5834f6ae3522131494c225a93c30173430be80b5c144519b265395c54f35172b | Triage

Submit
Reports

Overview

overview

Static

static

3

FreePiano/...no.exe

windows11-21h2-x64

6

FreePiano/...f2.dll

windows11-21h2-x64

FreePiano/...p4.exe

windows11-21h2-x64

3

FreePiano/...no.dll

windows11-21h2-x64

1

QWERTY/Mid...ty.exe

windows11-21h2-x64

1

QWERTY/SDL2.dll

windows11-21h2-x64

1

QWERTY/portmidi.dll

windows11-21h2-x64

1

setuploopbe1.exe

windows11-21h2-x64

7

$PLUGINSDI...PI.dll

windows11-21h2-x64

1

$PLUGINSDI...ns.dll

windows11-21h2-x64

8

$PLUGINSDI...nu.dll

windows11-21h2-x64

5

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...fo.dll

windows11-21h2-x64

$PLUGINSDI...st.exe

windows11-21h2-x64

1

$PLUGINSDI...e1.sys

windows11-21h2-x64

1

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

Analysis

max time kernel
1509s
max time network
1483s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
11-08-2024 04:07

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

FreePiano/freepiano.exe

Resource

win11-20240802-en

windows11-21h2-x64

14 signatures

1800 seconds

Behavioral task

behavioral2

Sample

FreePiano/plugins/plugin_sf2.dll

Resource

win11-20240802-en

wannacry defense_evasion discovery execution impact persistence ransomware spyware stealer worm

windows11-21h2-x64

30 signatures

1800 seconds

Behavioral task

behavioral3

Sample

FreePiano/plugins/plugin_xfmp4.exe

Resource

win11-20240802-en

windows11-21h2-x64

10 signatures

1800 seconds

Behavioral task

behavioral4

Sample

FreePiano/vsti/mdaPiano.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

QWERTY/Midi to Qwerty.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

QWERTY/SDL2.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

QWERTY/portmidi.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

setuploopbe1.exe

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/DIFxAPI.dll

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11-20240802-en

bootkit discovery evasion persistence

windows11-21h2-x64

15 signatures

1800 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11-20240802-en

windows11-21h2-x64

13 signatures

1800 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/System.dll

Resource

win11-20240802-en

modiloader netwire njrat remcos wannacry warzonerat host botnet defense_evasion discovery evasion execution impact infostealer persistence privilege_escalation ransomware rat rezer0 stealer trojan worm

windows11-21h2-x64

48 signatures

1800 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11-20240802-en

discovery evasion motw phishing ransomware

windows11-21h2-x64

18 signatures

1800 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/drvinst.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/loopbe1.sys

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target

QWERTY/Midi to Qwerty.exe
Size

633KB
MD5

daccc6a58f6c2417af857515fc652801
SHA1

4eedec65a5d5cc7f564ba4d61e92d4689ec09e0b
SHA256

fdc2e3f71edf456bfb5ff0e9d40a37455e928ba3cc47c84fbc839481ba5f5202
SHA512

6f612d2feca403a0c59ae0dd6e14599d32a97cb3d9fea14aedd4f79ed0a158bd71b535d8e36434cf07f505e75ea4e8b10e23af3d14e10c1188872bebec5d1e18
SSDEEP

12288:XCSqsbdmp6WTL7+MGBolVhatpL1CUn9X5Gp:y64p1TL7+FBolVhaH1CUn8

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\QWERTY\Midi to Qwerty.exe
"C:\Users\Admin\AppData\Local\Temp\QWERTY\Midi to Qwerty.exe"
1⤵
PID:1576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1576-0-0x00007FF8174C0000-0x00007FF8176EA000-memory.dmp

Filesize
2.2MB

Download

© 2018-2024

Terms | Privacy