Analysis
-
max time kernel
115s -
max time network
26s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
28-11-2023 21:22
General
-
Target
Setup Audiolens v1.2.0.exe
-
Size
393.0MB
-
MD5
352aab786d3b494caab56cccef691058
-
SHA1
f091676fb82583eb779f9c9d11d3ab97aa64b509
-
SHA256
f7695730f1e5eaeaace310617f7c4174f63af6651fcce1de6572e19340df93d9
-
SHA512
55ac7b48dee59fb6d7b91060f7eee72bef3a5d246297fe04b172aa49dcefd0a7b18ede77361bbcc8899428b796cd87577f611517becc99bcdab72a1f5dc7ebc8
-
SSDEEP
12582912:5k0n3GZbJ9CkdaR/+znK/g8EVk6qSHMHvvw1zRcKMeeHkVshmWubL:KuYbJ97aMTK/gNVTqCMnyuP7HkV3tL
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 11 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 6 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup Audiolens v1.2.0.exe"C:\Users\Admin\AppData\Local\Temp\Setup Audiolens v1.2.0.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-N6T53.tmp\Setup Audiolens v1.2.0.tmp"C:\Users\Admin\AppData\Local\Temp\is-N6T53.tmp\Setup Audiolens v1.2.0.tmp" /SL5="$120150,411638018,121344,C:\Users\Admin\AppData\Local\Temp\Setup Audiolens v1.2.0.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52.6MB
MD5fd2e39e9a3f96c8f14dfad04a5305662
SHA14633965765660d40cdb18941b1efa367c2cae136
SHA256f39ae3d0e1d14efac537a421d949e13815ee5d2ac2abb408ce1f576f6807b4ec
SHA512d2dd9a0e790f971f01b3a97813dd596c85f6622ac6352995998b4b49f45d8bac174a985461ad93c4b361c0c9643585d5509a4cbc1317607f2782e46f66475ca0
-
Filesize
1.1MB
MD534acc2bdb45a9c436181426828c4cb49
SHA15adaa1ac822e6128b8d4b59a54d19901880452ae
SHA2569c81817acd4982632d8c7f1df3898fca1477577738184265d735f49fc5480f07
SHA512134ff4022571efd46f7a62e99b857ebe834e9916c786345908010f9e1fb90be226b740ddee16ae9290fe45c86be7238c4555e422abe66a461d11545e19734beb
-
Filesize
1.1MB
MD534acc2bdb45a9c436181426828c4cb49
SHA15adaa1ac822e6128b8d4b59a54d19901880452ae
SHA2569c81817acd4982632d8c7f1df3898fca1477577738184265d735f49fc5480f07
SHA512134ff4022571efd46f7a62e99b857ebe834e9916c786345908010f9e1fb90be226b740ddee16ae9290fe45c86be7238c4555e422abe66a461d11545e19734beb
-
Filesize
1.2MB
MD5497ac9f4ac3c9cd160441bcc116ccd2f
SHA13bacb9522b2c6bb125b7f49121e90367b8bff0b3
SHA256a372248c9f39f2c6ec456f582702a8b9f2af629b74cd7c220621b0a631762e7c
SHA51282cd25f063361e18fd5fce6fef5b7645ad0a592745cf66da72a30672313382b0ff5185aef33c674016c70442b1c46e98e427743257e40033ee586a14f77d1f59
-
Filesize
54.3MB
MD5d640a9467fa97b64387369104206114f
SHA16e32ba4b4bead3e24d1bef8ade3b2723d8ef268a
SHA256394ab0be90220adec1ccded17e44198b5ba4d20bbe149317526660b4e6713a92
SHA512b1dbe5e7a14c986a22bee9e79f4e5e2bea8ac1db56b533456f3fd5791eea1a92dd985b8c2c255645d1245633b31ee4ec6118d7df65837b0cd36a0b25311c4c6b
-
Filesize
53.7MB
MD5495fee171ebcd42a49f4ee0b1bcfa882
SHA1bc477f81a8ebd9fe16409cb7634cf3a572c87d68
SHA2568f51f5b4196a5394d5df518d96a5ee02671372320f16b1175363b8da0aaba963
SHA5124a6623d7b5bb330b01a80c0e96dbb301de0082bc0366c34b9835dba819716d1e6415703ac3a22928014d75f966384b62bda084264e6cde075f2c0f7f6bfdf669
-
Filesize
25.5MB
MD50b1519977eecde62bd58f1067e5ea97b
SHA11c255b3f84e95480d24328a21470c4013af1788e
SHA256ebe96e4b1c6bbad3cc99af9941e09ad334504d0b220c37f3fd488a8570f9756a
SHA512908a89b5a8d09a5c1b219e8dcbb5718c2a4a81762c8311f85c3951386917685500448540c68530922259333b30595f9df575db12af15222cb4ef1e4dd34a44af
-
Filesize
25.3MB
MD5a2baa37aa92cdfc935dffcf7653a4877
SHA1931ea2828ae7327111aa8d97d4e801786140c1d8
SHA256134ce0af3cd4885f1f9b369b268234864d149c89f21b8c70f5be1d3854db0225
SHA512652a2e98f3c916a0da30df125e9596c62f8cb87d7c08fad50fe2aba12ccb1c417cbdbb3657f39f15e6e4aea74e9accff12a3a30b8499a8ac25ac59f810a01e0b
-
Filesize
25.2MB
MD5783f5b5056066d13f4453a21186d02f6
SHA18a358bb6d421df4c5ec298f669e278310bc82fd9
SHA25661a34d6a5074bfd4cdf067b1f5ac532c3de0dfa785c05979b035f9ebd03be5f3
SHA51288880171002b0a5e1ffaf04d3bf4d13382f569f935f1e301b1b648f272418059606d9fc1fdb0922e1524d3230940e052e91cb78dbc0921f5e9b2ce45ec8e6971
-
Filesize
25.2MB
MD5fc40bf3e99d5470f110952652fdbe589
SHA1838b3ded4b3e6c6af870e15373bdf942fb78b2db
SHA25647c8403282956cedc6d2b74c1f9e30f29f61fa587653f7796037ba74c1272273
SHA512a808d0b11bab6abd6c9b293199bcebfdd8f824af346acd0b11574bb013070e9e8610cb83be24ce6115395cf0926e524df165709fe4cf2c688ba06d13214f21df
-
Filesize
357KB
MD5f30afccd6fafc1cad4567ada824c9358
SHA160a65b72f208563f90fba0da6af013a36707caa9
SHA256e28d16fad16bca8198c47d7dd44acfd362dd6ba1654f700add8aaf2c0732622d
SHA51259b199085ed4b59ef2b385a09d0901ff2efde7b344db1e900684a425fc2df8e2010ca73d2f2bffa547040cb1dd4c8938b175c463ccc5e39a840a19f9aa301a6c
-
Filesize
4KB
MD55df8ada84a16f5dfc24096ef90a5ce3a
SHA15e7e9c68119c3a0a1afc92c60674bc8714492823
SHA25648a9c8c332fde541b571d9d522d0e37834b452f55af8cbdc341b12222e78fb5b
SHA512661b5219c74dd6e3a8e899a1b1a3002689d148e337d7323a174519366c9548c284ee76e2faa2f9600cd483db21093ee62399f0d7403c39523c654266760191c2
-
Filesize
813KB
MD55f87caf3f7cf63dde8e6af53bdf31289
SHA1a2c3cc3d9d831acd797155b667db59a32000d7a8
SHA2564731982b02b067d3f5a5a7518279a9265a49fb0f7b3f8dc3d61b82a5359d4940
SHA5124875298d82037ef1fff1ee3c58a9059d8480274326c862729fcc56664ecb49e2692c3838948c66dc8336e4050469d831cbf1fbd79b66565ab673d2a67765109d
-
Filesize
1.1MB
MD534acc2bdb45a9c436181426828c4cb49
SHA15adaa1ac822e6128b8d4b59a54d19901880452ae
SHA2569c81817acd4982632d8c7f1df3898fca1477577738184265d735f49fc5480f07
SHA512134ff4022571efd46f7a62e99b857ebe834e9916c786345908010f9e1fb90be226b740ddee16ae9290fe45c86be7238c4555e422abe66a461d11545e19734beb
-
Filesize
628KB
-
Filesize
524KB
-
Filesize
168KB
-
Filesize
200KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
640KB
-
Filesize
388KB
-
Filesize
36KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
12.3MB
-
Filesize
492KB
-
Filesize
524KB
-
Filesize
224KB
-
Filesize
92KB
-
Filesize
1.1MB
-
Filesize
200KB
-
Filesize
228KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
216KB
-
Filesize
572KB
-
Filesize
640KB
-
Filesize
1.1MB
-
Filesize
388KB
-
Filesize
72KB
-
Filesize
1.6MB
-
Filesize
492KB
-
Filesize
76KB
-
Filesize
348KB
-
Filesize
560KB
-
Filesize
200KB
-
Filesize
228KB
-
Filesize
560KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
156KB
-
Filesize
388KB
-
Filesize
640KB
-
Filesize
72KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
560KB
-
Filesize
524KB
-
Filesize
36KB
-
Filesize
200KB
-
Filesize
228KB
-
Filesize
980KB
-
Filesize
216KB
-
Filesize
1.6MB
-
Filesize
388KB
-
Filesize
4KB
-
Filesize
388KB
-
Filesize
4KB
-
Filesize
224KB
-
Filesize
12.3MB
-
Filesize
348KB
-
Filesize
628KB
-
Filesize
640KB
-
Filesize
1.4MB
-
Filesize
572KB
-
Filesize
160KB
-
Filesize
160KB