Analysis
-
max time kernel
93s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
28/11/2023, 22:01
General
-
Target
Setup Audiolens v1.2.0.exe
-
Size
393.0MB
-
MD5
352aab786d3b494caab56cccef691058
-
SHA1
f091676fb82583eb779f9c9d11d3ab97aa64b509
-
SHA256
f7695730f1e5eaeaace310617f7c4174f63af6651fcce1de6572e19340df93d9
-
SHA512
55ac7b48dee59fb6d7b91060f7eee72bef3a5d246297fe04b172aa49dcefd0a7b18ede77361bbcc8899428b796cd87577f611517becc99bcdab72a1f5dc7ebc8
-
SSDEEP
12582912:5k0n3GZbJ9CkdaR/+znK/g8EVk6qSHMHvvw1zRcKMeeHkVshmWubL:KuYbJ97aMTK/gNVTqCMnyuP7HkV3tL
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 11 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 6 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup Audiolens v1.2.0.exe"C:\Users\Admin\AppData\Local\Temp\Setup Audiolens v1.2.0.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-OO0JT.tmp\Setup Audiolens v1.2.0.tmp"C:\Users\Admin\AppData\Local\Temp\is-OO0JT.tmp\Setup Audiolens v1.2.0.tmp" /SL5="$70122,411638018,121344,C:\Users\Admin\AppData\Local\Temp\Setup Audiolens v1.2.0.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
181.7MB
MD5d25cc104dc5046c67adb86339c461e28
SHA15ac0137835f3bb563741c353396c710c2b31b870
SHA256c15d4a8c97bf532c1d1ac5c52119d358de2d86ac385da8b42f55facfe0217665
SHA5120a3f22a772745fd0d540be4f4bbbe48d7d6abe15fafbaa24d0652af2944ab906f618fa75455b91715599200ebd45740513cca3ebf6b35d00af2f21c0945f70d4
-
Filesize
1.1MB
MD534acc2bdb45a9c436181426828c4cb49
SHA15adaa1ac822e6128b8d4b59a54d19901880452ae
SHA2569c81817acd4982632d8c7f1df3898fca1477577738184265d735f49fc5480f07
SHA512134ff4022571efd46f7a62e99b857ebe834e9916c786345908010f9e1fb90be226b740ddee16ae9290fe45c86be7238c4555e422abe66a461d11545e19734beb
-
Filesize
1.1MB
MD534acc2bdb45a9c436181426828c4cb49
SHA15adaa1ac822e6128b8d4b59a54d19901880452ae
SHA2569c81817acd4982632d8c7f1df3898fca1477577738184265d735f49fc5480f07
SHA512134ff4022571efd46f7a62e99b857ebe834e9916c786345908010f9e1fb90be226b740ddee16ae9290fe45c86be7238c4555e422abe66a461d11545e19734beb
-
Filesize
1.2MB
MD5497ac9f4ac3c9cd160441bcc116ccd2f
SHA13bacb9522b2c6bb125b7f49121e90367b8bff0b3
SHA256a372248c9f39f2c6ec456f582702a8b9f2af629b74cd7c220621b0a631762e7c
SHA51282cd25f063361e18fd5fce6fef5b7645ad0a592745cf66da72a30672313382b0ff5185aef33c674016c70442b1c46e98e427743257e40033ee586a14f77d1f59
-
Filesize
201.9MB
MD52e682d268f1a21a0023d0eb8e445baa3
SHA10f218a80b267a8ad0dd2d94b39506f6391069683
SHA256d02ff3983269455f78869004b0df331aaf1c7ac1a8d4749e010a113634286332
SHA5129e0099928d0f42388a6048c726e1f37553a4b69c62427c014cc60360bf0d4fa8bb345d1ea005ac9f333be46a0f8bc17f2d2acc2bfbcdd51b8639a92bad01f760
-
Filesize
212.8MB
MD56d570a17255afc052dba8c71650e064b
SHA192be959ddd74e63b27548e9e92e0d17e9a339e4c
SHA256ed203b5f2b93f3e13ea0ab23f1c28baf0738dd1fb9c77067903ec66e39052be9
SHA512d3f34a24aba464c4013fe672f6425e0eb23d35392431ee87995de821f2460409cb6811de88efe7d8737fe409189c2d622021d7ea0d612b6693a6c87559d6a339
-
Filesize
179.8MB
MD5930c9184e9aa0ea113d8428736a1cc95
SHA11fe77b9a4cdeede9a60be43728ff3d417a02d884
SHA256cbed872c64c347c425cef867d85d3ce2ae04c6a7e4e37fdb08ba24ac901c6c76
SHA51238bcad71f8aa441be63f06cf086368cacd2b0a9c65368e59697f4a0f52776f794acdabb46fa3a691f6cf8a6909919a1a60b68b24639ccb14a7705dc18c558a34
-
Filesize
175.4MB
MD5bc97b9e481159952fd0a98926f62dd9a
SHA1dff540065092813912fff98342a24904ea260a42
SHA256e49993b168727eb461cfceaba005dbe5e404365b8d60cfc5715560259b2808a9
SHA512c6086e6d0a5023ef99e6e5f75040bff488fb868a5bd9033cd72964e9ff4c198cb287976de98e772b47bea0fcd60e2e1d774426aaa540fef02a7391343ffab7fd
-
Filesize
181.3MB
MD560600b2eb05d222d5408799583304ae0
SHA1bd3bfec8e38109866f63b7b4757c5c942bd576b5
SHA256bf1765f143dc4d1718151b0fba016549281338a72343f7b09bcaee5d820bbbfc
SHA51298bc0f1b0a5e6aa6ff8529485cd8ec14e7aa43df4f2a31ba7c7645c799b1f9984331d893db3dbca7cb4ca15c16d3f0896eedafa0dadb339a5ce7c28d5a64e1ff
-
Filesize
178.9MB
MD59ee17c6bbf54facd038e3a10bfabaaec
SHA1f6f4bb4aaf46cf9c2cb4f66f72eaf55cc35b4568
SHA25665e39227d205bb48dafec4cdcb4df0a939ba89e96ad2ea4be5e22347f861ea85
SHA512d05a68d362a356ee9ba0a925334910861bd8a891b19e61d7de67f08c65a67c67875269a9c596a29955bed2c6539c79f0e93361a102ea8e6179565f6ae5e2d4e2
-
Filesize
357KB
MD5f30afccd6fafc1cad4567ada824c9358
SHA160a65b72f208563f90fba0da6af013a36707caa9
SHA256e28d16fad16bca8198c47d7dd44acfd362dd6ba1654f700add8aaf2c0732622d
SHA51259b199085ed4b59ef2b385a09d0901ff2efde7b344db1e900684a425fc2df8e2010ca73d2f2bffa547040cb1dd4c8938b175c463ccc5e39a840a19f9aa301a6c
-
Filesize
4KB
MD55df8ada84a16f5dfc24096ef90a5ce3a
SHA15e7e9c68119c3a0a1afc92c60674bc8714492823
SHA25648a9c8c332fde541b571d9d522d0e37834b452f55af8cbdc341b12222e78fb5b
SHA512661b5219c74dd6e3a8e899a1b1a3002689d148e337d7323a174519366c9548c284ee76e2faa2f9600cd483db21093ee62399f0d7403c39523c654266760191c2
-
Filesize
813KB
MD55f87caf3f7cf63dde8e6af53bdf31289
SHA1a2c3cc3d9d831acd797155b667db59a32000d7a8
SHA2564731982b02b067d3f5a5a7518279a9265a49fb0f7b3f8dc3d61b82a5359d4940
SHA5124875298d82037ef1fff1ee3c58a9059d8480274326c862729fcc56664ecb49e2692c3838948c66dc8336e4050469d831cbf1fbd79b66565ab673d2a67765109d
-
Filesize
1.1MB
MD534acc2bdb45a9c436181426828c4cb49
SHA15adaa1ac822e6128b8d4b59a54d19901880452ae
SHA2569c81817acd4982632d8c7f1df3898fca1477577738184265d735f49fc5480f07
SHA512134ff4022571efd46f7a62e99b857ebe834e9916c786345908010f9e1fb90be226b740ddee16ae9290fe45c86be7238c4555e422abe66a461d11545e19734beb
-
Filesize
640KB
-
Filesize
524KB
-
Filesize
168KB
-
Filesize
200KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
572KB
-
Filesize
388KB
-
Filesize
1.4MB
-
Filesize
640KB
-
Filesize
36KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
492KB
-
Filesize
12.3MB
-
Filesize
524KB
-
Filesize
224KB
-
Filesize
92KB
-
Filesize
1.1MB
-
Filesize
228KB
-
Filesize
200KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
216KB
-
Filesize
388KB
-
Filesize
572KB
-
Filesize
1.1MB
-
Filesize
628KB
-
Filesize
72KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
492KB
-
Filesize
76KB
-
Filesize
560KB
-
Filesize
560KB
-
Filesize
200KB
-
Filesize
228KB
-
Filesize
980KB
-
Filesize
156KB
-
Filesize
388KB
-
Filesize
1.6MB
-
Filesize
640KB
-
Filesize
36KB
-
Filesize
72KB
-
Filesize
524KB
-
Filesize
200KB
-
Filesize
228KB
-
Filesize
560KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
216KB
-
Filesize
1.6MB
-
Filesize
388KB
-
Filesize
4KB
-
Filesize
388KB
-
Filesize
4KB
-
Filesize
12.3MB
-
Filesize
224KB
-
Filesize
348KB
-
Filesize
628KB
-
Filesize
640KB
-
Filesize
1.4MB
-
Filesize
572KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB