5834f6ae3522131494c225a93c30173430be80b5c144519b265395c54f35172b | Triage

Submit
Reports

Overview

overview

Static

static

3

FreePiano/...no.exe

windows11-21h2-x64

6

FreePiano/...f2.dll

windows11-21h2-x64

FreePiano/...p4.exe

windows11-21h2-x64

3

FreePiano/...no.dll

windows11-21h2-x64

1

QWERTY/Mid...ty.exe

windows11-21h2-x64

1

QWERTY/SDL2.dll

windows11-21h2-x64

1

QWERTY/portmidi.dll

windows11-21h2-x64

1

setuploopbe1.exe

windows11-21h2-x64

7

$PLUGINSDI...PI.dll

windows11-21h2-x64

1

$PLUGINSDI...ns.dll

windows11-21h2-x64

8

$PLUGINSDI...nu.dll

windows11-21h2-x64

5

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...fo.dll

windows11-21h2-x64

$PLUGINSDI...st.exe

windows11-21h2-x64

1

$PLUGINSDI...e1.sys

windows11-21h2-x64

1

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

Analysis

max time kernel
1499s
max time network
1471s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
11-08-2024 04:07

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

FreePiano/freepiano.exe

Resource

win11-20240802-en

windows11-21h2-x64

14 signatures

1800 seconds

Behavioral task

behavioral2

Sample

FreePiano/plugins/plugin_sf2.dll

Resource

win11-20240802-en

wannacry defense_evasion discovery execution impact persistence ransomware spyware stealer worm

windows11-21h2-x64

30 signatures

1800 seconds

Behavioral task

behavioral3

Sample

FreePiano/plugins/plugin_xfmp4.exe

Resource

win11-20240802-en

windows11-21h2-x64

10 signatures

1800 seconds

Behavioral task

behavioral4

Sample

FreePiano/vsti/mdaPiano.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

QWERTY/Midi to Qwerty.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

QWERTY/SDL2.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

QWERTY/portmidi.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

setuploopbe1.exe

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/DIFxAPI.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11-20240802-en

bootkit discovery evasion persistence

windows11-21h2-x64

15 signatures

1800 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11-20240802-en

windows11-21h2-x64

13 signatures

1800 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/System.dll

Resource

win11-20240802-en

modiloader netwire njrat remcos wannacry warzonerat host botnet defense_evasion discovery evasion execution impact infostealer persistence privilege_escalation ransomware rat rezer0 stealer trojan worm

windows11-21h2-x64

48 signatures

1800 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11-20240802-en

discovery evasion motw phishing ransomware

windows11-21h2-x64

18 signatures

1800 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/drvinst.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/loopbe1.sys

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target

FreePiano/vsti/mdaPiano.dll
Size

1.2MB
MD5

5e76e2ad4a687607cff24982c52c8baf
SHA1

2435090a8e6b56b2e1aa4cc14b9861a34c090519
SHA256

0be2c93d003df789c7c403d1600b226b0903b4f7cee65322de4e4416aaf9dc22
SHA512

de9785844b50bf6fbe2e49a8e4088448a8ccee747250b012ccb31d487ac6f2ec0763a328bc2669b2a4d40c0b3f7a2657a174b6e23c1e18780908ec5b22fbd34b
SSDEEP

24576:qBPR0oMw19/aEkwJtqQbZSqpWgeNKglzvQDhi9vWa2IiGhyY5P0:qBp+7wJtrbZPshKezvQtiM5IiQyE

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FreePiano\vsti\mdaPiano.dll,#1
1⤵
PID:1804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1804-0-0x0000000067700000-0x000000006783D000-memory.dmp

Filesize
1.2MB

Download

© 2018-2024

Terms | Privacy