Overview
overview
3Static
static
32d00754f44...c6.exe
windows7-x64
32d00754f44...c6.exe
windows10-2004-x64
3$COMMONFIL...re.dll
windows7-x64
1$COMMONFIL...re.dll
windows10-2004-x64
1Default_6....ig.vbs
windows7-x64
1Default_6....ig.vbs
windows10-2004-x64
1Default_7....ig.vbs
windows7-x64
1Default_7....ig.vbs
windows10-2004-x64
1$INSTDIR$_...er.vbs
windows7-x64
1$INSTDIR$_...er.vbs
windows10-2004-x64
1$INSTDIR$_...er.vbs
windows7-x64
1$INSTDIR$_...er.vbs
windows10-2004-x64
1$INSTDIR$_...or.vbs
windows7-x64
1$INSTDIR$_...or.vbs
windows10-2004-x64
1$INSTDIR$_...by.vbs
windows7-x64
1$INSTDIR$_...by.vbs
windows10-2004-x64
1$INSTDIR$_...ter.js
windows7-x64
3$INSTDIR$_...ter.js
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...le.dll
windows7-x64
1$PLUGINSDI...le.dll
windows10-2004-x64
1Docs/REAPE...rt.pdf
windows7-x64
1Docs/REAPE...rt.pdf
windows10-2004-x64
1Plugins/FFmpeg.dll
windows7-x64
1Plugins/FFmpeg.dll
windows10-2004-x64
1Plugins/FX...st.dll
windows7-x64
1Plugins/FX...st.dll
windows10-2004-x64
1Plugins/FX...mp.dll
windows7-x64
1Plugins/FX...mp.dll
windows10-2004-x64
1Analysis
- max time kernel
118s - max time network
126s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
12/06/2024, 01:22
Behavioral task
behavioral1
Sample
2d00754f44c07a3241059e43be8dc6c6.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral2
Sample
2d00754f44c07a3241059e43be8dc6c6.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$COMMONFILES64/Propellerhead Software/ReWire/ReWire.dll
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral4
Sample
$COMMONFILES64/Propellerhead Software/ReWire/ReWire.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Default_6.0_unpacked/rtconfig.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
Default_6.0_unpacked/rtconfig.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Default_7.0_unpacked/rtconfig.vbs
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral8
Sample
Default_7.0_unpacked/rtconfig.vbs
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$INSTDIR$_8_/Effects/Liteon/deesser.vbs
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral10
Sample
$INSTDIR$_8_/Effects/Liteon/deesser.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$INSTDIR$_8_/Effects/Liteon/np1136peaklimiter.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral12
Sample
$INSTDIR$_8_/Effects/Liteon/np1136peaklimiter.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$INSTDIR$_8_/Effects/Liteon/ringmodulator.vbs
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral14
Sample
$INSTDIR$_8_/Effects/Liteon/ringmodulator.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$INSTDIR$_8_/Effects/midi/sequencer_megababy.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
$INSTDIR$_8_/Effects/midi/sequencer_megababy.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
$INSTDIR$_8_/Scripts/Cockos/Default_6.0_theme_adjuster.js
Resource
win7-20240611-en
windows7-x64
Behavioral task
behavioral18
Sample
$INSTDIR$_8_/Scripts/Cockos/Default_6.0_theme_adjuster.js
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
$PLUGINSDIR/portable.dll
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral24
Sample
$PLUGINSDIR/portable.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Docs/REAPER Quick Start.pdf
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral26
Sample
Docs/REAPER Quick Start.pdf
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Plugins/FFmpeg.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral28
Sample
Plugins/FFmpeg.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Plugins/FX/reacast.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral30
Sample
Plugins/FX/reacast.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Plugins/FX/reacomp.dll
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral32
Sample
Plugins/FX/reacomp.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
General
- Target Docs/REAPER Quick Start.pdf
- Size 98KB
- Sample240612-brbecaxenc
- SHA256 58045223424d936adcefc09c06f635c30a1aaba0335fc5d5954b43833b53fd72
- MD5 1bddb792fec19750ccbbb8352b2b8ffe
- SHA1 dd300cb011e0d9abd57f41503e31367167fddd68
- SHA512 1438030735aa9549e13b2e275210a9c6bb825329acd568d8c38f8debe04474ce01be5e44ef6b76913d47b59d33c58954615754cffbce67de04f9ccbaa8341631
- SSDEEP 1536:loTqjohGkVSC9aZHu40Y7w58PxeVPM6b24k8frIP4T8m0qd4gBE:1lHfEU03kPm8m0qzBE
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2124 AcroRd32.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2124 AcroRd32.exe 2124 AcroRd32.exe 2124 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
- Size 3KB
- SHA256 448b7164eb1f7c1ffd8de3c50cefeffe68c3cf39718b913593320d0e156a4207
- MD5 df47795e9bf785bd15d1d2fed2974ec5
- SHA1 a7df0e86dfb999c595ef2fb36015cc7068496349
- SHA512 3e1f52d20b88228063b393758e9c74520ae68fb3bdfeca3f3912b1d0101283e80592abd1d0178f0fff61672cc09ade53bdf77de18580d6fd0ab03548b490ec8c
- MD5 SHA1 SHA512