Overview
overview
4Static
static
3Graillon-F...de.pdf
windows7-x64
1Graillon-F...de.pdf
windows10-2004-x64
1Graillon-F...et.pdf
windows7-x64
1Graillon-F...et.pdf
windows10-2004-x64
1Graillon-F...on2.so
ubuntu-18.04-amd64
1Graillon-F...n 2.so
ubuntu-20.04-amd64
1Graillon-F...n 2.so
ubuntu-20.04-amd64
1Graillon-F....0.pkg
macos-10.15-amd64
4Graillon-F....0.exe
windows7-x64
3Graillon-F....0.exe
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PROGRAMFI... 2.dll
windows7-x64
1$PROGRAMFI... 2.dll
windows10-2004-x64
1$PROGRAMFI... 2.dll
windows7-x64
1$PROGRAMFI... 2.dll
windows10-2004-x64
1$PROGRAMFI...64.dll
windows7-x64
1$PROGRAMFI...64.dll
windows10-2004-x64
1$_26_/Aubu...64.dll
windows7-x64
1$_26_/Aubu...64.dll
windows10-2004-x64
1$_27_/Aubu... 2.dll
windows7-x64
3$_27_/Aubu... 2.dll
windows10-2004-x64
3$_28_/Grai...64.dll
windows7-x64
1$_28_/Grai...64.dll
windows10-2004-x64
Graillon-F...e.html
windows7-x64
1Graillon-F...e.html
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
20-04-2024 11:55
Static task
static1
Behavioral task
behavioral1
Sample
Graillon-FREE-2.8/Graillon 2 User's Guide.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Graillon-FREE-2.8/Graillon 2 User's Guide.pdf
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Graillon-FREE-2.8/Graillon Datasheet.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Graillon-FREE-2.8/Graillon Datasheet.pdf
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Graillon-FREE-2.8/Linux/Linux-64b-LV2-FREE/Auburn Sounds Graillon 2.lv2/AuburnSoundsGraillon2.so
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral6
Sample
Graillon-FREE-2.8/Linux/Linux-64b-VST2-FREE/Auburn Sounds Graillon 2.so
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral7
Sample
Graillon-FREE-2.8/Linux/Linux-64b-VST3-FREE/Auburn Sounds Graillon 2.vst3/Contents/x86_64-linux/Auburn Sounds Graillon 2.so
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral8
Sample
Graillon-FREE-2.8/Mac/Graillon-2-FREE-2.8.0.pkg
Resource
macos-20240410-en
Behavioral task
behavioral9
Sample
Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
$PROGRAMFILES/Common Files/VST3/Auburn Sounds Graillon 2.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
$PROGRAMFILES/Common Files/VST3/Auburn Sounds Graillon 2.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/x64/Auburn Sounds Graillon 2.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/x64/Auburn Sounds Graillon 2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$PROGRAMFILES64/Common Files/VST3/Auburn Sounds Graillon 2-64.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
$PROGRAMFILES64/Common Files/VST3/Auburn Sounds Graillon 2-64.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
$_26_/Auburn Sounds Graillon 2-64.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
$_26_/Auburn Sounds Graillon 2-64.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
$_27_/Auburn Sounds Graillon 2.dll
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
$_27_/Auburn Sounds Graillon 2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
$_28_/Graillon 2/Graillon 2_x64.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$_28_/Graillon 2/Graillon 2_x64.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
Graillon-FREE-2.8/license.html
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
Graillon-FREE-2.8/license.html
Resource
win10v2004-20240412-en
General
-
Target
$_26_/Auburn Sounds Graillon 2-64.dll
-
Size
2.5MB
-
MD5
9c517e37aed2a0466aac62ded29df6af
-
SHA1
0385b97f7e65517088d3f203ba11de55f99e4e7d
-
SHA256
bdd255cd980dcec364e93dfb86cb79a5f0d693753f4d0faff6f6b6c4c2424bb4
-
SHA512
a582f527729243490bbedb0bc88fdfae5b657e9b5efed7e0bc8e53db10df61a432f3f97fe9396711d0e527bbc0a90913d5e7c2e8bc250524694b8a23f77f1665
-
SSDEEP
49152:z4cnv7ZFpe+XZWVa6o6bF8YmbDVq7V0Y/U9+X8bfU8Nkz:pQaMb+YmbZqxsY/
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 2824 wrote to memory of 1468 2824 rundll32.exe WerFault.exe PID 2824 wrote to memory of 1468 2824 rundll32.exe WerFault.exe PID 2824 wrote to memory of 1468 2824 rundll32.exe WerFault.exe