Overview

overview

4

Static

static

3

music-go.exe

windows7-x64

4

music-go.exe

windows10-2004-x64

4

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

3

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

api-ms-win...-0.dll

windows10-2004-x64

1

d3dcompiler_47.dll

windows10-2004-x64

3

ffmpeg.dll

windows7-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows7-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows7-x64

3

libGLESv2.dll

windows10-2004-x64

3

msvcp100.dll

windows7-x64

3

msvcp100.dll

windows10-2004-x64

3

msvcp140.dll

windows7-x64

3

msvcp140.dll

windows10-2004-x64

3

msvcr100.dll

windows7-x64

3

msvcr100.dll

windows10-2004-x64

3

resources/app/7za.exe

windows7-x64

1

resources/app/7za.exe

windows10-2004-x64

1

resources/...ed.dll

windows7-x64

1

resources/...ed.dll

windows10-2004-x64

1

resources/...dm.dll

windows7-x64

1

resources/...dm.dll

windows10-2004-x64

1

resources/...r.html

windows7-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    music-go.exe

  • Size

    93.9MB

  • Sample

    240703-sds6nsvakd

  • MD5

    ef4f2a56db82fb482b6a60c469dc2d65

  • SHA1

    21c9cc04befd014d4498dda76323ece01ae74b4f

  • SHA256

    c5a44b3d265b10212fe02cc581453d1fe751d30091282e1e2217c73ab196a232

  • SHA512

    d7003886d0e3a3b211e7da05107af0382b419440f5e75041d62a9daa0954b78e171e22c68a70dddee6a0246ece81817a9b9ba087d42be7d7cfbcde6662422e94

  • SSDEEP

    1572864:9DupUQqyz/bEwmOO/vpe2FDH1x4z78DD9g9kk43kX0bBJ77a2TeVPBnC+irVryf2:hua7obXWY2F7gz4EokEbPRYPlHirlyf2

Score
4/10

Malware Config

Targets

    • Target

      music-go.exe

    • Size

      93.9MB

    • MD5

      ef4f2a56db82fb482b6a60c469dc2d65

    • SHA1

      21c9cc04befd014d4498dda76323ece01ae74b4f

    • SHA256

      c5a44b3d265b10212fe02cc581453d1fe751d30091282e1e2217c73ab196a232

    • SHA512

      d7003886d0e3a3b211e7da05107af0382b419440f5e75041d62a9daa0954b78e171e22c68a70dddee6a0246ece81817a9b9ba087d42be7d7cfbcde6662422e94

    • SSDEEP

      1572864:9DupUQqyz/bEwmOO/vpe2FDH1x4z78DD9g9kk43kX0bBJ77a2TeVPBnC+irVryf2:hua7obXWY2F7gz4EokEbPRYPlHirlyf2

    Score
    4/10
    behavioral1behavioral2

    • Target

      api-ms-win-crt-locale-l1-1-0.dll

    • Size

      18KB

    • MD5

      62562f65937a39c28b795e1acbbda9ce

    • SHA1

      2fb1ddd0fc9e8d1bc367a3c73f79723044f310c6

    • SHA256

      8f5ee5bd8d46952075a04e3ee09b3da2f5d324fce433d5489f06b4ce4d4f872c

    • SHA512

      d330c6a502b8df39c8cdab4ac2ebdf672da0581cff6c20668747d89fabeb7c045dfb2f7b1bd12f74c1c8528e718362aee1e168bdbacad758e574c75364fc276e

    • SSDEEP

      384:GW1hWD5YHNfPfLeEdtpBjdY3FY+f35XhlMl:9MYBbeElrY3FBi

    Score
    1/10
    behavioral3

    • Target

      api-ms-win-crt-math-l1-1-0.dll

    • Size

      28KB

    • MD5

      db8eb373d11c14e7698acbb77e316578

    • SHA1

      2ce8888d8c968602934d5cd16409758ea4a81fb4

    • SHA256

      51b6fce544c7a61e4ef49137d10256cda690007da3a7b79526dc8772c96df6f8

    • SHA512

      bb52e10bb62462b2962cc950c1ea1960af10a220312f914bffe84b1cc705753d524df2ef531ad1d60bb837b1187fd43efd582cc6b031ccfccdd9a03d6d83d781

    • SSDEEP

      384:NOTEmbM4Oe5grykfIgTmLmW1hWQ1YHNfPfLeEdtpBjRYJf3dUdlaK:DEMq5grxfIndVYBbeElfYJuf

    Score
    1/10
    behavioral4

    • Target

      api-ms-win-crt-multibyte-l1-1-0.dll

    • Size

      25KB

    • MD5

      eff67e06581c9940ddf3faeb5fe1ecfd

    • SHA1

      8311b7ae80f4d58ab8c4105969668f0e7baf57d6

    • SHA256

      06d11b7feb86be22862570751a003a36ca29b8e9586d877e37d757af7b2ec9c5

    • SHA512

      3cc0ac65258e9ca53ba535ca0084dcfe48fac1d15cf20c4d5d4cd96327ceae2418c3dea7cf53b82387fbb1e78a90098350a45f18de587bab17b3f252d752a2ea

    • SSDEEP

      384:Oy+Kr6aLPmIHJI6/CpG3t2G3t4odXLNW1hWq4YYHNfPfLeEdtpBjdY1JK2Mf3bIK:OZKrZPmIHJI6aKYYBbeElrY1RMMrm

    Score
    1/10
    behavioral5

    • Target

      api-ms-win-crt-private-l1-1-0.dll

    • Size

      71KB

    • MD5

      11829527713fa070ed81f9a4c4a4c03c

    • SHA1

      40a8f3c3d1770730ba26a44d21323e7bccd82ec1

    • SHA256

      f794208a1b2e7ef1055d68dc8f6d4a960c7a95dc98685f886f03af7d0b57cec2

    • SHA512

      e0b622f6da8551a22d80250cdf880452288f7757e6dfd4a281cf1f09b6199b7cb47018cb847be0a3843074c35915c8f9db4fd356317e84b2dbd3088c60dc4aaf

    • SSDEEP

      1536:W0DjXDe5c4bFE2Jy2cvxXWpD9d3334BkZnVPLGBbeE2CDp:5jDe5c4bFE2Jy2cvxXWpD9d3334BkZnC

    Score
    3/10
    behavioral6

    • Target

      api-ms-win-crt-process-l1-1-0.dll

    • Size

      18KB

    • MD5

      fc29239610c95c2e37b2b73d080a2936

    • SHA1

      f00d92dd1c9f2ce05fb10b81c0d41fa2cd269170

    • SHA256

      f6a7bb53d6fd9886098a237e1985a5b314693fef57e8580dfb22d33de1dfaff9

    • SHA512

      b79b259a37f80936bccce6d9c7b809e1ccee117d4f327347a735d9cf4eb5ff22a1d4a824c5ba2a36474db4e6cd239e14cf98d2181b635a655c38ac0d7cf08785

    • SSDEEP

      384:wKwW1hWh8nw0YHNfPfLeEdtpBjdY/f3/8pUcl3CR:RtbYBbeElrY/H8pUd

    Score
    1/10
    behavioral7

    • Target

      api-ms-win-crt-runtime-l1-1-0.dll

    • Size

      22KB

    • MD5

      fe1e9c1f7975dd6751f7d66305ce995e

    • SHA1

      0a7150943eb973278b97db0210eea2cdbc474318

    • SHA256

      66e4de483adf7af252d67e0c988a163cfa76436485dce3badfd6740766b39432

    • SHA512

      06c034f8d7e2ba029a06fabfb98e742cfe7bbaeb9da56b5bf4030185597ee4a1439b1c6081b0e1c5814a0b2be464750b76f4e7e4cdfec36ae746bbc11a3967e8

    • SSDEEP

      384:ub7hrKkW1hW2gYHNfPfLeEdtpBjxYpMf3Nzol9PXx:ubNrKnqYBbeElPYpMy

    Score
    1/10
    behavioral8

    • Target

      api-ms-win-crt-stdio-l1-1-0.dll

    • Size

      23KB

    • MD5

      b460c0a6b145fb30002fc6e1f70a4f7c

    • SHA1

      8ace170b9709e2d7854e4a5385bf05886b16ee26

    • SHA256

      cae1208c3bded797336dba2fca5dad3923b99d026e850c802327ce5555e35775

    • SHA512

      7419bf32dcc66b44671d024f226d92d2e3f7b53829ce9fe25c6a3b9fda35831557650d0e87385b54c84f6fe762f142518984050b9377110bd59a2aaafa3e5f97

    • SSDEEP

      384:NZpFVhHW1hWGq8nw0YHNfPfLeEdtpBjdYNi6Cf3Kd8pUcl3CbFe:lo5bYBbeElrYs6Co8pUfFe

    Score
    1/10
    behavioral9

    • Target

      api-ms-win-crt-string-l1-1-0.dll

    • Size

      23KB

    • MD5

      b144912affaf4df8ae8a84f5ae2bd722

    • SHA1

      23c5a832433da19dff2c3eb4e5ac03f3492a289a

    • SHA256

      8462cac692d42111aafb52b6eb6740987490e941407ea3921edc3c7306720b12

    • SHA512

      96199647d27ca4b165ded0edfed8feede79e63a01bc0a51140a4b67918ef1c2322321a92afdcad3ed39b634d2f16c04f41a894cfced92c069b0662feb619c0cf

    • SSDEEP

      384:ciFMx0C5yguNvZ5VQgx3SbwA7yMVIkFGlbW1hWw5qYHNfPfLeEdtpBjdYvopf3b5:c6S5yguNvZ5VQgx3SbwA71IkFhLUYBbh

    Score
    1/10
    behavioral10

    • Target

      api-ms-win-crt-time-l1-1-0.dll

    • Size

      20KB

    • MD5

      2b701510ec3d720b8ecfbdcb4ae24de7

    • SHA1

      3c896b75e291931664c5adc16e5d5a4e04e82680

    • SHA256

      5c63c98c800d77c09598878313971f6a03c1ce09b6f89e0387d790f0c150bcb9

    • SHA512

      127a56c324207fb4c7623fa43c8c68a4fd8eae3eb8b3938735e017a9375ca66bd4a9c4e5d42ce400275da856a2177e8e4e600767777fcbceaec8586507aa6f7d

    • SSDEEP

      384:UUW1hWmgYHNfPfLeEdtpBjdYGaf3uUp1x09lY5A:4+YBbeElrYhZpk

    Score
    1/10
    behavioral11

    • Target

      api-ms-win-crt-utility-l1-1-0.dll

    • Size

      18KB

    • MD5

      e6fca8ae3857c28204e707307e1f3075

    • SHA1

      0ea224a34c59a459ad3737953e03e4e129f6b44d

    • SHA256

      379bc10b9c36971478a697477289f70ac92c04fea76a46da028cda51f780750b

    • SHA512

      824e7af9f1d87eb9e0b5c105d4209ee7dd2e42a7d399b3e8297ef77a6d28584603c418565d208873a6ebb56a5f469a2d8c946c2a2f51be24d28c4012ec7edba4

    • SSDEEP

      384:lfVW1hWTgYHNfPfLeEdtpBjdYcdf3Bp1x09lYK:lfs5YBbeElrYcdZpI

    Score
    1/10
    behavioral12

    • Target

      d3dcompiler_47.dll

    • Size

      3.9MB

    • MD5

      5e717c95808bcb5f654bb312d289b837

    • SHA1

      c69448eafa40e35424744c28e68cf69ce11a3d97

    • SHA256

      e745872db4dd114a65ee1504f401ea26d879edb6614e369a07a80ce7ad1950ca

    • SHA512

      dc5e6ee0c8fe22897009060821b18bf2f7d0317d30682f7fa84a4c1889358c152d84d22ebe57d0ec8ccc1be8714bce6b1257d30671b8d0fea88309bbd137b8f0

    • SSDEEP

      98304:q4czLWVMYHItqGZ5CNjEhrZ0T2S1kHn8:qMpGZ5CFEh10TD1kHn8

    Score
    3/10
    behavioral13

    • Target

      ffmpeg.dll

    • Size

      2.5MB

    • MD5

      cbad26df4ae9dd9e05577edc9c4fa391

    • SHA1

      d070dd217ad0c1486ed0ebddb07cfe3b337f5a79

    • SHA256

      25628eebfb11819ed9e11cad7e91e8daf14fa482aacb6e0468a093824d0fcdfd

    • SHA512

      714cd167b29e1310e425db2c9ecdc61c57d5ea3eb41e21b099c7a6de4865fabffd096dd01cb91036a1749dadb718f9f9c55b567a592cf10e91276a92ba940ee9

    • SSDEEP

      49152:RLODafMIUtBm7EuhoUNCCxi4pmJDXhKWXt5dBbj:RRfOtBQEqNCCxi4kJDRKmd9

    Score
    1/10
    behavioral14behavioral15

    • Target

      libEGL.dll

    • Size

      363KB

    • MD5

      1726f017bf0e6ac9c14b03ec299af599

    • SHA1

      eb337c0dd7dc6af4d9228cf6e27b3360d99c9c7d

    • SHA256

      378b3f426aa48b87f6aec35f4bc2146d76fd387b844d06ed372b36c9a5dbb2dd

    • SHA512

      5fb2b8cf05de0b7b2f8755a5a24a3f86a59b1f05fbfa57145bc635fb519517ee5b0685cef3b581b430c084348a3e3e811c6fd9ffe48709cf52c27805a72989a3

    • SSDEEP

      6144:DeMkkXdg0nrIEmx/MdkppZ8E0UPAcYH3hssbgKhxAnM:DHXdDIEmO+B8E0UoNOcfA

    Score
    1/10
    behavioral16behavioral17

    • Target

      libGLESv2.dll

    • Size

      6.2MB

    • MD5

      382cf99531c3f0dda67bccfc5c9fdb14

    • SHA1

      69b19cfcf78a017d76c47b766d1aabdda76a8d23

    • SHA256

      1eb087b382479284356f3366399c6f3a101f81068cc4c1e7259582669d58574f

    • SHA512

      6120d8d47c86957c690188a531fbd470be668d4f854a8fd1b00baf43b91ca2e59a43fe49eb0aca01bdab7cc05f587a50a8777e179797d61e15b5d90fef1c15bf

    • SSDEEP

      196608:HzUu47V8XyryGWXB3DmGOf6Na5L2SdOB:Hzv47BryGWXB3ad

    Score
    3/10
    behavioral18behavioral19

    • Target

      msvcp100.dll

    • Size

      411KB

    • MD5

      03e9314004f504a14a61c3d364b62f66

    • SHA1

      0aa3caac24fdf9d9d4c618e2bbf0a063036cd55d

    • SHA256

      a3ba6421991241bea9c8334b62c3088f8f131ab906c3cc52113945d05016a35f

    • SHA512

      2fcff4439d2759d93c57d49b24f28ae89b7698e284e76ac65fe2b50bdefc23a8cc3c83891d671de4e4c0f036cef810856de79ac2b028aa89a895bf35abff8c8d

    • SSDEEP

      12288:iHEqYsrMWIqz473PTiPoH/aGhUgiW6QR7t5qv3Ooc8UHkC2eKq87:iH9YsIWIW4rPTiPofaDv3Ooc8UHkC2e8

    Score
    3/10
    behavioral20behavioral21

    • Target

      msvcp140.dll

    • Size

      438KB

    • MD5

      0e7ee09885e643f8b2871d5ce0ccfd25

    • SHA1

      a7d14206f2f5b96eac1f88e2f4c89a79247fd1d8

    • SHA256

      a3e0b72081f932ade69b4004035e399dd6e7445ba3b646db2ab750a4c4e4241e

    • SHA512

      f61d0dac40bbe4a54a3f4d21349d3677f69b9e0bd383b89d1cb32a74d785c5ed62fa73c4203833d2b809b55183e65d632d0791e92b1dc01631f5fd7649705bc4

    • SSDEEP

      12288:vEPa9C9VbL+3Omy5CvyOvzeOKaqhUgiW6QR7t5s03Ooc8dHkC2esGgWS:vEPa90Vbky5CvyUeOKg03Ooc8dHkC2eM

    Score
    3/10
    behavioral22behavioral23

    • Target

      msvcr100.dll

    • Size

      752KB

    • MD5

      67ec459e42d3081dd8fd34356f7cafc1

    • SHA1

      1738050616169d5b17b5adac3ff0370b8c642734

    • SHA256

      1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067

    • SHA512

      9ed1c106df217e0b4e4fbd1f4275486ceba1d8a225d6c7e47b854b0b5e6158135b81be926f51db0ad5c624f9bd1d09282332cf064680dc9f7d287073b9686d33

    • SSDEEP

      12288:fQmCy3NeRjkpQmj3oaMtQqjoygfXq3kon9IlbgaOxQdVJJ6j5EBKX8hR5:ImCy3VQs9MtLjTgfa3kon9FaOdEz5

    Score
    3/10
    behavioral24behavioral25

    • Target

      resources/app/7za.exe

    • Size

      743KB

    • MD5

      de24f591d2b6df8b064997311612d245

    • SHA1

      f29d7e834216ae850d353fa40c7009d019f2c5b2

    • SHA256

      27ad961d77833f89a103586d50d2da4351caeefd83c975868ef6c12043c799d7

    • SHA512

      b5e19263631e549707d510275d782ec978a9514734bb8f32098d119b1cde310e31825b455f192dee04dac9c8e72f9f61f60a5adeb9c08fc608047fd3c350dd44

    • SSDEEP

      12288:BwAxBpwU5gU+2/9dB5XlH1YAEa5OLW0TjLWG3rn0Yf5ogmn9X9Rf6TIALr22DIVd:BhY2gUfVH5XlVYzagW4/3rn0Y5zmzRfb

    Score
    1/10
    behavioral26behavioral27

    • Target

      resources/app/PKVSKeyChecker_protected.dll

    • Size

      1.5MB

    • MD5

      9d9a5510ce95e78cc0e1ab6895a6dc34

    • SHA1

      5e01b0f6edab0431612e8dbe591a131c74bba074

    • SHA256

      3a864ebfa9221563136da3324a863de9e568620669de9e4befbf5778e196670d

    • SHA512

      715a1b5af3aa11ca35757e37a03a0c6466bc3f05b84abba1f804221bbd18f33c92def1161e839f0ef9eca6d16ecde216222e040c6a9c168700f8407260301658

    • SSDEEP

      49152:KLvMiUFBP3w3VUzZMRE3O0JKOgCUYqZEAm010vKN0j:KNW4FoOREOqKOgjYqZEs1qKN0j

    Score
    1/10
    behavioral28behavioral29

    • Target

      resources/app/WidevineCdm/4.10.2710.0/_platform_specific/win_x86/widevinecdm.dll

    • Size

      17.0MB

    • MD5

      4bf760b972b1d1d70344bf489e5e75c5

    • SHA1

      d73ea7becce3fc5a4237179a66c41a6514313926

    • SHA256

      a8bf930f7e59088f13c2ae3a891ceb00fb52492323b10f4ad0ece73c476d39c2

    • SHA512

      b7d3a6ee29f5c0aa28943f38148c65ac55c4d9b6ce6b5dcd52607ebad3cd2708a9cbf0e7aca2c9cd9f781fb01a712f6d2123ca2720561ce5cbdb82b16f075b9b

    • SSDEEP

      393216:QTiIK/1X5loiNKy7AG7GmjGqapjhxBuxqd2D3CR8OeY8Fkcn:N1oy737tapj/BusN8nfDn

    Score
    1/10
    behavioral30behavioral31

    • Target

      resources/app/loader/loader.html

    • Size

      11KB

    • MD5

      53c04b7d967f44a4453090beb84f83cc

    • SHA1

      d74e678fa296849cbd195812c88a23321b576103

    • SHA256

      9d8f0ae60ec1e6112960532c11c2b41e277c39ecd0b94e101f78156ccb546153

    • SHA512

      c117c68710219652266813e43a7f18fd6f2159713d8298e1b06884b48bb1d58823132d6292249958f17f7fd13e8131cdbfa3862dc224d54fd2061ac9d88aee47

    • SSDEEP

      192:CKjgW4hhck9iGCOHnQManmJ52gYA9b0K1q:zjg7hc/DOHnQManY5EX

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks