Overview

overview

6

Static

static

1

flstudio_w...50.exe

windows10-1703-x64

6

flstudio_w...50.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    159s
  • max time network
    192s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    24/12/2023, 12:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    flstudio_win64_21.1.1.3750.exe

  • Size

    925.6MB

  • MD5

    30e6727eaec87bd7276f2b7e1180e531

  • SHA1

    b28c262435c5526d30be224246ceb5527f78f6b3

  • SHA256

    94d317af528ed1714c1f6df2347acf2f52acc9c3e22bd4e668bbdef33399f3d8

  • SHA512

    f127131b9b533146ca45007642aaf74d006c761c11894f3a719aad2414e04ee0cc5e384eedd961a227043ab87bc29afcb8bed827e1c8461aafd3ec62489f664f

  • SSDEEP

    12582912:0ozZdSUlJ/amvaZRPLoO4rIP9H39uW1YfmuSlKOx256aOYvki+dYKXwoCwzVAd2m:DnKmCZREvIPOWyOu3Ox2nMXwjwp/6XCe

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Loads dropped DLL 30 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\flstudio_win64_21.1.1.3750.exe
    "C:\Users\Admin\AppData\Local\Temp\flstudio_win64_21.1.1.3750.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    • Loads dropped DLL
    PID:164
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2472

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Impulses\Exteriors.nfo
            Filesize

            29B

            MD5

            c9e2cc184f1dd73cd5a66abcd8c6e0cd

            SHA1

            ccb180bc3ef502a872f88d591a90571fd8c61fae

            SHA256

            c5705dd82713be76cc5e4c1930589106d67cab8b6e905768a21233c77387db31

            SHA512

            addbac550b8d084e8fb95cf82d7ccb13acdf434b2aaa63b8e7b8bc09a9cc0e5ecd8d8121762a0de6eb69d8ac4f07d7ae9b5b0969f72d36f5b042d76df181887e

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kicks\Monster Kick 005.nfo
            Filesize

            36B

            MD5

            1406de33f68d12ff32f186da3a596309

            SHA1

            0d4c28f3f5a9290c553a33312bd0686ddda28eb2

            SHA256

            f55f810b44800b37393cc2a97d85595f2a0ea3cd9c4d4416dc00c9dc8badc3d6

            SHA512

            143282705c3c19a24b217653b8af2cdb5378a4adb0b5093fca2643a38be74f4fbc06e9551d75f854091855ddc401fb65ae4560aa865a638346a831e7b9100d0d

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Drums\Kits\Groove Bias\snare 4 v7 rr1.wav
            Filesize

            9KB

            MD5

            d786090570f1b09f694aef4b78b5fb44

            SHA1

            bb063717c78da303499bb0239ab6de0cd99ea079

            SHA256

            f8c31012d32c60da332a6204133b832e610a38ba9506e42606fafc6d9b77053f

            SHA512

            25cabe81af1c5ccfb45de1c37f2064a4784842a1c03513a6ac59d5e5d49de684961a683d2dafa269087fe5b88b7f0551448f5a9cbd8a490a81cd30822ba7aed3

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Packs\Legacy\Drums\RealDrumkits\RD_Hat_6.wav
            Filesize

            5KB

            MD5

            dc5fc06e1df47fadd5f1ec4a4a5b2aea

            SHA1

            ed79736a5c4fad63616084c85d1bd64956d9c0f5

            SHA256

            2f68d1362865ec229d560d6b4748ef7659696aea5294d5f1bb447bbb61023c39

            SHA512

            2d4b6d03c4b845d641729b24f1dc3332aed8e04165022410200aeb4b45dbdcbac9d132700a99476cca88e6b4b2d23684f56bbd242e97ad81ccdefafd4e2a0ff0

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Harmor\Template\Loop timestretching (4 bars).fst
            Filesize

            83KB

            MD5

            00e6af3c1a4570e0fd51ca8908de2da6

            SHA1

            a30e6ea8cf3cc1c4658ba38ad7a07ed70c6e640d

            SHA256

            8f104cd00299b2e5c8a54c1daf248fc2f9f4aa5d367fb2b3ff113ecb3791e8b1

            SHA512

            0f86964a3bf53f1738337a4ad68f548362d233e51d80e17dd1bd5dbc8ae4956fa03b88abf023fe2ec1a234f473b0fc46113dd93b4a7f9a9a0eca9b1d97bffbb0

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\Bass\BAS Elec Bass P Hook NUC.mrp
            Filesize

            104KB

            MD5

            ac1ece14da26080f1fe28ca1a1b59dc5

            SHA1

            c611c939d442c624e6da4948bbae55df67df6b4c

            SHA256

            272983f1df9259f660843a7b9e2aaccbe91036bb4722f92264963bc9892f96ae

            SHA512

            da9022502cb3efd23165c825e5d3179c8d9ebe4f182318176013e8d709120a81ba1b9bbcd3c0d149caf03762e733df183aed8f53ce495f2722fd7b6653787f2c

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\SFX\SFX Big Vinyl Skip FG.mrp
            Filesize

            6KB

            MD5

            459283d24a79a92c4e23afd2745bc0e2

            SHA1

            0d40675993acd9c05e45040cb2e7236c4dae10db

            SHA256

            97039fdaf42c7cdad4a65b4db8ab8aea26d3103a2e7cf377616e3fbc9b3cae10

            SHA512

            f8aed4a4b7dc980299cc658e6cee655806ae8d4302e34f829662bffd93776f08cd685e561a90df43edef607dc1789b78b75ebb109b454a073b847faf7238aa83

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\SFX\SFX PitchShifter (MW) FG.mrp
            Filesize

            6KB

            MD5

            37a983ed2ba3a5071b4497d5657539bb

            SHA1

            c1d0cdc51828e619fc7def5499ab6b8ca75bf4a8

            SHA256

            e1d50889127f1193d1808d97c0defb075a7cf7c024ca6a609e9052ce8c34d6f6

            SHA512

            8b185ae9df9ab7958fe22a8b9409819141343fb759b32cf063d6dc3c7894fc82d4ed7b6659ec57ff28ef05f7e5efc60c9a61f297dc6bb991ca97be9c770826e5

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\Data\Patches\Plugin presets\Generators\Morphine\Synthetic\SYN Analog Meets Digital FG.mrp
            Filesize

            118KB

            MD5

            75e6155c47c293387b524d8a1283d198

            SHA1

            15432751042a69d9f11df2718a2d09de8f706fe4

            SHA256

            af24aa81eb930a4585423f91667a8d303684ec422da12749084acaed1d23cb11

            SHA512

            b2804cc40b79ee645db4a68dc752b970e44eae34b6448699f618aa4bedaaea873e3faf1ff4b0d70ed9da524319a1c7447ce02b289f886e224656d51fe42dd2be

            Download Submit

          • C:\Program Files\Image-Line\FL Studio 21\FLEngine_x64.dll
            Filesize

            6.5MB

            MD5

            9782d687e7fe38cd7714e34ad61b8d95

            SHA1

            d5a6f37dc6cd7cfc43f9447d61b78687d07c5753

            SHA256

            ad5a463f1b5103edd94b0d02a7a9102e7912547931adb9423e426547ca6cb680

            SHA512

            023183a19ad642a06ad712b8124b959efc7e1a1ef7fdccbec02ab3181c22cd3c75436fa2b06ac36578ea216183f6c5e16bd3a62972418d0252db609ab6b41e20

            Download Submit

          • C:\Users\Admin\AppData\Local\Temp\nsp50BC.tmp\ILSetup.dll
            Filesize

            1018KB

            MD5

            220125a4fb3123d65af576b40fab5ace

            SHA1

            ff9388f71324f54ae000ade2ae038503cc7c8a89

            SHA256

            546914aeef6f5b081e517be1cd5572cc1f6e03b735820c61cf7121a7b1cf049e

            SHA512

            b8e37b03ab77f771b189ac734f810ffa1c3f47ee0c8cf731533a170b8db45f5b29c5440a950d3d691e15f76c90904b685cffdd3e2e303d7a94a6019593047c01

            Download Submit

          • C:\Users\Admin\AppData\Local\Temp\nsp50BC.tmp\ioA.ini
            Filesize

            1KB

            MD5

            cd495b3029e7071c0975c3ac5b563e0a

            SHA1

            429d61b1690a996a2ef00fc29be53667f59db39d

            SHA256

            fe3aedb4a810c27f91ca6edcf882757afc7e9dacdd0dbbbd2b615dede625fd30

            SHA512

            daa7e15656b28c37bf4b03204b0c293f6731b122ff066eacf0b6554a5129b79215e7713a058ad8c189bee5d3d960045c20cda6f7508ca1789150a8f10779438d

            Download Submit

          • C:\Users\Admin\AppData\Local\Temp\nsp50BC.tmp\ioAllUsersPage.ini
            Filesize

            1010B

            MD5

            634fd2633a884035690fd3635c7ae34f

            SHA1

            91af7c2af8a41563d33f944868d22673c6116e2d

            SHA256

            c0313e195465e521ef5cbd94e19a1abe70cf0d564ec38b017f1e09a276e30c15

            SHA512

            810389998f4eb641228e5b4e2ec43849102d2d9e1890c17aff5067cbcd0e46bac7850f732815746cbdf62d4f698cc47002cad2aa2f3b442cec3a5652558b058a

            Download Submit

          • C:\Users\Admin\AppData\Local\Temp\nsp50BC.tmp\ioAllUsersPage.ini
            Filesize

            1KB

            MD5

            bd571d47b0d890752301072389362f14

            SHA1

            e0db8a1a70c884478e10cb20771043a0de05ad29

            SHA256

            838f666c8c18250a391820453bdfb015a47c45d2cf6d86c08aec03f917b1fe66

            SHA512

            9cc653b9bec35db848dd165c41658bccc40775c4d83a407f54c63872c1032f8077067f877aa3527f87a1f3e077afb476a6cd44f67d4df9b1b219da4bf96249d1

            Download Submit

          • C:\Users\Admin\AppData\Local\Temp\nsp50BC.tmp\ioSpecial.ini
            Filesize

            1KB

            MD5

            333effce9cdf8e6fa91b795905e78a73

            SHA1

            f8a73b12548987048e3821c48c4a610ff3ed4b2f

            SHA256

            38ba7f3087e8db68cf5fc31a547a9b56590492be29aab69a06799d9fb483d680

            SHA512

            e2bbd27c53d1eefd2e5e079ac792369de5b71e773658820e4dd080d4e36937db5339354d8c9a855d8b942978808d4ea613d370dcc2437b3cd39b2dc2a75b3575

            Download Submit

          • \Users\Admin\AppData\Local\Temp\nsp50BC.tmp\ILSetup.dll
            Filesize

            1.0MB

            MD5

            cd50c47c010aa1e6abd8bd8ce98fb8c5

            SHA1

            547e445c42b39041204c012f95e146ba7bb3442b

            SHA256

            1ea1404b5e14ee8572575d941ef27437a534b46aa1d23e112cf40f4144cbb7ca

            SHA512

            f4c54f3403633167572e36867a0e99164de2cafe873505922b055b65b63809729a89ab3df092a634d18fe2fb8d3d1060a908349ef61b88ff0750815347a4fa53

            Download Submit

          • \Users\Admin\AppData\Local\Temp\nsp50BC.tmp\ILSetup.dll
            Filesize

            999KB

            MD5

            df9f0ec07ad8d75b4b745e9e283dc850

            SHA1

            48692ab66bb362a613209ee9a5a8d1eaa4a1582a

            SHA256

            3b46bfe3273324d43b35b1e901f779f2de463e581b8b117b7632b8622ecf4f7e

            SHA512

            af5a3e909646fd37a008a73e5313af7e97cdbca2cc2494287889dd1d58a17f6f1d5362ca7327bcfc9fd372f4f29e36e9a1ce2e5338b2ecde2a0f427e4dae8dc1

            Download Submit

          • \Users\Admin\AppData\Local\Temp\nsp50BC.tmp\InstallOptions.dll
            Filesize

            15KB

            MD5

            998189882c9f1be220c9faf0fd2bde15

            SHA1

            787d50c46c9a2a48565f684fabc7503aca8b0493

            SHA256

            f34385901206a3952fe2724edb3b0b123fd897119c774ab68c8745de6662d990

            SHA512

            e0c52ad851b476e7bcbadea8f993e5c6f9f70a9b46e2aebe8ee353a372b0bd5af95241240f880f49b9d91d240a4a2b7e7d2b7c8a18ca1654e607fa8d2772dfd6

            Download Submit

          • \Users\Admin\AppData\Local\Temp\nsp50BC.tmp\System.dll
            Filesize

            11KB

            MD5

            24523fe14bb9ba400a3950016b187915

            SHA1

            6ec152b4e4ac04038d4608a8a206070185116036

            SHA256

            c4aaf80e3990185eeb5ea56bf841dbf5f3d02269d715f3bfdfe8b54aa797a7b9

            SHA512

            ae73351d27109187f7c4e312bc30a165202f29d74c65dd0feaee75dab72b97d27c6482b1e95771063afec7e9f2ca03a27a11cd25e39228072b69c33fffef7257

            Download Submit

          • \Users\Admin\AppData\Local\Temp\nsp50BC.tmp\UAC.dll
            Filesize

            14KB

            MD5

            adb29e6b186daa765dc750128649b63d

            SHA1

            160cbdc4cb0ac2c142d361df138c537aa7e708c9

            SHA256

            2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

            SHA512

            b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

            Download Submit

          • \Users\Admin\AppData\Local\Temp\nsp50BC.tmp\UserMgr.dll
            Filesize

            23KB

            MD5

            9210597fba3dfab3c69b1eb490205419

            SHA1

            6e3ca39043756ed1cceaf2d4853e7cb6be1c64cb

            SHA256

            7696c255014a543f720e189ab3fe48f62fcf43435465062649c96138eedb222f

            SHA512

            4877daefdd34725791fba7c8cc2d85c4e91080ca7787a71ee9ffde71704ac40799b891f03d1f1805a31af6ddc35e335f74c9d620e87d517670a378c001cffb06

            Download Submit

          • memory/164-412-0x0000000005670000-0x000000000577B000-memory.dmp

            Filesize

            1.0MB

            Download

          • memory/164-231-0x0000000005530000-0x000000000563B000-memory.dmp

            Filesize

            1.0MB

            Download

          • memory/164-61-0x0000000004AE0000-0x0000000004BEB000-memory.dmp

            Filesize

            1.0MB

            Download

          • memory/164-13-0x00000000049F0000-0x0000000004AFB000-memory.dmp

            Filesize

            1.0MB

            Download