJTalk/dic/win/sys.dic.meta
Resource
win7-20230703-en
Behavioral task
behavioral28
Sample
MTalk/OpenJTalk/dic/win/sys.dic.meta
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
MTalk/OpenJTalk/dic/win/unk.dic
Resource
win7-20230703-en
Behavioral task
behavioral30
Sample
MTalk/OpenJTalk/dic/win/unk.dic
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
MTalk/OpenJTalk/dic/win/unk.dic.meta
Resource
win7-20230703-en
Behavioral task
behavioral32
Sample
MTalk/OpenJTalk/dic/win/unk.dic.meta
Resource
win10v2004-20230703-en
General
-
Target
MTalk.zip
-
Size
15.0MB
-
MD5
775d8921dc0116a6d230b23a490615b3
-
SHA1
ba2ec16ae31d6c1313f5fd5f248e9ed659dfe58c
-
SHA256
d7255462d3c048991f6cb44d9b0356f7f9e2a67c51a598c9082f6da88fbc8c27
-
SHA512
4ddb7bd5a0278ac5fa8c92a624aa9a0f85e91665545fca1a422fb9792a61950ed7dc88a378751d59449ff1d442f421a28d99b28ebd1e773e7949e4bdab35e323
-
SSDEEP
393216:LfN7J5qQ311ndx/22WjZONNiLlWRul0vsBiUaM0Je7Vs/GT:57f11l/dWjZON8LlW5hehx
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/MTalk/MTalk.exe unpack001/MTalk/OpenJTalk/open_jtalk.exe unpack001/MTalk/websocket-sharp.dll
Files
-
MTalk.zip.zip
-
MTalk/MTalk.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MTalk/OpenJTalk/dic/mac.meta
-
MTalk/OpenJTalk/dic/win.meta
-
MTalk/OpenJTalk/dic/win/char.bin
-
MTalk/OpenJTalk/dic/win/char.bin.meta
-
MTalk/OpenJTalk/dic/win/left-id.def.meta
-
MTalk/OpenJTalk/dic/win/matrix.bin
-
MTalk/OpenJTalk/dic/win/matrix.bin.meta
-
MTalk/OpenJTalk/dic/win/pos-id.def.meta
-
MTalk/OpenJTalk/dic/win/rewrite.def.meta
-
MTalk/OpenJTalk/dic/win/right-id.def.meta
-
MTalk/OpenJTalk/dic/win/sys.dic
-
MTalk/OpenJTalk/dic/win/sys.dic.meta
-
MTalk/OpenJTalk/dic/win/unk.dic
-
MTalk/OpenJTalk/dic/win/unk.dic.meta
-
MTalk/OpenJTalk/open_jtalk.exe.exe windows x86
a18b217799c98b7213da5eae776fa38e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutClose
waveOutWrite
waveOutReset
waveOutUnprepareHeader
waveOutOpen
waveOutPrepareHeader
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
kernel32
SetEndOfFile
EnumSystemLocalesW
WriteConsoleW
CreateFileW
InterlockedCompareExchange
InterlockedExchangeAdd
UnmapViewOfFile
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
CreateFileA
GetFileSize
MapViewOfFile
CreateFileMappingA
Sleep
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
HeapFree
HeapAlloc
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetStdHandle
GetFileType
GetStartupInfoW
RtlUnwind
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
WriteFile
GetModuleFileNameW
LoadLibraryExW
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
RaiseException
ReadFile
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointer
HeapReAlloc
GetStringTypeW
SetStdHandle
OutputDebugStringW
LoadLibraryW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
Sections
.text Size: 334KB - Virtual size: 334KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MTalk/OpenJTalk/voice/mei_normal.meta
-
MTalk/OpenJTalk/voice/miku.meta
-
MTalk/OpenJTalk/voice/mira/miku.htsvoice.meta
-
MTalk/OpenJTalk/voice/mira/mira.htsvoice
-
MTalk/OpenJTalk/voice/nitech_jp_atr503_m001.meta
-
MTalk/htmlcontents/index.html.html .js
-
MTalk/htmlcontents/localhostSignedByCA.pfx
-
MTalk/readme.txt
-
MTalk/websocket-sharp.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ