c0c017f18b0afe8d9fd84617fb87153ac2ffd01f93db2e9b13144f3e242277da

Sharing

Copy URL Twitter E-mail

General

Target
VSTPlugins.rar
Size 738.4MB
Sample240601-ea5teagg6w
SHA256 c0c017f18b0afe8d9fd84617fb87153ac2ffd01f93db2e9b13144f3e242277da
MD5 6bd949887925b8f04570a3911102d084
SHA1 3ced178530425161147c9f9e43304bae95b9cceb
SHA512 2e8c3acbe72ad05d2839afd20cfb03b8e884069eac82393e304b84f5d38c7716b43dc4e8c0888d96b96393a010c4044738474217154ca045a9a52e557f8fea64
SSDEEP 12582912:r27s2z+ajOuJxIS2aniHqDN8ePxi2gUxQGFsUtDwGiwxdwyyiPK:r2Y2iaj5InQHCePfgKbFwdw/yv
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  VSTPlugins.rar
- Size 738.4MB
- SHA256 c0c017f18b0afe8d9fd84617fb87153ac2ffd01f93db2e9b13144f3e242277da
- MD5 6bd949887925b8f04570a3911102d084
- SHA1 3ced178530425161147c9f9e43304bae95b9cceb
- SHA512 2e8c3acbe72ad05d2839afd20cfb03b8e884069eac82393e304b84f5d38c7716b43dc4e8c0888d96b96393a010c4044738474217154ca045a9a52e557f8fea64
- SSDEEP 12582912:r27s2z+ajOuJxIS2aniHqDN8ePxi2gUxQGFsUtDwGiwxdwyyiPK:r2Y2iaj5InQHCePfgKbFwdw/yv
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  ATKExpander_x64.dll
- Size 503KB
- SHA256 cd489ac53dd39b49023c6e8d3a48dbee7ef199932dfb197c0ac02e7d8880d898
- MD5 62b577e1330b1ba1152168e8397affa2
- SHA1 1f39d0e2a160c4a4fc1e00b14c4de022556c2adb
- SHA512 b08ae2f169c2a3f101f14fc688f7eb1fcfd6cf0373664310618c9cc8927426a0f6ab01b63a139f998430b95f7a74f9246f5145e7d58aabd0ac74dad1e0547535
- SSDEEP 12288:9yiJH3VjP4rnEmRO5No2CuUoohzCTaMnOJT:XPsnE3ojoTT/nOJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Anvil.dll
- Size 2.1MB
- SHA256 d2b535f223d7bddbb335bfc4ddc81cd54f167a91be4d346ffd43aef1d10f468d
- MD5 a509a7a795ed21d4f5d8528c2d52af0e
- SHA1 73428732db176586211c9a485b255182e11ea1bd
- SHA512 6b429c1f00782cf3998e1b04fdf1fb64331e84b7753de38a35affd01c258e5ca5901bf50a8fc8ddc66e5d6f4209dbf18337eafed794ae293777c54c548ccc154
- SSDEEP 24576:1m7J9hBA323TZZx0L48+ruptu2bOwg4GZKaEvoIx641L9byNvo5EHfhtKEtOjsCl:Id9E0Ty4tUJxlxyNASHfhUEfC
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  Auburn Sounds Graillon 2-64.dll
- Size 2.4MB
- SHA256 025f1faccab94a231131f30cdb2db9159312cae8e38bb96ebe990c7a83690412
- MD5 4af0dab20206e9c6580047e01aa1957a
- SHA1 5543da76922b57bfc76118f382a8efd820eb91ac
- SHA512 3dd53e1df4ef18b34beb94b34f20b23048e6fc0d47bd108a025f4075faa92d082bb32beda0793344bb7a5cd8945df7037beb5490a7f21cc235860935701367d7
- SSDEEP 49152:/EHoos55W2my9vXi5EdU9oV0Y/UnmJuFbDVqL+/TI:Ho5rH9CsWuFbZqa
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  Auburn_Sounds_Graillon_2-64.dll
- Size 2.4MB
- SHA256 025f1faccab94a231131f30cdb2db9159312cae8e38bb96ebe990c7a83690412
- MD5 4af0dab20206e9c6580047e01aa1957a
- SHA1 5543da76922b57bfc76118f382a8efd820eb91ac
- SHA512 3dd53e1df4ef18b34beb94b34f20b23048e6fc0d47bd108a025f4075faa92d082bb32beda0793344bb7a5cd8945df7037beb5490a7f21cc235860935701367d7
- SSDEEP 49152:/EHoos55W2my9vXi5EdU9oV0Y/UnmJuFbDVqL+/TI:Ho5rH9CsWuFbZqa
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  Auburn_Sounds_Panagement_2-64.dll
- Size 2.6MB
- SHA256 66c5313fe057c72e6d02bda727545bbe0502e3cf25446a36782d4dad93066e66
- MD5 856f23903125b99c218f86b466d284ef
- SHA1 691b7204cbe9e8ea6b08e847b0e3c7f29124e601
- SHA512 3e1f2d14c3cee6d45e0ffe7573803da26d43eba556243acd6ded821ab833f562cf3059b3d555ea165092a73b354a63afebcd60d2aadf5a67e46202d321647210
- SSDEEP 49152:12TGJV3wDCNdgSfb7NKZ+UgJudMKqTcimHNaS+ugTyG:HJR9Hf1nUgMSLT/aYuE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  Auto-Tune_Access (1).dll
- Size 70.2MB
- SHA256 97bd6cc14baf099ee528baaea15fe3a87fdbff85b601e97cfe3de3ffba52e8d7
- MD5 22b8c8e507e501d5ed7747626c69e393
- SHA1 a8015be4ff1c7bb62b61ada4051dbeb7841ff58b
- SHA512 2ea51b373262d6c2c7af2ef6905a2cce2152fc42eb3e39846062b37eba04e205e4d1baa7c92f64fb7d041f0d268035f4ed866b6bff24a6719ddceb9ebeb0c951
- SSDEEP 1572864:gKrbUlTGTI7A0E4zukyi8LZpED1sjWfz99ngOvG6:/L6ACzOUJsj2PnVG6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  Auto-Tune_Access.dll
- Size 70.2MB
- SHA256 97bd6cc14baf099ee528baaea15fe3a87fdbff85b601e97cfe3de3ffba52e8d7
- MD5 22b8c8e507e501d5ed7747626c69e393
- SHA1 a8015be4ff1c7bb62b61ada4051dbeb7841ff58b
- SHA512 2ea51b373262d6c2c7af2ef6905a2cce2152fc42eb3e39846062b37eba04e205e4d1baa7c92f64fb7d041f0d268035f4ed866b6bff24a6719ddceb9ebeb0c951
- SSDEEP 1572864:gKrbUlTGTI7A0E4zukyi8LZpED1sjWfz99ngOvG6:/L6ACzOUJsj2PnVG6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  Auto-Tune_EFX.dll
- Size 36.7MB
- SHA256 476fb1a3b17fd711d240a3189f03aaa4831774fc18d2f08fed09818f8598483f
- MD5 a36af06ff1a195bbe8d41043c07289dd
- SHA1 3f42b8d44d51caa0433bb273985f289e1cc7bb97
- SHA512 ac322416cf3e605aab12a82304770661166a365b1f3063d749fbfe473193601fb3057a2b9dbbbe5d55987af178678845b6d839c8c33d1f18f9e2bab1d4a46b6b
- SSDEEP 393216:v2rTx+ArfUhCpzjVNaz5IbjTLlAVJa679INDMEzB5N8ZPbuxGC2:KohQjVsz5IbDCVIVNDDzzwbI
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral17 behavioral18
- Target
  AutoTuneVST.dll
- Size 9.0MB
- SHA256 c38c3faf05e778571494ae9dd1717b0a7871f9b2cfae28e90c785b46cb065896
- MD5 0ecbd7d4d5ca135c5a8f67abdd37fba7
- SHA1 95a8899d275da11a60803099b321fddab9725112
- SHA512 978d1d05d11798737ee814ecab6157aba6447ba1b305962142a3dbfa92e36777dcdb989cd2ad1eb1bcd16a17a12fb78f8fffbb22e43d477e6e448e62e98e3c1d
- SSDEEP 12288:0vlO1HbJotpmTpcJmGh/E7Rv9OpAOx+N1tWJbxa8PDEE23WJbGAynn55rTbC9K:8lO1HbWvmOmGh/E7Rv9O2Ld8PIE4n1
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  Azurite x64.dll
- Size 779KB
- SHA256 e1798cbe49ea37f89eaafb0ccdef31833101ce7ff2fad1412ef6c794c89178c4
- MD5 352454596ba5f4caeb014dfbc3e25677
- SHA1 f707a7aea8bf98d9120c0fb6ada9e868be14d760
- SHA512 6cbb108f0658a6cdf067587cd79c3ec65d95aa17d99a50a6f43fce3e74c75290c2e2027f98811f8d9fc7f23e576c5b8813a9682aacf4fa6a29b13d1e76cf84bc
- SSDEEP 12288:e2sUK7+shfpdqNgxg54LLXnb5sEE4e8gITENoE2Ne6f9o/7uC7U:e24aSfpjg54LzNDi4J07i
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  BC Chorus 4 VST(Mono).dll
- Size 11.6MB
- SHA256 df358327d4149042e787eeacdeab06e4e86131a4c2b53500aa0e2f2f79bc9d73
- MD5 22df8012d04439f065de984f33ed23cd
- SHA1 e7f46ee9d37645f639eaa64c6e506c7f0ece4519
- SHA512 766e5a57f2b8c256b4f85a96711f5bcfe4db2d5ab9e02f9d185efb1fbfbdea61c9e62458852a8bfa49c4ff9248f8c72839f31c9e7a785713231c1af34796dbc7
- SSDEEP 196608:KBHBclft0Cc9YPLarljLWlH+7kuvrTX9ji:sHGlft0CCYTarRSh+7v/X9ji
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  BC Chorus 4 VST(Stereo).dll
- Size 11.7MB
- SHA256 531c26472683efa62b8099a2ffd3b9fd3bca780d315fb10de31de5e8aa698f90
- MD5 906ccd505cc844be600a3e656e3488df
- SHA1 20a9c9f44a2979dba0f5c961300b847fbe89f092
- SHA512 a0f613858f29593fcf50f4eab2cb42eff2502b134cf87c81a4817e7ba8ee502bf4b8df017a819fa27af51b037f155a95957c6c07c465738ee1f00dfe3a8e9574
- SSDEEP 98304:vjpm57gBMY++C4w8TNCC5DC6KX5Fte4EYSiof+0g2HDE3EjErToZxrVQq0Cea:vm7gBMYbCb8TNtDC6iPEN+7kuvrTarVz
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  BC Free Amp VST.dll
- Size 13.0MB
- SHA256 d08309d19edeeb4e38c08af34badd45779fd7e3ef057e9c92197401a1ab21143
- MD5 24703b28c9aaaedd31f0f11c5e494439
- SHA1 895faff8da56af72a0726f0170334c9c9e34309c
- SHA512 3a464a9ae7f1ba087ccc64af9d23763aee5e871e8e519c5ab7417b672a20d4c2d5f64971966c79ec7809ce31193d665054939b159c33377e62ded3b5c69f8269
- SSDEEP 196608:1fI690tpoEOIzAXRyaV4UTwB+7kuvrTt3WQT:1w69upoEOIz+yaTTwB+7v/t3r
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  BC FreqAnalyst 2 VST(Mono).dll
- Size 11.8MB
- SHA256 d99e2d6cb9a47511b47e83fd45a1bb72015fb626f7173dad5bc26a579a1a33ab
- MD5 c440555e90acd74958007f4abd8e983e
- SHA1 52d1f9ad7bcb4e867d6173e17c5c07d2e0944e78
- SHA512 a42758c66f972f81edf194f59382f0fd56b8025ab423340f0d73dd84415eeb430e0b4b6d8c507bd13859397a859b85624be9830902bc2cfb98f729652d75f5dc
- SSDEEP 196608:H9wNBGaDWLzwuASJ9EgU57+7kuvrTws6g:HABGaDWLzw6J9EV7+7v/ws6g
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  bg.tga
- Size 702KB
- SHA256 769b2ce14f54b1cf582ee8b6772a36ae81660c5c7e6d4c63bb61ab355247814e
- MD5 1349de07c0be89acc77b98cee82f4e8f
- SHA1 13a2baee926bee3fe57577c826b3d4209fe926e3
- SHA512 e956baf65817e7af1bd0885c849d40194195ebd5f671cc20970f88e7e51158d02c5844df1a36bd25bcc1529535c4fabe368965fec30c5d4cd08746adb977f0f9
- SSDEEP 3072:vYJx3H7ZnchhhhhhhIhhhhhhhFhhhhhhhBhhhhhhhVhhhhhhhcpI:vYJx3H7ZnB
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Identifies Wine through registry keys

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32