1b68640aa8fd10bd30af2f5a3e0a2a04bc203300fabbbc2401473c07be264632

Sharing

Copy URL

Twitter E-mail

General

Target

reaper716_x64-install.exe
Size

15.0MB
Sample

240620-kw2lrsyfmc
MD5

5ae728acc56b2cd8ea26fd255f01d686
SHA1

8685ca658fea985d5febdd90871a579d4b97d80f
SHA256

1b68640aa8fd10bd30af2f5a3e0a2a04bc203300fabbbc2401473c07be264632
SHA512

6d564196db49ea15460530b0d4fbf3a3e1123b6eecb34143462c492f3082adc068bbd2596c4157c30a60f410567ddf9c254e16650a6d0bfb6fd915ea32435301
SSDEEP

393216:J80aNxeq4976CW12wulI8GXo0a9Xrv/Nl9yZ8Pne7FJ2uvyWv:e0Uxe19eCWeSXcrnNLlsF8u7v

Score

7^/10

Malware Config

Targets

- Target
  
  reaper716_x64-install.exe
- Size
  
  15.0MB
- MD5
  
  5ae728acc56b2cd8ea26fd255f01d686
- SHA1
  
  8685ca658fea985d5febdd90871a579d4b97d80f
- SHA256
  
  1b68640aa8fd10bd30af2f5a3e0a2a04bc203300fabbbc2401473c07be264632
- SHA512
  
  6d564196db49ea15460530b0d4fbf3a3e1123b6eecb34143462c492f3082adc068bbd2596c4157c30a60f410567ddf9c254e16650a6d0bfb6fd915ea32435301
- SSDEEP
  
  393216:J80aNxeq4976CW12wulI8GXo0a9Xrv/Nl9yZ8Pne7FJ2uvyWv:e0Uxe19eCWeSXcrnNLlsF8u7v
Score

7^/10

discovery evasion
- Executes dropped EXE
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  
  $INSTDIR$_8_/ColorThemes/Default_6.0.ReaperThemeZip
- Size
  
  22.0MB
- MD5
  
  703a756ea407567d88fadb5a1c2b09c8
- SHA1
  
  dfc590849ddc32fedae3510d9d53c85807abbf7c
- SHA256
  
  eb0c31c3aa933b5556cc0728dabcf9d343fece8e8a9448dd42b394c5533bb68d
- SHA512
  
  fa4837a876249fe265aaaf25c7d073b7ba607cdfbbd7abb86ac4413abcf840e33ffe48d16aae3733d0d5124c0dff5fe89d1c0b5f1afe3fa824026999b7ca883f
- SSDEEP
  
  24576:2jQj/jjjjbjjjjkjjOjjKjjjRjqj0/hEdaI0ycbjjjzjjjzjjjzjjjfjjjjjjjDW:L0ycu5ZXEoxcJm3
Score

1^/10
behavioral2
- Target
  
  $INSTDIR$_8_/ColorThemes/Default_7.0.ReaperThemeZip
- Size
  
  21.2MB
- MD5
  
  7740dc993a29a847d22d588d18a37ad8
- SHA1
  
  acf87b7e428eacc4f55bb79b84610af92207223f
- SHA256
  
  a1c94126af9c0eadc6dd88162551aa7e1d1deb660aa5e5c688b3ecfe56b4618d
- SHA512
  
  2576ba3d5be6fbfa10f9ea229b76467ecf4cbcc9deb02a0d1c6bca32374c1716418f670f18ec1c99dfa48c31e413d30cd156bf14fa50db3517ee9e9ecb4b4f79
- SSDEEP
  
  49152:ywdd5EUzigwHSfczuIc/p/Ucfv4recfIP00wHS:ywdd5EUzigwHSfczuI6v4recfIP00wHS
Score

1^/10
behavioral3
- Target
  
  $INSTDIR$_8_/Data/GM.reabank
- Size
  
  4KB
- MD5
  
  6f06246f7851d562c3af5b83db135c86
- SHA1
  
  8aa60f82a9b2c7eaf431fdc0c79e8f7c08a733ea
- SHA256
  
  da43bce7a5cc96a01d5757a951cbaba2696408d6239bdf083aab079e07ef236f
- SHA512
  
  c9d01dc7170165715978ee8e9afd8e2825ed7edef0d318219dc90231fa554871edd6757111cc9eef24fa92b309bba744c1d02ac6d8873a8dec961a5f9a734c4d
- SSDEEP
  
  96:n/0pFxL6t2JL4dkKzlygYbh2J/w7OpGR+6ejGlMR8U+0XXHm01nZ4bzfaS6ZHzNn:/0p7WMSkKzlJIh2J/w7Gx6ejOk8twLZj
Score

3^/10
behavioral4
- Target
  
  $INSTDIR$_8_/Data/amp_models/Dumble Overdrive Special - Tweed Deluxe.wav
- Size
  
  4KB
- MD5
  
  33b31fd3bf3a7fa66274b52374247898
- SHA1
  
  cbecbfe0271578087e192157ea5c6924bc44fc6d
- SHA256
  
  5a06fbba771a89783c957822e4dd92852ce12a1d47c604fdf220769f41b94480
- SHA512
  
  656f131e473ed3303538124e7823a03cbd00b33cc44ceb7783e2b7a53cd43c98cc4660b015265b191e8a7e652df85046415ee8f505c08fdfec50a92e1d7c9136
- SSDEEP
  
  6:s0rtxTx4/LasekRvKBjOGgD4qZ04U1xnVqzXIuOk0uFa+9sMP4:ssxOOJerFD4qZI1xnQTguK
Score

1^/10
behavioral5
- Target
  
  $INSTDIR$_8_/Data/amp_models/Fender Bassman - Fender Bassman.wav
- Size
  
  4KB
- MD5
  
  bafd91a6f40032cd8ba1b760fc474c54
- SHA1
  
  b710a95cc80fc7a8cfd6a101d7b7e2dec3345438
- SHA256
  
  68d325d659b8adf3dbb6a421277d35e5f61dbb1373003a149eb2a3cbdd49be8c
- SHA512
  
  d8f5f358cb07f95e2b6f435e78716fe456209c9077e8a2b7d8b018a2ff116d7fe5863f32f18baee66ff9dbedb56d41256fb18bf54f0f6ba21dc7f27af45843b4
- SSDEEP
  
  6:Ztouy0p2MTEecBTL7fcs0idGzZybgyL4kERTb4vCtiQxavYSMkLBZpQOPq6Ed:zouy0LE1vcBlzMsy8Npjapl1XbUd
Score

1^/10
behavioral6
- Target
  
  $INSTDIR$_8_/Data/amp_models/Fender Bassman - Tweed Champ.wav
- Size
  
  4KB
- MD5
  
  1ae37d5cb7fae2fe6a44d705903d1d68
- SHA1
  
  dd5509f7e623352aa5249c9ea5fef2ced9602de4
- SHA256
  
  396bc77761daac4fc368a1d0c23ab9307941b6f3ea03b2502617c868f15c2b86
- SHA512
  
  018d3e0a7c12bbf35a95db636327afb89ae891f47f74276f0ac03ab9b08b2f349185c97a78a015ee13dc0357f3ffa28063a4e81f970db76cd30076f63ffa9a36
- SSDEEP
  
  12:g25HJyj+KEBVOSKSuOtQjqzzsE1v6IwrTvaeq+30CdwHW2h05geiEirInmE6LZrh:z4+JBVOxSuhuse2yeq6ExS5PnmRLX
Score

1^/10
behavioral7
- Target
  
  $INSTDIR$_8_/Data/amp_models/Fender Deluxe - Marshall Stock 70.wav
- Size
  
  4KB
- MD5
  
  87638bf2893031b221af0922e973e21d
- SHA1
  
  da6640fe9cad53093a656f0d8656812813626ace
- SHA256
  
  59b067e001e9425b4c165b9a71ca5e0ea1aa839633dbe4252660c3fe87da1596
- SHA512
  
  f4d97c781b3f0e818b1d11e0a3744548d6603039fdecfe885b650c571bcb8bc6a86002f2b89785a9b40395a751b5c7801bb2c5280680e20c4bbbfafa074c8baf
- SSDEEP
  
  24:7n03rCHcYcdrStDrKb92ejtr3teZEbmfn7u:703ocYAw3Kb9JWGbh
Score

6^/10
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral8
- Target
  
  $INSTDIR$_8_/Data/amp_models/Fender Deluxe - Tweed Champ.wav
- Size
  
  4KB
- MD5
  
  8001985fc6d93b20ba5d4ad3eb837720
- SHA1
  
  65a143ebf17b9c1c6c4ee7237b2ebccc4f48cde5
- SHA256
  
  5e4a40b4d41bee5448885be5378ab93a3027fb4c13778aa6179ffdf28ded2f84
- SHA512
  
  67b1edad89d5936217f263ed1e409bc712ab6ae7388a6c5cdaecb17740c121d595d77e0d281f9d258a47afc004a32e0632bb80f110677eea4e80508012eb76cf
- SSDEEP
  
  12:Wu68nTiU+42ybLUX45uTULzGoaiW8k6/aMDZSfB42b3+4Z1IqOdFjJjLb:DTmNUeoaiW6/NZSpu4Z1Q
Score

1^/10
behavioral9
- Target
  
  $INSTDIR$_8_/Data/amp_models/Marshall JCM800 - Marshall Stock 70.wav
- Size
  
  4KB
- MD5
  
  f1cbfea4f4678704d895dc78cb24213a
- SHA1
  
  78515d6cd7d6911c40d4b7565a30121596c43a79
- SHA256
  
  48dcc27ee229502ec34ef863b8a867bb180156efccff2e2819260475a6f990c0
- SHA512
  
  e2196c00a1c49ad2a85b459f1139d9c7545f39ba6592e3d66e894200e33be6f2d4beafd62e2f0aa9ee1bd684f94d120623cd637394a52b405a2c8a5b3c090a29
- SSDEEP
  
  24:sfsx8+mvAQzAXBd1Z7k5GzkZ819paoI5wbRy2:xjqAQ831bc8uuNf
Score

1^/10
behavioral10
- Target
  
  $INSTDIR$_8_/Data/amp_models/Marshall JCM800 - Matchless Chieftain.wav
- Size
  
  4KB
- MD5
  
  0dc1cdc06ecfdfa025de8c1bcf8c3003
- SHA1
  
  45a1a445aeebf56d9c45d4094532ab7954dd8fd2
- SHA256
  
  273250faa8df43799e9ba549544b8c4005bea371e4d6df537f1f9d97076a8636
- SHA512
  
  2a1ccbdbad13b362cf0adf1365b260e330f8e211a6a93a00ffd1a83c7c9f337ca9f4ada6f392999606ec8940df3ee8fc8c5738765c4d1a98d784cc8229a8f0b2
- SSDEEP
  
  12:WuoDZYKhN7W6xMWJqG8qKPfs6WzVJd/740BskczM+617Dy9kmzpr52kl+:qFYKD7LxMWJqGMWzu0L6ExDyVzpMs+
Score

1^/10
behavioral11
- Target
  
  $INSTDIR$_8_/Data/amp_models/Marshall JTM45 - Blackface Deluxe.wav
- Size
  
  4KB
- MD5
  
  5a37e73820fd7f3372fbba5edafe96ce
- SHA1
  
  ca3362c2870cac126af0f384eb49e168e28c8986
- SHA256
  
  98faf64b07b18df56c2d3f0c9044fa1f93926656697401dec5eeffbd8bd142d7
- SHA512
  
  e8ce11bcc9ef8084dcc197685b411596e47f2d1dde88989ddb1e24383b5f96a8b981c594855231ef29ec3841c1545e072a4cf7a866ca6a1c25e4ed2617b80c73
- SSDEEP
  
  6:MRtgUu+IRu48p8IL+h0mEgLe3Vl4vpb/9SWv7XwX00mctEa4osM8vmg5gCg:MbgROx2IL20mEgL66xbkWv7ANtdOvbHg
Score

6^/10
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral12
- Target
  
  $INSTDIR$_8_/Data/amp_models/Marshall JTM45 - Matchless Chieftain.wav
- Size
  
  4KB
- MD5
  
  14071c09dc0fcddc7c946ca2bffeb959
- SHA1
  
  a130721134a1a173a7a35ca9e01a386aa0089049
- SHA256
  
  f48c5bb9d4515a0de774181e043856e444d29adbb46ffb454480b2824e43bf42
- SHA512
  
  c98d75605173f67935f425dc37a8316c6e8f911daa1e7660d433e60b68c9d235a29ba205a8a9c4336bb86fbcf62398685aca5399f9f1acc638e9c08c757e919d
- SSDEEP
  
  24:LU8hwj97QAxEmusQVpaXCUG/SI6Es6g8K:LU0wVXEmCVyGB6fv
Score

1^/10
behavioral13
- Target
  
  $INSTDIR$_8_/Data/amp_models/Mesa Boogie Clean - Blackface Twin.wav
- Size
  
  4KB
- MD5
  
  2f8f67507f48ddcfe4fdd587289e5336
- SHA1
  
  accad4f1b2afa14f81a509222a6e54f49af9354f
- SHA256
  
  54296c71c65d48cc5faa5de35f2d96fc0fb118b8443a5fb2e9a72d063b3dc178
- SHA512
  
  ee87934dd7bea0f20ffbf696fa7c7f9c49ccc07a5d576950552fac1701f0ea6aa79ee2a7bf2830e225f7cd67eec74a18713b378a67b4899fa972a7237ab18315
- SSDEEP
  
  6:JtIX4d2C0o+qXhOQWzBXtQLRmJkSP5wfchZ6Ye+y8/CT37JRxTHSIrFKOX/C:DIoRDLhFue/+yuCT37ZBZvC
Score

1^/10
behavioral14
- Target
  
  $INSTDIR$_8_/Data/amp_models/Mesa Boogie Clean - Matchless Chieftain.wav
- Size
  
  4KB
- MD5
  
  b61b501ae2d92985eaa6cde83264b3c7
- SHA1
  
  b2b449c2b3eb23cbe281591c146f49840632dcbe
- SHA256
  
  5dec239f08e4809a1492713973c04a10e5cc0e54b48b824616131deafab02935
- SHA512
  
  03f159278052bf008616587a6d1c5ebffddaf331089b398f23d7cf9de21183f1a30c363c383b255277435f3c25a95bd0a113a5b2a7b8ad306a45a4ce618591c7
- SSDEEP
  
  12:av5wve8gpe3R1WTaLF1V9dEwVjRh3h4QHYCHGbpC9q8bRbuCA9RtT/Gk7h4Dh:ikJLWT8N4wzh3hZ4b09lbghRtTj2F
Score

1^/10
behavioral15
- Target
  
  $INSTDIR$_8_/Data/amp_models/Vox AC30 Non Top Boost - Vox AC30.wav
- Size
  
  4KB
- MD5
  
  15232e709d034a9d7e1abbefa11dea9f
- SHA1
  
  7a2f1ed27ccce9c7d18449e3d662b65740b34c80
- SHA256
  
  076519b0129fa16a806793b127928e72dba7c382ad876c43a8a1221450f5e0e6
- SHA512
  
  3fcc6f6c70b0188b34e2837a3504e89398ad153e331fb18788083ad75fab5b3ccabeeeea01cdcc8e056821cf0252d49b22f7ae9c6345ff6d974e1ae3ad481c4b
- SSDEEP
  
  12:/MwH3UR2bq6/bQbYySEvhPpwJTwjJZjwSrias/:0wXU4bqsaYyXvbwSz5Ps/
Score

1^/10
behavioral16
- Target
  
  $INSTDIR$_8_/Data/ix_keymaps/00 - Default Mapping.txt
- Size
  
  1KB
- MD5
  
  c409830f40665b23b23b3eb7df86f85b
- SHA1
  
  7c5df34ddc9d0af01301146ac56c564e183bb200
- SHA256
  
  c0c705ad1bd1dacf4e175bbbf81c1ebf81b981d0bebf5357d1876abef8190dc5
- SHA512
  
  d3ac622e3277a4cd7fe41571cddac143c4fb9d6877f1cb39790732c4a8fb321e4463d3f0c75bbdf7d4d1bb80449723d8c87d6d3d08d511056755a1b5bd344520
Score

1^/10
behavioral17
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Chromatic.txt
- Size
  
  141B
- MD5
  
  74d1af1854860a7741e3741ae204ec30
- SHA1
  
  cbaae4d9a2bad8d07c62a4f36efb117e67c3407b
- SHA256
  
  c34979d66ce96127ee98248d90dddc51ddbb93135747a30ae70f6a21c7b65559
- SHA512
  
  9250a36db49e4ea247657e551c2ffd6c9820fa12c34671c08900f98a429d27ea1a9ad83ae662ba41fa5d30afec05f65c839f97cef6349d88ec0bfa0f87a2e7c0
Score

1^/10
behavioral18
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Dorian.txt
- Size
  
  125B
- MD5
  
  399c656e6864dac590f53d8f32492e82
- SHA1
  
  b0c585db9515f0b0d7b1a67cae9a3e11c3d7db20
- SHA256
  
  d4f12d3e28e91a4498d50ec6035765d904516a2cf6f545cf1131d307af1227dd
- SHA512
  
  0c66101042da787e676c288e4ed59196c1115d3f37c7ae749f880054dfe3bd8e38429c503dd76764d67cf645488df821365ac93ace22e757140147c8693e0d21
Score

1^/10
behavioral19
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Harmonic Minor.txt
- Size
  
  125B
- MD5
  
  f35f776aa037c5a58b695d4484479b1e
- SHA1
  
  0e65dd8670c1d4252ff759c5f6f05e378dff8969
- SHA256
  
  3d105fc263a2e5e0e0dfc4e69032b291061d6db6abc1052c4116d192ac6a4a19
- SHA512
  
  d657c15c8b77458ac61af88bd47d0b855b91dd36a17f21d6a0c21225ad8dbeda84f37d08a0d3113328ef6dc2b8a6d084f585b8ee801dc84353408e31e32a9022
Score

1^/10
behavioral20
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Locrian.txt
- Size
  
  125B
- MD5
  
  a9c5086aee5ce699c3dec4665a9f014c
- SHA1
  
  2791a2e76d2182ce26108f3155454365969bf433
- SHA256
  
  1f86ea118db38741e65e76bf26f62287c09ce80d4bfea8530db8fe5792c0fab4
- SHA512
  
  02970090a61181098f140630fd98ff57150720819ce3cdc05af5c37d0456ca3993a02bb388effbf29ac8693cafda60ccbf89c5b30a9b6127b81fe1c584bc8438
Score

1^/10
behavioral21
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Lydian.txt
- Size
  
  125B
- MD5
  
  c88c9b0ac3686f513a3c7e6b61094f94
- SHA1
  
  6c41422ea2c5844af2dadc00da733b0a26e2c7b8
- SHA256
  
  b054cb588b0dd2aa4cf2aeb9b608c78691394f621ba00d0fa9ca3a618348c5da
- SHA512
  
  ba393f581d73e60691f071e2774f3b3f16d5faac24738035e0554ae353d11955ca33b89c1f9a7f1cb86508f2f7bd2318e6a9b07af85009a803baea45f85426f2
Score

1^/10
behavioral22
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Major.txt
- Size
  
  125B
- MD5
  
  4b5c1475ea5eb774e913c2d1323cb8de
- SHA1
  
  63a10472b443985c2dc3bce4951fcc00ce630dbf
- SHA256
  
  aa28e4017f05434d699dfc4b3555fb3c273894395c1f24a72437f331ce35b7f2
- SHA512
  
  9a69d3fdc35de94324ae40c20ddedfde0779d36ec74c46190623ba372c4683d4343009d09f3c1af7e96d52cefac585c0de249a72b9f43110d6463e1e3e217086
Score

1^/10
behavioral23
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Melodic Minor.txt
- Size
  
  125B
- MD5
  
  aad5b40d0a640fd88f363d42f3e67d7e
- SHA1
  
  2fcb2d74b95f9bbd69425e6421c97c62329f5f53
- SHA256
  
  57608f807c193eb739bbb3efb280098d07f7f1a8385beb59fd1d7b31e8ed8a15
- SHA512
  
  134be90a416577a07b71367003b9a35aebc7d9f65e832d3191596d76973912239f66088ce169f2dfb61a1b5d16ddb572bc2e328dfc2433b9969c7235e6772c7a
Score

1^/10
behavioral24
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Mixolydian.txt
- Size
  
  125B
- MD5
  
  797f34d8365c008320c9e2e16c72cf9e
- SHA1
  
  0f72b4434dda80121f54205be7574eb60ee319bc
- SHA256
  
  fafa2069bb8ffbcc5ff4e4d366698220c0ee06643ea325b83d0f3d2fe39be939
- SHA512
  
  8281e8a6ffb7d5eabe2281521ccb59c48ac27255799a82368cb85f99b421c46280b00bf6e882ab33fae077b1d972f6020e7e2671b5bf52f6fae3a776bebb83aa
Score

1^/10
behavioral25
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Natural Minor.txt
- Size
  
  125B
- MD5
  
  8cc780c962c78bfb7ff8c0d39fb5bbb0
- SHA1
  
  a9b2b8ae3d1537402f844ea822b3273e77a7ca9b
- SHA256
  
  2617b4b1e795b3a7ee8313947f9311e821f8df54897044514c226a9c2c2cf694
- SHA512
  
  8c833e43c4d8beda9b8e26ab82cd236a15f5f55f3c81a17d45c5aedfa65209ccc61f2145c3973bae53fa11e05e7e0b45a798dd9e4201f6180ca6814b3081be82
Score

1^/10
behavioral26
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Pentatonic Major.txt
- Size
  
  118B
- MD5
  
  a512923eba2712da7314df3cb02001e8
- SHA1
  
  ffe909ce16335f2b8dd06e6d46a32ceb58cd63e6
- SHA256
  
  e8a91ccc88c0d5d8b4573e8caa71f09a5edb014d8d6e20e8a6dcc218631c2ee8
- SHA512
  
  7eb44c79abcf09a8684a5380ca5e40252e210b01a951255a13067dda166d1918bf667823902728a0f37e971bc33b77f11da762eff1a731277f2dbac868fd2667
Score

1^/10
behavioral27
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Pentatonic Minor.txt
- Size
  
  119B
- MD5
  
  d04ac0c483db594fd055aff0203bf69d
- SHA1
  
  83be8777946648ed35be71199d93077317c483cd
- SHA256
  
  781be05ef2eebaf911af83f1029d8fa2b1461e28b9e58cc60a4b6828f3a89bb5
- SHA512
  
  efeb1a023d42db1eb44ec2a85fa82b97dff3d5f942b34af1f0dd7838c8c475f9b45821d5e7f28c0f9eea896b50c13b919f20b9746906d263d8f4ce95700576b9
Score

1^/10
behavioral28
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Phrygian.txt
- Size
  
  125B
- MD5
  
  0dfc28c2e8609a31f611997cb5b0e74e
- SHA1
  
  e2822c241dc2d81ea63ace5464660074ddaafed1
- SHA256
  
  1e5ed7f8f34114619b0d22cef43047c34163c8cb859cb89fa6664c836e84c91b
- SHA512
  
  52716bd2f10c23c75abc82df1d2a03b11a2a786bd4d99ee7654ea3da56e6800fd97afa41b867ae02954e205ae3b7943f96fa42646fa273613c51b1296c6adfcc
Score

1^/10
behavioral29
- Target
  
  $INSTDIR$_8_/Data/ix_scales/Whole Tone.txt
- Size
  
  122B
- MD5
  
  a189001d457e937657faa53ba1c1277d
- SHA1
  
  cd560343d620ede958ebd116cd4bab1051b1fe99
- SHA256
  
  ce107f1d7f48699d558369d21f5bab0e5372d3a3df3b9bfb0bd840c66ccf956d
- SHA512
  
  28df764d9f4b9e239d94617749014bc983fdcb2b9933279c019afe6936b1259bc39a3409ce18457196cbef84ad04c143b767d3c7ddaf28a7fc1c25f351180acc
Score

1^/10
behavioral30
- Target
  
  $INSTDIR$_8_/Data/ix_sequences/1 - All Notes.txt
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

1^/10
behavioral31
- Target
  
  $INSTDIR$_8_/Data/ix_sequences/2 - Accent on 1.txt
- Size
  
  112B
- MD5
  
  57de5b6088805c01b0dd3b75430e6d50
- SHA1
  
  3096be92182b9d058914505ebe26fc8a2d4b523e
- SHA256
  
  825d22c68c00a40d4df93a0b6c57babd910dbca4b9a2a386e499185cd7d79d82
- SHA512
  
  c7e01e42c63db2dd44e2314e5879b41c3652607c7fdd2a47039a9d15da178faab622689c5b6fff2ffb75af360019c44b243a80189ff73de4834c63e1a2e928e2
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Identifies Wine through registry keys

Loads dropped DLL

Checks installed software on the system

Drops desktop.ini file(s)

Enumerates connected drives

Enumerates connected drives

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32