Overview
overview
8Static
static
3OBS-Studio...er.exe
windows10-2004-x64
data/obs-p...64.exe
windows10-2004-x64
1data/obs-s...on.dll
windows10-2004-x64
1data/obs-s...ua.dll
windows10-2004-x64
1data/obs-s...hon.py
windows10-2004-x64
3obs-plugin...ja.dll
windows10-2004-x64
1obs-plugin...lf.dll
windows10-2004-x64
1obs-plugin...er.dll
windows10-2004-x64
1obs-plugin...ns.dll
windows10-2004-x64
1obs-plugin...ui.dll
windows10-2004-x64
1obs-plugin...nk.dll
windows10-2004-x64
1obs-plugin...ls.dll
windows10-2004-x64
1obs-plugin...ce.dll
windows10-2004-x64
1obs-plugin...GL.dll
windows10-2004-x64
1obs-plugin...ge.exe
windows10-2004-x64
1obs-plugin...er.dll
windows10-2004-x64
1obs-plugin...eg.dll
windows10-2004-x64
1obs-plugin...rs.dll
windows10-2004-x64
1obs-plugin...ts.dll
windows10-2004-x64
1obs-plugin...11.dll
windows10-2004-x64
1obs-plugin...xt.dll
windows10-2004-x64
1obs-plugin...ns.dll
windows10-2004-x64
1obs-plugin...st.dll
windows10-2004-x64
1obs-plugin...tc.dll
windows10-2004-x64
1obs-plugin...et.dll
windows10-2004-x64
1obs-plugin...64.dll
windows10-2004-x64
1obs-plugin...es.dll
windows10-2004-x64
1obs-plugin...e2.dll
windows10-2004-x64
1obs-plugin...eo.dll
windows10-2004-x64
1obs-plugin...re.dll
windows10-2004-x64
1obs-plugin...ow.dll
windows10-2004-x64
1obs-plugin...pi.dll
windows10-2004-x64
1General
-
Target
OBS-Studio-30.2.2-Windows-Installer.exe
-
Size
133.3MB
-
Sample
240820-zsx7haxall
-
MD5
51bc832235635f695486de858cd4bd70
-
SHA1
ba8f215b86f5850890054fc94bf436568f792611
-
SHA256
c11eb303330b9638936bad26cf02b8313ca43557d2a63f5e5c00d1eab2a9682e
-
SHA512
7d41be2f8acdf88d508e696d7a622407940ee173914bc5c66f917851ad5038edf43d48c18058c8b2d8c67efee1e061c0623f22286238eae26696ae7e36cf1753
-
SSDEEP
3145728:BcXZ1XDmrk0sggh/IWONMkBOvBX3A0cZHcITZYjRZucclhHJ+jqJZf:iixBdJPQRdclN
Static task
static1
Behavioral task
behavioral1
Sample
OBS-Studio-30.2.2-Windows-Installer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
data/obs-plugins/win-capture/inject-helper64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
data/obs-scripting/64bit/_obspython.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
data/obs-scripting/64bit/obslua.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
data/obs-scripting/64bit/obspython.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
obs-plugins/64bit/aja.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
obs-plugins/64bit/chrome_elf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
obs-plugins/64bit/coreaudio-encoder.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
obs-plugins/64bit/decklink-captions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
obs-plugins/64bit/decklink-output-ui.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
obs-plugins/64bit/decklink.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
obs-plugins/64bit/frontend-tools.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
obs-plugins/64bit/image-source.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
obs-plugins/64bit/libEGL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
obs-plugins/64bit/obs-browser-page.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
obs-plugins/64bit/obs-browser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
obs-plugins/64bit/obs-ffmpeg.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
obs-plugins/64bit/obs-filters.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
obs-plugins/64bit/obs-outputs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
obs-plugins/64bit/obs-qsv11.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
obs-plugins/64bit/obs-text.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
obs-plugins/64bit/obs-transitions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
obs-plugins/64bit/obs-vst.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
obs-plugins/64bit/obs-webrtc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
obs-plugins/64bit/obs-websocket.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
obs-plugins/64bit/obs-x264.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
obs-plugins/64bit/rtmp-services.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
obs-plugins/64bit/text-freetype2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
obs-plugins/64bit/vlc-video.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
obs-plugins/64bit/win-capture.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
obs-plugins/64bit/win-dshow.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
obs-plugins/64bit/win-wasapi.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
OBS-Studio-30.2.2-Windows-Installer.exe
-
Size
133.3MB
-
MD5
51bc832235635f695486de858cd4bd70
-
SHA1
ba8f215b86f5850890054fc94bf436568f792611
-
SHA256
c11eb303330b9638936bad26cf02b8313ca43557d2a63f5e5c00d1eab2a9682e
-
SHA512
7d41be2f8acdf88d508e696d7a622407940ee173914bc5c66f917851ad5038edf43d48c18058c8b2d8c67efee1e061c0623f22286238eae26696ae7e36cf1753
-
SSDEEP
3145728:BcXZ1XDmrk0sggh/IWONMkBOvBX3A0cZHcITZYjRZucclhHJ+jqJZf:iixBdJPQRdclN
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2
-
Drops file in System32 directory
-
-
-
Target
data/obs-plugins/win-capture/inject-helper64.exe
-
Size
136KB
-
MD5
ef7477532e0c8e9f1979c3ae1d8c8c9b
-
SHA1
5abd41c19aee32b9167611dbe8f786c548aaefbb
-
SHA256
6ae58fd64650b6db2ee776cae2e22498df3ea4ec9cd12025d8d96ec0e19380c8
-
SHA512
f297d99ad4e396bab9e1ec5fd6f51cd291a441784a955d6e527e444652eb4edf6ede98edb2b331bea1f5e714d40c6c09b1cf338a3dee18540364dfe65143d92e
-
SSDEEP
3072:HZpMpWVQ3AOZsdwXrisSkmtC0lp1J9NaOkp895:5yWVQ3Ag+wXakmtC0/JdT
Score1/10 -
-
-
Target
data/obs-scripting/64bit/_obspython.pyd
-
Size
2.1MB
-
MD5
e5ff5ca64ee287f7eaed03a0cb7ea84e
-
SHA1
8d3920e1e96b38feb29e7a638053da49257f4500
-
SHA256
6d73bcac190594269d47f78fedfded30f998e05d4f4f6291f3869e715b577b0c
-
SHA512
b9a38281d28aa1bb5f4652bc2b67f5a0f5d6ba6df7f279978805de7bf2d8cbb898ed90a88752f2301395c1f019c3848fbb22199bf1c2b0371f077cc9f1b9df12
-
SSDEEP
24576:CkfyIiKS3I+uuLf7L0TTDsPPjqt1HVBtH:CkKIa3I+PgTTDsnjMBVBF
Score1/10 -
-
-
Target
data/obs-scripting/64bit/obslua.dll
-
Size
1.5MB
-
MD5
6aee0f5db7ca3d5344a176899a2bd86e
-
SHA1
a2a964dec5d4bc9d036b097541b6e4cd021a730e
-
SHA256
7ddd6fd9a009aa4101b6fdd4d04772408d29f24010b6e5cca485acb34830f0f4
-
SHA512
f6d01b9320a1d67e1629527d561b35944f6015f63d4842a2aa10700efd6963712657bf61790a779b43a27f9b4be5ebc96da020dcb7cd78f124e1b3ffd00d569a
-
SSDEEP
12288:BnRQVZQ3KXwXnjGtsnLZqwccl5Yu/yRUJr2c1fRGPbI1JGyxHbZM9VqM5e:hw2KX2CQLZ/c2YRRUJr7fRLJz05e
Score1/10 -
-
-
Target
data/obs-scripting/64bit/obspython.py
-
Size
494KB
-
MD5
2f2464d537b6fc8b5d8a475d6375b07f
-
SHA1
f2eb25da5faddc60b90fcc1e67ba106c86ac6d41
-
SHA256
f145f9857948416f88c5d6c6cd83527bc406e94b95eeeff4bbd504e56295dcb3
-
SHA512
ef967bf7b8e9f9fe847c25eafd8ef00906caaf1774d355f5ba6f58d73311b1a4df6ef9a5ebda79b50a1984aaa018f03accf964a5d475144e58038378857abb66
-
SSDEEP
6144:zKRSQKN11kOapA26A8cJI60Qyh1GxOcwQ4NqHr4L4FTh11l8qYLL430SmCAS8Til:TTPAf
Score3/10 -
-
-
Target
obs-plugins/64bit/aja.dll
-
Size
2.2MB
-
MD5
43e2db5f523be781836289a0ee793c4b
-
SHA1
b586e098e14fe581701ca9df764bab9d97a259d7
-
SHA256
2e9de4e0fb61eef1c651e9a1632eecface3592583774858f0ac4c78f2486867b
-
SHA512
e45aa2185d66a6c4527612392c7ef3b0d2d8976155f820243ae8a22a332b61b1e88c75440c5d12f0570548d737831cbdbccc5ee53361c7e09acc193ca5afcd00
-
SSDEEP
24576:qeumxoiCJg26CSXZAwoK6/ulb7y/H8x8sQU1TNNYCXvE180dE5lN2GSxV9ooBfMd:qHm5B2JSXCwoLpHv5YPZXv7cW24n
Score1/10 -
-
-
Target
obs-plugins/64bit/chrome_elf.dll
-
Size
1.2MB
-
MD5
6953a5a063eb4bf1e674b254d020d8b5
-
SHA1
078f8d76be94969c005fc110b68db17d21e340e7
-
SHA256
c0193557c3b6d0c499f6c47edc6d6255385a0a5e138fd1a3328017a5357fcefe
-
SHA512
4936167aab13241939eb5492aa586d970ab9a6bd68c8cbb14dc74b09093c29d7d3b887300a2de612a75f3a63b447b2afbf80514d038261c10cd06954401404b2
-
SSDEEP
12288:1LRUCPAsgA2nOIcnJJgndLpPoeEt1yle0atiH7WPdlLPpodwpYyBfer5+nToCkt8:1N5P8JcJJUdLho9LPWODZSgNn
Score1/10 -
-
-
Target
obs-plugins/64bit/coreaudio-encoder.dll
-
Size
54KB
-
MD5
19eba9357c23d2aab0953433a9c0659b
-
SHA1
547267f4263404888d0d2870e43016b452cefcfd
-
SHA256
ca9b0321daf6c72b987c5388dade49f3554adfb0c92133bf442453e879be00d8
-
SHA512
7cf55a16f2e477306cd2b5942977b64a058fe548cf4e42e2571d9df492cbddf7c23f9ea8305d8ea8ad533ee1cab9997293d3b567ba61496bd8ac87e85443951b
-
SSDEEP
1536:rXQ3HniqGYUf7LalaLnPH4bwwv7MjEgDuVxKV:r4H/cRbu7MAi
Score1/10 -
-
-
Target
obs-plugins/64bit/decklink-captions.dll
-
Size
54KB
-
MD5
01a75807141050f05c915009301a7a34
-
SHA1
94f4e67b0c3f715f8815f82fa35a3861fbe9240c
-
SHA256
e49fcd691a08f0f353cfcb741886a06b5051a86f3c91a2d571d5be5a848f6edc
-
SHA512
dfd519fbef77d406ce87ff2298f4a91e15f12a75503f97d493fba21379d92ce9a4c41b139f034c0ef885682a82b37f2bbffba861f5d78cecc6dc5424e26df47f
-
SSDEEP
1536:ZtqmEJXilHjVDt71Ai+puhbEArkENDuRxz:HqYHjVDt71Ai+puhbEArkEe
Score1/10 -
-
-
Target
obs-plugins/64bit/decklink-output-ui.dll
-
Size
204KB
-
MD5
bb122119f7227c102305198055e9dbe8
-
SHA1
98408dfe6c033c068a5272542ab16f33eb6c4de5
-
SHA256
2da6ad701e0a6802a83860513042ed3f3c6a78072a39c9e12e47bd35a637115b
-
SHA512
b57ab58cf8256d9988f00465859ffa0a6630e1eef46e32409f3172964aa8ea7d82a60e00e2ca913b7dd37251bb9d76a5cb00409ab86482ae4771f6684d757f8e
-
SSDEEP
6144:MT7poWPsz96Gf3T/x9HjVDL1AY+6AH7j66UNhVxbGLfg9ahuGwuBsnfzbPohd:MXpoMAf2/
Score1/10 -
-
-
Target
obs-plugins/64bit/decklink.dll
-
Size
76KB
-
MD5
f82d35ff9e2bb04840215a3b5c95393e
-
SHA1
eb872eea943ac64fa3ab36c53e3477b9d4324b25
-
SHA256
4e1d11739b485fd7ee584cee4b792b95622eceefb616ae480024b99681342d93
-
SHA512
6310442759b02306aefff948e230a3ca5fe5ef8178c7a54a32c6c242845eb5adddb0aa3cfa84083cfff05a4d392e6a184c786a68063848c410d020d7af7704d4
-
SSDEEP
768:trrAjvUyQcGB+/UcpeRZIEKcYhugcFxGbqqOf3vLr6KZmys7z2m4DeTwAMxkEqB:tfAoPCEKFcFGO0ysH2m4Duexk
Score1/10 -
-
-
Target
obs-plugins/64bit/frontend-tools.dll
-
Size
357KB
-
MD5
577bd5538c78359268cea0aee9a9e5de
-
SHA1
f28d722414850fe8e11d94d919f5df9ef8f2bc78
-
SHA256
3c10a4587d8f8e5175b25892e2da92d99eb6fc24868cbf381112de2592f3f7ef
-
SHA512
94a2dc343a50a46b034fa7a7a664b2d0a6158aae7a2dd59be1f1f286be01b79bfda19f0205dcf802bc8ac4708fded3ff447fea98855fe6205683fb089f950359
-
SSDEEP
6144:k5f2kY8YBf6yM9P+UlGYGXN5ImG6NHjVDtrf31AY+puUbbAC6a39aYVGlizcETEO:k0kYBBfvM8HIdxscKDpfS
Score1/10 -
-
-
Target
obs-plugins/64bit/image-source.dll
-
Size
57KB
-
MD5
ddea638f4f9acd87f507482d011be3ae
-
SHA1
0bb5a299b05d0ee555a55f8a22ea23ec9985b70a
-
SHA256
12260c69380ce9790c0a7f42d52feb14c5503deddfd5fc539ae3e4476889683e
-
SHA512
a997d4aeaef438f7f5bdc4ff6adf9e4bcf3c63a536560cc2817ff1f7b3e00812864022e5504de2cb4cc28ed7dac41935ee2601c787b34505cdb1864ecefa4c22
-
SSDEEP
768:DBsX0eymXAbVu5mF5WMZB4zhftFjiOVxZapK1QaYfVeXGIGCnDeTPAMxkEDK:EICmFjZB4zhfa6xZa4ChfVCnDuPx6
Score1/10 -
-
-
Target
obs-plugins/64bit/libEGL.dll
-
Size
444KB
-
MD5
31c7ceb56e773fe18f7f09df9267b80f
-
SHA1
749b80b23ebb2ea5e5a677ef4d049c14ae9a94a8
-
SHA256
1a996641083d7c5d9becc690a67b1a1b5648454b881cc4161e791ff1b4eff5d4
-
SHA512
66cc97471846a11923a34ad1ccae846ee4896302de749c75d9cc81d0652c462425aa6c7dd45734a328fd8f208973447cf35fff03fa84e6aa07bba4cd7089144f
-
SSDEEP
12288:wDpNGMQY/PZgbuJVtvofqfO4Ui65ED71o:8N1PZkqfhj7G
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-browser-page.exe
-
Size
537KB
-
MD5
8c1bc669ad41709082f99e3c831c196f
-
SHA1
470431c23c7ea1f218e588fe4b6698735c591c04
-
SHA256
6b4f7f963eec9c5d63d9e1287da653f28d77e953e50817770e0e445ef7209442
-
SHA512
f70dfe56516798757263d2c1e9f9c5e8991b204b6232af3a1e0848ff2ced9688bdc0fda3ec72e5b6b395e7343e33ba25bc11d597235d917738bc91838b7c732e
-
SSDEEP
12288:e0v2TsznfcMtsP9Sv8H/QjC+08ahMN09AQLiVAsWR06UyL:t2TsznfcMtsP9Sv8H/QjC+0LhO09OmlB
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-browser.dll
-
Size
772KB
-
MD5
878e0a4afc10faeea9c922760011a369
-
SHA1
f1271d40b720141ed1022100dbd4de041999dbe4
-
SHA256
3dbc1f3e217dfe91d2d265d8ab1760b8713f1899e4fffe40ce9a45ab696513e9
-
SHA512
eef3eed776efd7c9b8697a9ef68af812bbc8bed7dc13ef0c8e21e09fb970dd2fcdda37777c56ef34c983fca027476f2093d75a44a136681393fd372b39da4db9
-
SSDEEP
24576:udAvq6881VXF6nFY3YjHylmWxyBEFakQHBLVW:ud7EFaRHBA
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-ffmpeg.dll
-
Size
285KB
-
MD5
bcbcc5c55512b4447e78d7eae6392734
-
SHA1
5f36af00c7f7adbe089df52f2eadce8df81ea2ae
-
SHA256
4ef3535464d95c6dd9039e26f611f9587744db818d6f9f58a35b511995311057
-
SHA512
b6ab56ca0ac4b89d161dcfd4894f536cb4fc9d0bdaa3dd774086f4f61cd8e5754f9b368e9f1e9a6e60ee15ebe4e6f5530458044c033d032ea5b891926f519977
-
SSDEEP
3072:mQtIdNmOw5EgQxn7HN3s4SPXC5vcUM3QnGbNxRb/iJrQAkrFlzDd1VWoOg8:m8IH9gQx7H6C5EUMv8r6B9dzW5
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-filters.dll
-
Size
328KB
-
MD5
53fabef6b0cb06d9b0c99aa14bfd280b
-
SHA1
646f98b5ba12dfab5d747d87f43c0a1055c412a8
-
SHA256
2cf9aae367bca7b1ed7f60e84038b37bf50e1cc1c2142e8d64d4c1791da011d2
-
SHA512
71b9859dbaa1569c71b824782a50db5fab4d8a459ea3048d2b5c540b8962776c16a63c6e41a454824950a3ae98ef6a39838d4e6652a5bb00401b6485b393ebb1
-
SSDEEP
6144:qRBr9fazJRWCgiw6hNyk4aitT6Jv6cX4m9V5CTRpKsV/ytMq:q/r9fazfW9WhNQab6cX0UCS
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-outputs.dll
-
Size
792KB
-
MD5
dde5199f9d88ea69ffbd2f508cc44fd3
-
SHA1
aab080d0016eef60f836f230678b514698f2b61a
-
SHA256
fd223a675f444074aa53d6f8ecaa65b87aa4c05bb386a09e8a38600cc971dcfb
-
SHA512
a15dec18b7e0aee2157127abce49126d0917fbac5d8b7b6d569812b4b2e97b38c90465e4dbb17794c450635728ca70f5757a363afe9f507016c1d4c5891b65ef
-
SSDEEP
12288:ZHVHdohH4kvTqV0VvCGRjXdy6U5fMWZmc5h57la3RjsUCl:ZHgYk7dVvCGRjXdy6UWZc5bg+l
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-qsv11.dll
-
Size
230KB
-
MD5
6a849b61b216cc1154c657fecd0c9cdd
-
SHA1
191d44bf083c08c496230065b8f6e7b6907d733f
-
SHA256
086c3ef8643f2d84c1a65bc59260b4cbad9ddb2f48869cf0d020b337902f6dd9
-
SHA512
99616324abee95c9fc26ec3fafc522017129438f9a93e8085a76843e5f9eee8a8ff57d8a75ef799efa4be48c3921b86305d4a1493318e2cc448106295ad97b1e
-
SSDEEP
6144:iqz3Ym9n7dooV7b481GWkmxKUc7jHdQIUFgJ:B3jJgPUcXd7V
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-text.dll
-
Size
51KB
-
MD5
3e2947ae14ab2d3e591905492c276632
-
SHA1
b116d8331e9ec0471b3ae89a4cef2e3abc1bbf32
-
SHA256
b9102bc4703a66f441716747b06734044e273382977f3b1aff2e966642404661
-
SHA512
2be7ddbda4310ed558e893d75b3a39143aa8f02af67d7573fb6dc853b3910ea004d23e4881042d20650520b514aa3521d064746d27a12435c92460c4d671d70d
-
SSDEEP
1536:WdhZJ8Us7SCISwVMgTftRKXu7RE5lhODOBxk:o8UsvwVMgDtRKe7REPhq
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-transitions.dll
-
Size
46KB
-
MD5
6720e479cc19cfd0fc64ccbb29c96423
-
SHA1
a459aa9de7643604812cc3d87a4da32a3f007f59
-
SHA256
ccf3ef68aef59a1d96e61bc84a5c727fe60df38a98dcc7b5c6fb4b7cda5eeaf0
-
SHA512
e5f433a8ba92b13a30489ca46048b719d0cf7d0f29508ec785c1648a8dc44e8e212b441c38c3bd2a574a8771fdea59e09db34a0631d12edf88e06f46734285f9
-
SSDEEP
768:fSgBzBslJWK6TupdjlVKaiGwd1nnlH3De7iAMxkEY:KgBFslgDiBgaiX/n93Dmgx0
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-vst.dll
-
Size
64KB
-
MD5
819dcfb9e3448e12eea64c3c04db8088
-
SHA1
c7801d1e9ac00f669c0aa5c61974d925b2d121e4
-
SHA256
0c977a599b2dba93eaa983d8299ea41fb18516115bff2fdfd8eb291f3fccddf8
-
SHA512
035d3ed9bd7f6bef8d9194ea6e39166237820b2d987c5d6f2c8c401af4770d76870d6797eb0ed763e88b1e32dd2ea3f408bb26adfa14196b2f23eaf009cb49a9
-
SSDEEP
1536:6pv8Uheb5msTwsCHPnU/8NvWtETAnvHFBbuDedx8:Eze9rCk8N6ETAnfFde
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-webrtc.dll
-
Size
88KB
-
MD5
27d14fc1d183611690c59e149df10655
-
SHA1
b92a04bf2876bd664705a765d621f28261631895
-
SHA256
bf64e858b84a48ece3f8ebbc46528484d6a0dbd5321d4563247d7a940904b9be
-
SHA512
997e07b849c90f1ce45de46ee2b3f356742f5fede44f1da2ce3b6ef4a16931d1a43be992e9a8001bac467b15fdce9755fc71202a4a68326f5ef4119c0cc5d1e4
-
SSDEEP
1536:aCcI1odnXlUxEJbCPUN26z5DcZTUHRGvOMG1hDuSxf:aCX+U6CPM26z5DcVmRGvOMG1t
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-websocket.dll
-
Size
1.1MB
-
MD5
2e851366783e21276a97d0d96d4f2f01
-
SHA1
9fe88875b1965a600d268a2b1d8dd60eefb7e343
-
SHA256
e4ca32dc32a3a278e32e137457e8dfb75129332a56bbc7bb11ed43277fdeb21a
-
SHA512
32323d0bbb263d08208705f4424fff88f30015736bdc5717f35ad391f92ae946f0eff993f15410eb39580b207589ed406569b81e2ffbc215156bf789fdcbbf75
-
SSDEEP
12288:1dhfhTGj7ojC8IOoFOtnPGjU3PxyNR9wC4xbxBClahCOAJof4kG4I:1LZuuIOoFc+jY5ynyN2laiPZ
Score1/10 -
-
-
Target
obs-plugins/64bit/obs-x264.dll
-
Size
35KB
-
MD5
c7416c3fc1e0510697b98d9ef8f1d486
-
SHA1
63a02d20d1732781422683d36383711839235420
-
SHA256
e66f7d4ff53536761c115dafd750f4a4d077913e54a16b0d2c9e253672519a81
-
SHA512
4cb5436b4db34b3f1cdb31290e681a90dd65c58733b02ff4789ede60a401d49b55a90e70963b99c455d13a908c2d90a344e6910083ee1b95717556120f7ef357
-
SSDEEP
768:ZvsUjCz1boum/LaP5x1IWXYDeTHAMxkEo/:/21UhLU5XYDOnxM/
Score1/10 -
-
-
Target
obs-plugins/64bit/rtmp-services.dll
-
Size
71KB
-
MD5
7e92a4ad5e7ea0239ee1fcacd6864180
-
SHA1
ef27c9a4fd5fa2252a79125d3bda7e8caec0deb4
-
SHA256
57172fc53a4cdb5d04601c68f5e8cd8cb735fa59ad078e9adbf1bb159a414f1f
-
SHA512
7fd307788bc4d0194836edfa537de24e645335e83bb66e2470b3b85ace33a8e473275957e377b9ae56117ea34647595bdf7df4ab67c62f3bc506928e55609cbf
-
SSDEEP
1536:IkED3xYtQ/PLuA7tt8Qkcq3tTTa8RDeHxN:IkEDxYIP7t2+82
Score1/10 -
-
-
Target
obs-plugins/64bit/text-freetype2.dll
-
Size
639KB
-
MD5
8acb04d39cb636ce97c84b542ba3e5e2
-
SHA1
a3d2d37bf4317aa618a18b1dbeb297b925eb60b7
-
SHA256
02d9de1dfc54bbef6c3a2a826af1dd348a532ca13b35a712a21a23c07e118d6f
-
SHA512
71d213199ac03d315c69def0c656a3a5ee6a19dfb2404f2d5b078f11d02b469539d9c574d403202b06564c872d4d8de2e67f452e9c9fd0f95f8d3f86ad35d123
-
SSDEEP
12288:u1sTcKQHu2XD4XbowQQRQ34ZxVDO5Wt0tGeg+2fEWmZ8jP:u1NKQh4yQRQ3yOEtCGegIZoP
Score1/10 -
-
-
Target
obs-plugins/64bit/vlc-video.dll
-
Size
44KB
-
MD5
2ee38dd1c031d9643d6df0bf585adca2
-
SHA1
9a92238e865b19b3147086fb64f739a8bdfbcc6d
-
SHA256
6f29f4260142c7c1d0215be096b18a9db90fa98830c8b91f5aeab85316140ae3
-
SHA512
abddf057350bdfaba2ba77ede97d489309d9181fe629093d3a4b56089125533d07de8a79286b4772fb0c5f80110c53bbc4e768527b4d746c5ed8d9bfbe33ee6b
-
SSDEEP
768:0/ukoKUxbwhogaA6K8jRL23foRiHDeTAAMxkEn:0Sbwhogp6K8jR6v5HDOOxz
Score1/10 -
-
-
Target
obs-plugins/64bit/win-capture.dll
-
Size
120KB
-
MD5
30395537150da6988dce705cfb94265f
-
SHA1
cf9cd3858a47183e0bab46a506914e9688515826
-
SHA256
3acd8b326e5a6f7a7dcc34b2a8bfb822cd52fc569a5b6cf177a184ba775067d9
-
SHA512
b7e85f2e06a861c3cc2da9998d5a72a828fe4b64c9d35411bdd0df323f334c52dfb5c58aa41590608f174ccbc974234c2155215c161e5261440226f10fc9186d
-
SSDEEP
1536:VGwtCADSY7fHPkyZWYvOCWjRLhGTkDiKd4iwC77e+/3Lveto1VNDONxm:X8ADSY75ZWYbWNET8i3iwC+CLWto1Vb
Score1/10 -
-
-
Target
obs-plugins/64bit/win-dshow.dll
-
Size
198KB
-
MD5
f58c0e5ca80142ba686c1e2e902a5e6d
-
SHA1
591f03804f696b03fa6a95c7555ef256b7e97e41
-
SHA256
88cffd2a87ab2dfbbf7c650e23840de859094156affe1b664acc7f6ea177d84f
-
SHA512
49cf2b543c310a304ec79af0e9621d06b4c8a38befb892f3af784f5005a87cede56ab59bb0dab438239119dac4f0d6d667fb25cf0214a2a45b9a0ad160ee4a0f
-
SSDEEP
3072:3FGO49JH5vHpm+awHkh0Ys/bQM7zi6cc4cvVFY:3FGO49JTm+aSG0BUMiRc4cg
Score1/10 -
-
-
Target
obs-plugins/64bit/win-wasapi.dll
-
Size
76KB
-
MD5
04f2d29a301ba554bb43f5400585126c
-
SHA1
430eae107cf6e60f4cd4b487cf2f47d99b3c4aba
-
SHA256
bc4cb454fca6103fb63c4dd5732b1c3c43523319e709e10b4285fd1fe7e923ff
-
SHA512
764193d4b5809ff3719368b5dc929cac06fc0392b191b30f1431127d6a0c6a0d1d3ed59bc162122dcfd8cd62dc0a364ab3384b70da5b66204756d0b953548b33
-
SSDEEP
1536:Cu53J8gzNn9CRijPDMvBe3lmpf0zHboQ3HqnHv+uSTTKvlDuox2:CaS8ymml0z8e
Score1/10 -
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1