Overview

overview

7

Static

static

3

lmms-1.2.2-win64.exe

windows7-x64

7

lmms-1.2.2-win64.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

Qt5Core.dll

windows7-x64

1

Qt5Core.dll

windows10-2004-x64

1

Qt5Gui.dll

windows7-x64

1

Qt5Gui.dll

windows10-2004-x64

1

Qt5Widgets.dll

windows7-x64

1

Qt5Widgets.dll

windows10-2004-x64

1

Qt5Xml.dll

windows7-x64

1

Qt5Xml.dll

windows10-2004-x64

1

SDL.dll

windows7-x64

1

SDL.dll

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

libFLAC-8.dll

windows7-x64

1

libFLAC-8.dll

windows10-2004-x64

1

libfftw3f-3.dll

windows7-x64

1

libfftw3f-3.dll

windows10-2004-x64

1

libfltk.dll

windows7-x64

1

libfltk.dll

windows10-2004-x64

1

libfluidsynth.dll

windows7-x64

1

libfluidsynth.dll

windows10-2004-x64

1

libgig-6.dll

windows7-x64

1

libgig-6.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lmms-1.2.2-win64.exe

  • Size

    35.1MB

  • Sample

    240720-28eq7szdmg

  • MD5

    8a5e80d496c3052a2057098dcbb1293f

  • SHA1

    f26b1be68206eaa0b36f1ee057bda45b45070a30

  • SHA256

    5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b

  • SHA512

    e99d92bec376c548c0b3f8569fa43414efe9fa3f24d43a23c281a526a5a4c94642ddd0103a369b5feebe0b63f00c2633925be7a22ed3ccd70ef7c599fb424351

  • SSDEEP

    786432:fJNH9O9cqiO3Z3QBH9OiJJTtDUv2P2YG+O9aXNTqtuHkwloovV/6+:Rd9OT3Z3Qx9OoUvNY/O9eNT5EhMV/n

Score
7/10
discovery

Malware Config

Targets

    • Target

      lmms-1.2.2-win64.exe

    • Size

      35.1MB

    • MD5

      8a5e80d496c3052a2057098dcbb1293f

    • SHA1

      f26b1be68206eaa0b36f1ee057bda45b45070a30

    • SHA256

      5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b

    • SHA512

      e99d92bec376c548c0b3f8569fa43414efe9fa3f24d43a23c281a526a5a4c94642ddd0103a369b5feebe0b63f00c2633925be7a22ed3ccd70ef7c599fb424351

    • SSDEEP

      786432:fJNH9O9cqiO3Z3QBH9OiJJTtDUv2P2YG+O9aXNTqtuHkwloovV/6+:Rd9OT3Z3Qx9OoUvNY/O9eNT5EhMV/n

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      18KB

    • MD5

      adec63bd08a185bffe6fda335d29df87

    • SHA1

      23f37d31f3b1c07547ad4fa2747305a04ac09b54

    • SHA256

      dbd0068d46077ee1ace4eaafc3312389c29af22d306c5757a1a29a93146604a9

    • SHA512

      44bb32fa41b0c2b41d637f15dd2cab84ad6f9dae39febb263923eeee19d1c80d65ba3939ab87d34fbb28af6a6f867c21daab5810d289e309451c67ef6f65a88c

    • SSDEEP

      384:LPs/sv/Qji4uGGAjc6GKv3WRg0DXRpLJXCYAkF3cuzFNS:LPdEipAmbhX1cu

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      9KB

    • MD5

      000ca2d1e21f4b461b2c8b888b098a4a

    • SHA1

      42fafc505d2fe16657fa5ebbd5ccd89c3b386637

    • SHA256

      e5ef538f9ada994299a0860c26f68ae0649495f68d388b910a05cba00d3ee365

    • SHA512

      ba0b2960c95fff4428999adc02f82c88b59aef464f2057be0b8d93c523293e84a9b8edd73d9a8dcfac96d9340a7d09815c8ebd5cfb317bca81e07855d08e0fbc

    • SSDEEP

      192:+QLDyzpK69sLG87l1Eu3VA9XJLYKFaZc75BDuqz:+QL+zU6AGjuwJLJAc75By

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      23KB

    • MD5

      125aebb055446fb52aa5956cf99e8a9a

    • SHA1

      6b58fd08a8ff2763219cc6b0dcdb875f9970f850

    • SHA256

      2e1b11ee20e5061ea86dc6b01e3efc659e887540afcab7317cdfd6a8eff87ec3

    • SHA512

      5f85e48bd3ae2fd2be0595b93cbf74674e0281210688dcc73691178b295a702e8d43898afb6e5d8b7e82de98b4ee28194c9838ddf8279cde85f7fe48d34dc8b7

    • SSDEEP

      384:7AQ5GjarYFU76ffyEIPb9p206QrHwIl8ToknCLJy4k9KyFkKCKWin/aY+:72XixPbPD6gQikUywWkKx/aY+

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      6KB

    • MD5

      7f780de67db61a924bebc0cafaded3ad

    • SHA1

      3ac359dce08ceff16e4214fe45d83fdc8e3f2e1a

    • SHA256

      9931a2f8bb44b92ff26062b99cbb6e41ed1cfad65079dec5d6d9c006223bd121

    • SHA512

      8378f04b6f5085e887ed46874414e5681f0ecb6889dbaa25eb78f75112d4be603aef8dec6a2a81857a19978f6ccf07d65d566ff3f0943da809de22599ffdd8f2

    • SSDEEP

      48:6qX08pwehWTmk61T+8tH1GNO/icjsgnFp8hKAYKFaLDzzDz/xRe2v1e:GkwehWn6086+sgnchKAYKFafzf60

    Score
    3/10
    behavioral10behavioral9

    • Target

      Qt5Core.dll

    • Size

      5.1MB

    • MD5

      b1f30ccbb0d01071d9af4ec6eb85a3b3

    • SHA1

      691146c9430c96d789fd2955a2c65b820a9202f9

    • SHA256

      64d345fe6b73c2f249164c6494074c0393d7ee45388c562d57aef9708a1f3c26

    • SHA512

      61388eb4253b3b04ccea2b57062936c0b17fb83122639435c40f03458beec7ab652486e1f0e402c405b867505d6f8928a83ab848e1d2ce3e1708e9d88881fb3a

    • SSDEEP

      98304:+v/RNsL12fxXz+NIVnB2H0SorJsv6tWKFdu9CpllQ:gWI4mncOrJsv6tWKFdu9Cp/

    Score
    1/10
    behavioral11behavioral12

    • Target

      Qt5Gui.dll

    • Size

      4.5MB

    • MD5

      23439958cd89baa6970c1aac9060af2b

    • SHA1

      522bad44bd28149e62ff7ec45b38bb8cfca8c0e5

    • SHA256

      b8e72ec747f1f056f07536446934ee0606525f0eccdcae78966e6097e4d577e5

    • SHA512

      3d909214e74f7ed718688b0e2b7f86319bfbe20a902c4f127f2f3a7e25b2bd781a62afd30eaa07bbbcd87d9ff03f05b053a6e63c007bbc89790cfcd97dac5638

    • SSDEEP

      49152:qR7gxfIqqH22A9pcoNHWh2EZf2KucPtchYTesGY2XtHM0r8+YtjY1hCKyO3la40r:qdoNoDucPKmTmY+Qy3la4m/tGc

    Score
    1/10
    behavioral13behavioral14

    • Target

      Qt5Widgets.dll

    • Size

      5.7MB

    • MD5

      9364bbf7fc86cd2f0a9d258803ee4105

    • SHA1

      0d0cadd5181df2a1f9540d0017daf7cfffe41157

    • SHA256

      7e5754119941a4d996b00fe5731c005044f21e51bcf8315dbdccad9a21077c21

    • SHA512

      2687d25b60f6ba3e352ebcde651449f6fbced20ebc33359873ccf3626b5b87af865a2d471d2288d4e5212d06a497f76a82362f2d2dfe6de7c9f8f1068453dcff

    • SSDEEP

      49152:RvIi8GdnZAUzjfz5Z+9f3VpM2W8LVaHGf/Kdj+sHHL2DY7FmEexkVskzbIyo8QuN:Rn7zc3McAMO1xFQ+cBKhf9

    Score
    1/10
    behavioral15behavioral16

    • Target

      Qt5Xml.dll

    • Size

      361KB

    • MD5

      790afb9ad63350fe327cbe409c08f01a

    • SHA1

      652b7d29dcbd633282de7c2a6d39a0e718a4bb1c

    • SHA256

      3864e3649485fb23d12f01e968a19f7ce0eff987c02e74e602c0b5527f92912d

    • SHA512

      084f44583fc16c00126ed4ae340fa041b9ebaccb4e041dce73da66c6ccfc4be726cde486f199c056e3e3342db87314407af392f33d9efdd29adb15974b2c785a

    • SSDEEP

      6144:5rPIKhCmvlwVuZa+hrctIWFXKxpFE0CqwHGYkC/S6C+/0UPiCTmRsU:5rAKhpvlwVuZa+hrctIWFXKxfCqwYC/L

    Score
    1/10
    behavioral17behavioral18

    • Target

      SDL.dll

    • Size

      1.8MB

    • MD5

      6acfa9b50ed9448d025d811b5f78d948

    • SHA1

      f2999079a34803a7b99f10f8d9cc180da3e1259a

    • SHA256

      2e3065bbdeea3b954b409d96a24b925ab7984f2f15a67cd34b5e774d675e4462

    • SHA512

      8567ca9aae3e7acdf2b811ddbcd67f6834f7129cf3bdc78a49b38a46f9407e7ad8ebc48a97e3c1eda9c4fcbf997f6344c6adba8777fbbd157850e3e3e4f1a62d

    • SSDEEP

      24576:j4dVmGBgLXw2PvPdCi80yvPvo61FQtlD0pskBbzRTiNpo:OlBgDw2Pv1mvPWlD0PBbzRTiNpo

    Score
    1/10
    behavioral19behavioral20

    • Target

      Uninstall.exe

    • Size

      525KB

    • MD5

      65d89fc8960a5d095097c849a93a5efe

    • SHA1

      c3a35b02acc9922f4a26b52fb46221c2e1e4aa3a

    • SHA256

      0325caae308d73fc6f7b3e3a3de21fcdc4ffd18e76230ae8ee8928a56999b6ca

    • SHA512

      57f0a192b7ade1e33ce0ff33948aa99a6fb4d9b5b25caea0d82d67b2e6d2c620d8c96cc69f7b9699f5f95ecd893138529556685953ff0a70777d874688697bd0

    • SSDEEP

      6144:xmR3kSaZW678d2aYd/RnEysweS9tvy7ETDzeFgR:xI3zIPpptfvzeu

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral21behavioral22

    • Target

      libFLAC-8.dll

    • Size

      850KB

    • MD5

      43c541620fb71d46644ab29d4daf2355

    • SHA1

      f24b28154f838cebfb461f671d58237f88a5c47c

    • SHA256

      b710b87ca63ad96c4a4d3201807624c266c757037fa61622b113030324b8e10a

    • SHA512

      b6d0f798608b0a887c572ec8054f28fb98aabdee32c3bfaa93c7d4fabae42cdbe317ff8e8cc1b5f22601e0612f199137dd69f781fe1afd2e810f120dbde4c63e

    • SSDEEP

      12288:hQ37b4h4brSbNuJJWvYGn9knheKZDD1Nn3MI8DpfhwReMKgAc4n:hvNBubIYTnkKzx8DdhwcgAc4n

    Score
    1/10
    behavioral23behavioral24

    • Target

      libfftw3f-3.dll

    • Size

      2.1MB

    • MD5

      36efd33b3860007282a83f4eeaf9c4ff

    • SHA1

      4c58e592ab37ec054eace43b297632e16d93cdc2

    • SHA256

      af27aac8163c106b8549d29b4895eda5cb243a2a2b83404d407c810bee18e695

    • SHA512

      af915d7cc953deff55d94b370975fe803b1db03b2b72b8d4eff408ac4dc4c197214b341be1d7a2d38271a77d664357f461fc8ecd9af56e1690b794a8a75778e8

    • SSDEEP

      49152:AMNi+stG6CCqwCy2D9+mtDfubpG3GTrx4JCbu:Vso629+6zCb

    Score
    1/10
    behavioral25behavioral26

    • Target

      libfltk.dll

    • Size

      2.6MB

    • MD5

      e1bc70e49a20034b7b152b3fbac4d901

    • SHA1

      fd8d5f3b122f7633d5988fe506a18a37483e9c47

    • SHA256

      33515e361558bbcb098c34a9c1887f53b1c32e393c73aacfee576caab2c0f786

    • SHA512

      13522f1470606982fd3a04efcce107b2cb8780c867c2dd7f108955bff3b8891650831fcd24887b7537dfd06fe1349061524b4b9477d886e3fdf74c10ce483807

    • SSDEEP

      49152:lMkiuxzNB3WuNEHvIG4hg7CMJ/lVBppitwWo7Vb5EgtggL3xMe25CB07ktEE3k4v:vNEsQppRJhukkaXMjE1

    Score
    1/10
    behavioral27behavioral28

    • Target

      libfluidsynth.dll

    • Size

      2.0MB

    • MD5

      df3753f35250ebac4a926854895558bb

    • SHA1

      04f644ebf092d989aefe7389bf9e8f430c916fcd

    • SHA256

      c1af844d0341256ae1647d4ac34e421c923101c82d9cc7dcf01423e99d627a52

    • SHA512

      19690eaec2a81b094d0caf938645c770ef25a933f62ef66bd8d0fc33fac7ba30340099117967dffb765ab10b5cf547da095643bd58568da1bbda290f5314de7a

    • SSDEEP

      49152:r0SkR7rATHjind6BPnBr6EBLwAn4jdwznJ9LPp+:gl0nbyjdw/Pp+

    Score
    1/10
    behavioral29behavioral30

    • Target

      libgig-6.dll

    • Size

      801KB

    • MD5

      2a7e2c316655fcbbbe3d51f2cced6ef9

    • SHA1

      60bdff72a5029f9743f9fc1e8be95ccc4b41f89f

    • SHA256

      3200b9740378b60df71076341af06d67d4ca3086219dea6c3a9d08b8d30d8620

    • SHA512

      106c8c79bd833ddd8c5c55eeea8142e67ae26347c1b3c280371f8512fe65e473eb71f0b0dc040899c5ecc79e219b3f60b5c46c5fc68e859909825346d328fdf9

    • SSDEEP

      12288:Qc+GVNYzEJek9LRa/GTW+bBWGzdx8UmF96Lzc5y4xPs:1VIyekW/GTW+bBrdC796nc5y4xPs

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks