General

  • Target

    OBS-Studio-30.2.2-Windows-Installer.exe

  • Size

    133.3MB

  • Sample

    240820-zsx7haxall

  • MD5

    51bc832235635f695486de858cd4bd70

  • SHA1

    ba8f215b86f5850890054fc94bf436568f792611

  • SHA256

    c11eb303330b9638936bad26cf02b8313ca43557d2a63f5e5c00d1eab2a9682e

  • SHA512

    7d41be2f8acdf88d508e696d7a622407940ee173914bc5c66f917851ad5038edf43d48c18058c8b2d8c67efee1e061c0623f22286238eae26696ae7e36cf1753

  • SSDEEP

    3145728:BcXZ1XDmrk0sggh/IWONMkBOvBX3A0cZHcITZYjRZucclhHJ+jqJZf:iixBdJPQRdclN

Malware Config

Targets

    • Target

      OBS-Studio-30.2.2-Windows-Installer.exe

    • Size

      133.3MB

    • MD5

      51bc832235635f695486de858cd4bd70

    • SHA1

      ba8f215b86f5850890054fc94bf436568f792611

    • SHA256

      c11eb303330b9638936bad26cf02b8313ca43557d2a63f5e5c00d1eab2a9682e

    • SHA512

      7d41be2f8acdf88d508e696d7a622407940ee173914bc5c66f917851ad5038edf43d48c18058c8b2d8c67efee1e061c0623f22286238eae26696ae7e36cf1753

    • SSDEEP

      3145728:BcXZ1XDmrk0sggh/IWONMkBOvBX3A0cZHcITZYjRZucclhHJ+jqJZf:iixBdJPQRdclN

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    • Target

      data/obs-plugins/win-capture/inject-helper64.exe

    • Size

      136KB

    • MD5

      ef7477532e0c8e9f1979c3ae1d8c8c9b

    • SHA1

      5abd41c19aee32b9167611dbe8f786c548aaefbb

    • SHA256

      6ae58fd64650b6db2ee776cae2e22498df3ea4ec9cd12025d8d96ec0e19380c8

    • SHA512

      f297d99ad4e396bab9e1ec5fd6f51cd291a441784a955d6e527e444652eb4edf6ede98edb2b331bea1f5e714d40c6c09b1cf338a3dee18540364dfe65143d92e

    • SSDEEP

      3072:HZpMpWVQ3AOZsdwXrisSkmtC0lp1J9NaOkp895:5yWVQ3Ag+wXakmtC0/JdT

    Score
    1/10
    • Target

      data/obs-scripting/64bit/_obspython.pyd

    • Size

      2.1MB

    • MD5

      e5ff5ca64ee287f7eaed03a0cb7ea84e

    • SHA1

      8d3920e1e96b38feb29e7a638053da49257f4500

    • SHA256

      6d73bcac190594269d47f78fedfded30f998e05d4f4f6291f3869e715b577b0c

    • SHA512

      b9a38281d28aa1bb5f4652bc2b67f5a0f5d6ba6df7f279978805de7bf2d8cbb898ed90a88752f2301395c1f019c3848fbb22199bf1c2b0371f077cc9f1b9df12

    • SSDEEP

      24576:CkfyIiKS3I+uuLf7L0TTDsPPjqt1HVBtH:CkKIa3I+PgTTDsnjMBVBF

    Score
    1/10
    • Target

      data/obs-scripting/64bit/obslua.dll

    • Size

      1.5MB

    • MD5

      6aee0f5db7ca3d5344a176899a2bd86e

    • SHA1

      a2a964dec5d4bc9d036b097541b6e4cd021a730e

    • SHA256

      7ddd6fd9a009aa4101b6fdd4d04772408d29f24010b6e5cca485acb34830f0f4

    • SHA512

      f6d01b9320a1d67e1629527d561b35944f6015f63d4842a2aa10700efd6963712657bf61790a779b43a27f9b4be5ebc96da020dcb7cd78f124e1b3ffd00d569a

    • SSDEEP

      12288:BnRQVZQ3KXwXnjGtsnLZqwccl5Yu/yRUJr2c1fRGPbI1JGyxHbZM9VqM5e:hw2KX2CQLZ/c2YRRUJr7fRLJz05e

    Score
    1/10
    • Target

      data/obs-scripting/64bit/obspython.py

    • Size

      494KB

    • MD5

      2f2464d537b6fc8b5d8a475d6375b07f

    • SHA1

      f2eb25da5faddc60b90fcc1e67ba106c86ac6d41

    • SHA256

      f145f9857948416f88c5d6c6cd83527bc406e94b95eeeff4bbd504e56295dcb3

    • SHA512

      ef967bf7b8e9f9fe847c25eafd8ef00906caaf1774d355f5ba6f58d73311b1a4df6ef9a5ebda79b50a1984aaa018f03accf964a5d475144e58038378857abb66

    • SSDEEP

      6144:zKRSQKN11kOapA26A8cJI60Qyh1GxOcwQ4NqHr4L4FTh11l8qYLL430SmCAS8Til:TTPAf

    Score
    3/10
    • Target

      obs-plugins/64bit/aja.dll

    • Size

      2.2MB

    • MD5

      43e2db5f523be781836289a0ee793c4b

    • SHA1

      b586e098e14fe581701ca9df764bab9d97a259d7

    • SHA256

      2e9de4e0fb61eef1c651e9a1632eecface3592583774858f0ac4c78f2486867b

    • SHA512

      e45aa2185d66a6c4527612392c7ef3b0d2d8976155f820243ae8a22a332b61b1e88c75440c5d12f0570548d737831cbdbccc5ee53361c7e09acc193ca5afcd00

    • SSDEEP

      24576:qeumxoiCJg26CSXZAwoK6/ulb7y/H8x8sQU1TNNYCXvE180dE5lN2GSxV9ooBfMd:qHm5B2JSXCwoLpHv5YPZXv7cW24n

    Score
    1/10
    • Target

      obs-plugins/64bit/chrome_elf.dll

    • Size

      1.2MB

    • MD5

      6953a5a063eb4bf1e674b254d020d8b5

    • SHA1

      078f8d76be94969c005fc110b68db17d21e340e7

    • SHA256

      c0193557c3b6d0c499f6c47edc6d6255385a0a5e138fd1a3328017a5357fcefe

    • SHA512

      4936167aab13241939eb5492aa586d970ab9a6bd68c8cbb14dc74b09093c29d7d3b887300a2de612a75f3a63b447b2afbf80514d038261c10cd06954401404b2

    • SSDEEP

      12288:1LRUCPAsgA2nOIcnJJgndLpPoeEt1yle0atiH7WPdlLPpodwpYyBfer5+nToCkt8:1N5P8JcJJUdLho9LPWODZSgNn

    Score
    1/10
    • Target

      obs-plugins/64bit/coreaudio-encoder.dll

    • Size

      54KB

    • MD5

      19eba9357c23d2aab0953433a9c0659b

    • SHA1

      547267f4263404888d0d2870e43016b452cefcfd

    • SHA256

      ca9b0321daf6c72b987c5388dade49f3554adfb0c92133bf442453e879be00d8

    • SHA512

      7cf55a16f2e477306cd2b5942977b64a058fe548cf4e42e2571d9df492cbddf7c23f9ea8305d8ea8ad533ee1cab9997293d3b567ba61496bd8ac87e85443951b

    • SSDEEP

      1536:rXQ3HniqGYUf7LalaLnPH4bwwv7MjEgDuVxKV:r4H/cRbu7MAi

    Score
    1/10
    • Target

      obs-plugins/64bit/decklink-captions.dll

    • Size

      54KB

    • MD5

      01a75807141050f05c915009301a7a34

    • SHA1

      94f4e67b0c3f715f8815f82fa35a3861fbe9240c

    • SHA256

      e49fcd691a08f0f353cfcb741886a06b5051a86f3c91a2d571d5be5a848f6edc

    • SHA512

      dfd519fbef77d406ce87ff2298f4a91e15f12a75503f97d493fba21379d92ce9a4c41b139f034c0ef885682a82b37f2bbffba861f5d78cecc6dc5424e26df47f

    • SSDEEP

      1536:ZtqmEJXilHjVDt71Ai+puhbEArkENDuRxz:HqYHjVDt71Ai+puhbEArkEe

    Score
    1/10
    • Target

      obs-plugins/64bit/decklink-output-ui.dll

    • Size

      204KB

    • MD5

      bb122119f7227c102305198055e9dbe8

    • SHA1

      98408dfe6c033c068a5272542ab16f33eb6c4de5

    • SHA256

      2da6ad701e0a6802a83860513042ed3f3c6a78072a39c9e12e47bd35a637115b

    • SHA512

      b57ab58cf8256d9988f00465859ffa0a6630e1eef46e32409f3172964aa8ea7d82a60e00e2ca913b7dd37251bb9d76a5cb00409ab86482ae4771f6684d757f8e

    • SSDEEP

      6144:MT7poWPsz96Gf3T/x9HjVDL1AY+6AH7j66UNhVxbGLfg9ahuGwuBsnfzbPohd:MXpoMAf2/

    Score
    1/10
    • Target

      obs-plugins/64bit/decklink.dll

    • Size

      76KB

    • MD5

      f82d35ff9e2bb04840215a3b5c95393e

    • SHA1

      eb872eea943ac64fa3ab36c53e3477b9d4324b25

    • SHA256

      4e1d11739b485fd7ee584cee4b792b95622eceefb616ae480024b99681342d93

    • SHA512

      6310442759b02306aefff948e230a3ca5fe5ef8178c7a54a32c6c242845eb5adddb0aa3cfa84083cfff05a4d392e6a184c786a68063848c410d020d7af7704d4

    • SSDEEP

      768:trrAjvUyQcGB+/UcpeRZIEKcYhugcFxGbqqOf3vLr6KZmys7z2m4DeTwAMxkEqB:tfAoPCEKFcFGO0ysH2m4Duexk

    Score
    1/10
    • Target

      obs-plugins/64bit/frontend-tools.dll

    • Size

      357KB

    • MD5

      577bd5538c78359268cea0aee9a9e5de

    • SHA1

      f28d722414850fe8e11d94d919f5df9ef8f2bc78

    • SHA256

      3c10a4587d8f8e5175b25892e2da92d99eb6fc24868cbf381112de2592f3f7ef

    • SHA512

      94a2dc343a50a46b034fa7a7a664b2d0a6158aae7a2dd59be1f1f286be01b79bfda19f0205dcf802bc8ac4708fded3ff447fea98855fe6205683fb089f950359

    • SSDEEP

      6144:k5f2kY8YBf6yM9P+UlGYGXN5ImG6NHjVDtrf31AY+puUbbAC6a39aYVGlizcETEO:k0kYBBfvM8HIdxscKDpfS

    Score
    1/10
    • Target

      obs-plugins/64bit/image-source.dll

    • Size

      57KB

    • MD5

      ddea638f4f9acd87f507482d011be3ae

    • SHA1

      0bb5a299b05d0ee555a55f8a22ea23ec9985b70a

    • SHA256

      12260c69380ce9790c0a7f42d52feb14c5503deddfd5fc539ae3e4476889683e

    • SHA512

      a997d4aeaef438f7f5bdc4ff6adf9e4bcf3c63a536560cc2817ff1f7b3e00812864022e5504de2cb4cc28ed7dac41935ee2601c787b34505cdb1864ecefa4c22

    • SSDEEP

      768:DBsX0eymXAbVu5mF5WMZB4zhftFjiOVxZapK1QaYfVeXGIGCnDeTPAMxkEDK:EICmFjZB4zhfa6xZa4ChfVCnDuPx6

    Score
    1/10
    • Target

      obs-plugins/64bit/libEGL.dll

    • Size

      444KB

    • MD5

      31c7ceb56e773fe18f7f09df9267b80f

    • SHA1

      749b80b23ebb2ea5e5a677ef4d049c14ae9a94a8

    • SHA256

      1a996641083d7c5d9becc690a67b1a1b5648454b881cc4161e791ff1b4eff5d4

    • SHA512

      66cc97471846a11923a34ad1ccae846ee4896302de749c75d9cc81d0652c462425aa6c7dd45734a328fd8f208973447cf35fff03fa84e6aa07bba4cd7089144f

    • SSDEEP

      12288:wDpNGMQY/PZgbuJVtvofqfO4Ui65ED71o:8N1PZkqfhj7G

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-browser-page.exe

    • Size

      537KB

    • MD5

      8c1bc669ad41709082f99e3c831c196f

    • SHA1

      470431c23c7ea1f218e588fe4b6698735c591c04

    • SHA256

      6b4f7f963eec9c5d63d9e1287da653f28d77e953e50817770e0e445ef7209442

    • SHA512

      f70dfe56516798757263d2c1e9f9c5e8991b204b6232af3a1e0848ff2ced9688bdc0fda3ec72e5b6b395e7343e33ba25bc11d597235d917738bc91838b7c732e

    • SSDEEP

      12288:e0v2TsznfcMtsP9Sv8H/QjC+08ahMN09AQLiVAsWR06UyL:t2TsznfcMtsP9Sv8H/QjC+0LhO09OmlB

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-browser.dll

    • Size

      772KB

    • MD5

      878e0a4afc10faeea9c922760011a369

    • SHA1

      f1271d40b720141ed1022100dbd4de041999dbe4

    • SHA256

      3dbc1f3e217dfe91d2d265d8ab1760b8713f1899e4fffe40ce9a45ab696513e9

    • SHA512

      eef3eed776efd7c9b8697a9ef68af812bbc8bed7dc13ef0c8e21e09fb970dd2fcdda37777c56ef34c983fca027476f2093d75a44a136681393fd372b39da4db9

    • SSDEEP

      24576:udAvq6881VXF6nFY3YjHylmWxyBEFakQHBLVW:ud7EFaRHBA

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-ffmpeg.dll

    • Size

      285KB

    • MD5

      bcbcc5c55512b4447e78d7eae6392734

    • SHA1

      5f36af00c7f7adbe089df52f2eadce8df81ea2ae

    • SHA256

      4ef3535464d95c6dd9039e26f611f9587744db818d6f9f58a35b511995311057

    • SHA512

      b6ab56ca0ac4b89d161dcfd4894f536cb4fc9d0bdaa3dd774086f4f61cd8e5754f9b368e9f1e9a6e60ee15ebe4e6f5530458044c033d032ea5b891926f519977

    • SSDEEP

      3072:mQtIdNmOw5EgQxn7HN3s4SPXC5vcUM3QnGbNxRb/iJrQAkrFlzDd1VWoOg8:m8IH9gQx7H6C5EUMv8r6B9dzW5

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-filters.dll

    • Size

      328KB

    • MD5

      53fabef6b0cb06d9b0c99aa14bfd280b

    • SHA1

      646f98b5ba12dfab5d747d87f43c0a1055c412a8

    • SHA256

      2cf9aae367bca7b1ed7f60e84038b37bf50e1cc1c2142e8d64d4c1791da011d2

    • SHA512

      71b9859dbaa1569c71b824782a50db5fab4d8a459ea3048d2b5c540b8962776c16a63c6e41a454824950a3ae98ef6a39838d4e6652a5bb00401b6485b393ebb1

    • SSDEEP

      6144:qRBr9fazJRWCgiw6hNyk4aitT6Jv6cX4m9V5CTRpKsV/ytMq:q/r9fazfW9WhNQab6cX0UCS

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-outputs.dll

    • Size

      792KB

    • MD5

      dde5199f9d88ea69ffbd2f508cc44fd3

    • SHA1

      aab080d0016eef60f836f230678b514698f2b61a

    • SHA256

      fd223a675f444074aa53d6f8ecaa65b87aa4c05bb386a09e8a38600cc971dcfb

    • SHA512

      a15dec18b7e0aee2157127abce49126d0917fbac5d8b7b6d569812b4b2e97b38c90465e4dbb17794c450635728ca70f5757a363afe9f507016c1d4c5891b65ef

    • SSDEEP

      12288:ZHVHdohH4kvTqV0VvCGRjXdy6U5fMWZmc5h57la3RjsUCl:ZHgYk7dVvCGRjXdy6UWZc5bg+l

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-qsv11.dll

    • Size

      230KB

    • MD5

      6a849b61b216cc1154c657fecd0c9cdd

    • SHA1

      191d44bf083c08c496230065b8f6e7b6907d733f

    • SHA256

      086c3ef8643f2d84c1a65bc59260b4cbad9ddb2f48869cf0d020b337902f6dd9

    • SHA512

      99616324abee95c9fc26ec3fafc522017129438f9a93e8085a76843e5f9eee8a8ff57d8a75ef799efa4be48c3921b86305d4a1493318e2cc448106295ad97b1e

    • SSDEEP

      6144:iqz3Ym9n7dooV7b481GWkmxKUc7jHdQIUFgJ:B3jJgPUcXd7V

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-text.dll

    • Size

      51KB

    • MD5

      3e2947ae14ab2d3e591905492c276632

    • SHA1

      b116d8331e9ec0471b3ae89a4cef2e3abc1bbf32

    • SHA256

      b9102bc4703a66f441716747b06734044e273382977f3b1aff2e966642404661

    • SHA512

      2be7ddbda4310ed558e893d75b3a39143aa8f02af67d7573fb6dc853b3910ea004d23e4881042d20650520b514aa3521d064746d27a12435c92460c4d671d70d

    • SSDEEP

      1536:WdhZJ8Us7SCISwVMgTftRKXu7RE5lhODOBxk:o8UsvwVMgDtRKe7REPhq

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-transitions.dll

    • Size

      46KB

    • MD5

      6720e479cc19cfd0fc64ccbb29c96423

    • SHA1

      a459aa9de7643604812cc3d87a4da32a3f007f59

    • SHA256

      ccf3ef68aef59a1d96e61bc84a5c727fe60df38a98dcc7b5c6fb4b7cda5eeaf0

    • SHA512

      e5f433a8ba92b13a30489ca46048b719d0cf7d0f29508ec785c1648a8dc44e8e212b441c38c3bd2a574a8771fdea59e09db34a0631d12edf88e06f46734285f9

    • SSDEEP

      768:fSgBzBslJWK6TupdjlVKaiGwd1nnlH3De7iAMxkEY:KgBFslgDiBgaiX/n93Dmgx0

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-vst.dll

    • Size

      64KB

    • MD5

      819dcfb9e3448e12eea64c3c04db8088

    • SHA1

      c7801d1e9ac00f669c0aa5c61974d925b2d121e4

    • SHA256

      0c977a599b2dba93eaa983d8299ea41fb18516115bff2fdfd8eb291f3fccddf8

    • SHA512

      035d3ed9bd7f6bef8d9194ea6e39166237820b2d987c5d6f2c8c401af4770d76870d6797eb0ed763e88b1e32dd2ea3f408bb26adfa14196b2f23eaf009cb49a9

    • SSDEEP

      1536:6pv8Uheb5msTwsCHPnU/8NvWtETAnvHFBbuDedx8:Eze9rCk8N6ETAnfFde

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-webrtc.dll

    • Size

      88KB

    • MD5

      27d14fc1d183611690c59e149df10655

    • SHA1

      b92a04bf2876bd664705a765d621f28261631895

    • SHA256

      bf64e858b84a48ece3f8ebbc46528484d6a0dbd5321d4563247d7a940904b9be

    • SHA512

      997e07b849c90f1ce45de46ee2b3f356742f5fede44f1da2ce3b6ef4a16931d1a43be992e9a8001bac467b15fdce9755fc71202a4a68326f5ef4119c0cc5d1e4

    • SSDEEP

      1536:aCcI1odnXlUxEJbCPUN26z5DcZTUHRGvOMG1hDuSxf:aCX+U6CPM26z5DcVmRGvOMG1t

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-websocket.dll

    • Size

      1.1MB

    • MD5

      2e851366783e21276a97d0d96d4f2f01

    • SHA1

      9fe88875b1965a600d268a2b1d8dd60eefb7e343

    • SHA256

      e4ca32dc32a3a278e32e137457e8dfb75129332a56bbc7bb11ed43277fdeb21a

    • SHA512

      32323d0bbb263d08208705f4424fff88f30015736bdc5717f35ad391f92ae946f0eff993f15410eb39580b207589ed406569b81e2ffbc215156bf789fdcbbf75

    • SSDEEP

      12288:1dhfhTGj7ojC8IOoFOtnPGjU3PxyNR9wC4xbxBClahCOAJof4kG4I:1LZuuIOoFc+jY5ynyN2laiPZ

    Score
    1/10
    • Target

      obs-plugins/64bit/obs-x264.dll

    • Size

      35KB

    • MD5

      c7416c3fc1e0510697b98d9ef8f1d486

    • SHA1

      63a02d20d1732781422683d36383711839235420

    • SHA256

      e66f7d4ff53536761c115dafd750f4a4d077913e54a16b0d2c9e253672519a81

    • SHA512

      4cb5436b4db34b3f1cdb31290e681a90dd65c58733b02ff4789ede60a401d49b55a90e70963b99c455d13a908c2d90a344e6910083ee1b95717556120f7ef357

    • SSDEEP

      768:ZvsUjCz1boum/LaP5x1IWXYDeTHAMxkEo/:/21UhLU5XYDOnxM/

    Score
    1/10
    • Target

      obs-plugins/64bit/rtmp-services.dll

    • Size

      71KB

    • MD5

      7e92a4ad5e7ea0239ee1fcacd6864180

    • SHA1

      ef27c9a4fd5fa2252a79125d3bda7e8caec0deb4

    • SHA256

      57172fc53a4cdb5d04601c68f5e8cd8cb735fa59ad078e9adbf1bb159a414f1f

    • SHA512

      7fd307788bc4d0194836edfa537de24e645335e83bb66e2470b3b85ace33a8e473275957e377b9ae56117ea34647595bdf7df4ab67c62f3bc506928e55609cbf

    • SSDEEP

      1536:IkED3xYtQ/PLuA7tt8Qkcq3tTTa8RDeHxN:IkEDxYIP7t2+82

    Score
    1/10
    • Target

      obs-plugins/64bit/text-freetype2.dll

    • Size

      639KB

    • MD5

      8acb04d39cb636ce97c84b542ba3e5e2

    • SHA1

      a3d2d37bf4317aa618a18b1dbeb297b925eb60b7

    • SHA256

      02d9de1dfc54bbef6c3a2a826af1dd348a532ca13b35a712a21a23c07e118d6f

    • SHA512

      71d213199ac03d315c69def0c656a3a5ee6a19dfb2404f2d5b078f11d02b469539d9c574d403202b06564c872d4d8de2e67f452e9c9fd0f95f8d3f86ad35d123

    • SSDEEP

      12288:u1sTcKQHu2XD4XbowQQRQ34ZxVDO5Wt0tGeg+2fEWmZ8jP:u1NKQh4yQRQ3yOEtCGegIZoP

    Score
    1/10
    • Target

      obs-plugins/64bit/vlc-video.dll

    • Size

      44KB

    • MD5

      2ee38dd1c031d9643d6df0bf585adca2

    • SHA1

      9a92238e865b19b3147086fb64f739a8bdfbcc6d

    • SHA256

      6f29f4260142c7c1d0215be096b18a9db90fa98830c8b91f5aeab85316140ae3

    • SHA512

      abddf057350bdfaba2ba77ede97d489309d9181fe629093d3a4b56089125533d07de8a79286b4772fb0c5f80110c53bbc4e768527b4d746c5ed8d9bfbe33ee6b

    • SSDEEP

      768:0/ukoKUxbwhogaA6K8jRL23foRiHDeTAAMxkEn:0Sbwhogp6K8jR6v5HDOOxz

    Score
    1/10
    • Target

      obs-plugins/64bit/win-capture.dll

    • Size

      120KB

    • MD5

      30395537150da6988dce705cfb94265f

    • SHA1

      cf9cd3858a47183e0bab46a506914e9688515826

    • SHA256

      3acd8b326e5a6f7a7dcc34b2a8bfb822cd52fc569a5b6cf177a184ba775067d9

    • SHA512

      b7e85f2e06a861c3cc2da9998d5a72a828fe4b64c9d35411bdd0df323f334c52dfb5c58aa41590608f174ccbc974234c2155215c161e5261440226f10fc9186d

    • SSDEEP

      1536:VGwtCADSY7fHPkyZWYvOCWjRLhGTkDiKd4iwC77e+/3Lveto1VNDONxm:X8ADSY75ZWYbWNET8i3iwC+CLWto1Vb

    Score
    1/10
    • Target

      obs-plugins/64bit/win-dshow.dll

    • Size

      198KB

    • MD5

      f58c0e5ca80142ba686c1e2e902a5e6d

    • SHA1

      591f03804f696b03fa6a95c7555ef256b7e97e41

    • SHA256

      88cffd2a87ab2dfbbf7c650e23840de859094156affe1b664acc7f6ea177d84f

    • SHA512

      49cf2b543c310a304ec79af0e9621d06b4c8a38befb892f3af784f5005a87cede56ab59bb0dab438239119dac4f0d6d667fb25cf0214a2a45b9a0ad160ee4a0f

    • SSDEEP

      3072:3FGO49JH5vHpm+awHkh0Ys/bQM7zi6cc4cvVFY:3FGO49JTm+aSG0BUMiRc4cg

    Score
    1/10
    • Target

      obs-plugins/64bit/win-wasapi.dll

    • Size

      76KB

    • MD5

      04f2d29a301ba554bb43f5400585126c

    • SHA1

      430eae107cf6e60f4cd4b487cf2f47d99b3c4aba

    • SHA256

      bc4cb454fca6103fb63c4dd5732b1c3c43523319e709e10b4285fd1fe7e923ff

    • SHA512

      764193d4b5809ff3719368b5dc929cac06fc0392b191b30f1431127d6a0c6a0d1d3ed59bc162122dcfd8cd62dc0a364ab3384b70da5b66204756d0b953548b33

    • SSDEEP

      1536:Cu53J8gzNn9CRijPDMvBe3lmpf0zHboQ3HqnHv+uSTTKvlDuox2:CaS8ymml0z8e

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discoverypersistenceprivilege_escalation
Score
8/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
3/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10