77374fb48cda6e8739732672bbe6fed90e2e4a0ceed0a4e460f193135485fe50

Sharing

Copy URL Twitter E-mail

General

Target

EqualizerAPO64-1.4.exe
Size

9.5MB
Sample

240907-t8sztswbpc
MD5

d431263f3a1f39db6698a4a568b5125a
SHA1

e2bae283dcf46815df41577eb1c1d3d60e0169ed
SHA256

77374fb48cda6e8739732672bbe6fed90e2e4a0ceed0a4e460f193135485fe50
SHA512

48d30c079fabeb0226bb3dbc692c16106daf74fcf18c5528d1e8000308e3ccc8db85056f5959998794b29182380658d6e616c27026189da21ddb854aae1bfbf9
SSDEEP

196608:gJTuVA0bqyv2fDWk24XPuKIobPr+cbR7DLB3BeZOEIdq+E6GmD5l//cFI:ITu/bHufSkrPuKHPdzB3yknjDnHcFI

Score

7^/10

Malware Config

Targets

- Target
  
  EqualizerAPO64-1.4.exe
- Size
  
  9.5MB
- MD5
  
  d431263f3a1f39db6698a4a568b5125a
- SHA1
  
  e2bae283dcf46815df41577eb1c1d3d60e0169ed
- SHA256
  
  77374fb48cda6e8739732672bbe6fed90e2e4a0ceed0a4e460f193135485fe50
- SHA512
  
  48d30c079fabeb0226bb3dbc692c16106daf74fcf18c5528d1e8000308e3ccc8db85056f5959998794b29182380658d6e616c27026189da21ddb854aae1bfbf9
- SSDEEP
  
  196608:gJTuVA0bqyv2fDWk24XPuKIobPr+cbR7DLB3BeZOEIdq+E6GmD5l//cFI:ITu/bHufSkrPuKHPdzB3yknjDnHcFI
Score

7^/10

discovery persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  
  $PLUGINSDIR/AccessControl.dll
- Size
  
  13KB
- MD5
  
  28c87a09fdb49060aa4ab558a2832109
- SHA1
  
  9213a24964cd479eac91d01ad54190f9c11d0c75
- SHA256
  
  933cadcd3a463484bbb3c45077afda0edbb539dfbe988efad79a88cae63bf95f
- SHA512
  
  413b3afe5a3b139a199f2a6954edc055eee3b312c3dffd568cfdbe1f740f07a7c27fbf7b2a0b6e3c3dd6ee358ce96cc1ca821883f055bf63ddebda854384700d
- SSDEEP
  
  192:V26NwF1FF1bl9UsZBpDOjH3RGz47gnrVsybWZeAW4MwNR5yRR4XLLF/NTNIXoslk:T+1bYsZBwWsySZeIBZdP40l
Score

3^/10

discovery
behavioral2
- Target
  
  $PLUGINSDIR/NSISpcre.dll
- Size
  
  164KB
- MD5
  
  bfe060c22b44914e05d3f5367de6c9fe
- SHA1
  
  24c72b0b57b0066a5e8b235104a0502400e44b9a
- SHA256
  
  43041f8540dccbc33268bfbef53037d17170b037f6393e77c21429f303ae828f
- SHA512
  
  ad3a23edd8d62b198e4a2ccf03f6d607dee41fa23fd6f9dfabdc5ee424b5e22a6e00b8a28e50fe177829a2cc25ce05484423e97c682036fc5146e2adf560bc44
- SSDEEP
  
  3072:5YFyk+vtvpoYYPkoYMtXTP5V+4Km//sbJVlseEOb+Y+UT:KFyznYntXL5XKCk9MeEm7
Score

3^/10

discovery
behavioral3
- Target
  
  $PLUGINSDIR/StartMenu.dll
- Size
  
  7KB
- MD5
  
  26836307758e048d1ce0afe754d6a972
- SHA1
  
  23a8f45cf5e2ad78add3c4dd3b3cf15fffced2cc
- SHA256
  
  a6919f5f3b53a9c8c015413babe7a9872491a2583e49bb3c261e60785c3c3534
- SHA512
  
  aaf7cfbb9c6951b65bd377db401617812f1d47960a01ae99164183c642fbd8f1ce08720bc92d26b642da5433b80720dfcd96280a162decf678139966be132746
- SSDEEP
  
  96:IgiqVPb3X8K8Kdr3gEq6nNdMk6Qiw290+q6LDtJ1tk3hhEl7y:IgiqVPgK8K9eIdE9B/t8hg7
Score

3^/10

discovery
behavioral4
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  fccff8cb7a1067e23fd2e2b63971a8e1
- SHA1
  
  30e2a9e137c1223a78a0f7b0bf96a1c361976d91
- SHA256
  
  6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
- SHA512
  
  f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c
- SSDEEP
  
  192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4
Score

3^/10

discovery
behavioral5
- Target
  
  $PLUGINSDIR/nsArray.dll
- Size
  
  12KB
- MD5
  
  0917ee492308b691326e6581e8c793c9
- SHA1
  
  ff689c8051ffca7657461ac828bc46e303ab8e59
- SHA256
  
  81745087f193b6fa131189f4b3ee9caa93e9692e408d3955fbcb9a4ec8516e2f
- SHA512
  
  2a4ae4b93b0eac113a0e65f459798466120f1af4605a82a11f9022d790fe0b4f7d368b312f8a073b1dcfe8760e529ea56a5b5d4289321dc9f2fc8a22691b42b5
- SSDEEP
  
  192:L+QMtjhIz23Tv7QpAXXcxwtXexpnGOO81h2xXP:SQ6nDv70AXXcWtXexpnGIhW
Score

3^/10

discovery
behavioral6
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  1c8b2b40c642e8b5a5b3ff102796fb37
- SHA1
  
  3245f55afac50f775eb53fd6d14abb7fe523393d
- SHA256
  
  8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c
- SHA512
  
  4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57
- SSDEEP
  
  96:o2DlD3cd51V1zL7xqEscxM2DjDf3GEst+Nt+jvcx4T8qndYv0PLE:o2p34z/x3sREskpx4dO0PLE
Score

3^/10

discovery
behavioral7
- Target
  
  Benchmark.exe
- Size
  
  606KB
- MD5
  
  3cef736b8ad5c40ca3126228c0d1f520
- SHA1
  
  0f51bc335a02c68aa50c8c680d7c98f3551ecacf
- SHA256
  
  44090da185849025c55980f1dd084cb7720ae5a0970d345d4b3464d149dbc723
- SHA512
  
  947fdec6d5b7f1324739dda4c1a841335b3a105f63d256bc4149e481580fdedcca6079010ace31df597caae5e476776498f2df255c3fe95bbeea9b0df8a30e38
- SSDEEP
  
  6144:pyEubsTb+eqRnAELVWRoc/V/1PThUV7i/sAkbqWU+nxa4doKngqtxiJmGM0HGmOY:PCrd/c/t1rhYiabmcnQ9/3vQa+hoFgi
Score

1^/10
behavioral8
- Target
  
  Configuration reference (online).url
- Size
  
  167B
- MD5
  
  b8ae8a09625a36105f78272736bf5e3d
- SHA1
  
  51fefd1bb3076c704b8d07186e4580cc940c15f6
- SHA256
  
  0386aba953d745c338636da1acba1941be7a5e18042ba74b63c6c047d17e75a2
- SHA512
  
  ddb257bfdc1223e4cf92c1dc06b643bfa228ac4fcd114e53aeb6303d462594afbcf9b8248d4668c6d8ac626dc36dc5c60e24e3edca6633ed943ba0b8ffe8da22
Score

1^/10
behavioral9
- Target
  
  Configuration tutorial (online).url
- Size
  
  169B
- MD5
  
  1e1d7502498c8afeb73241afc10c629a
- SHA1
  
  e68df70b786feb6927c21a576b8617eefa53e778
- SHA256
  
  f655030c56476500551b41bf2afd2545e728aa8674fd254700beeb0a21f1bb19
- SHA512
  
  59f198dcdc8b180be0a9dc50d83c004dcd1b5ec0013951faa451f64454c620f74da9fa675a98ccae713d69bbb2ff2727c66ce862933878b96d0c2596c9ac5bd2
Score

1^/10
behavioral10
- Target
  
  DeviceSelector.exe
- Size
  
  518KB
- MD5
  
  ac1ccdd400ddf4f7fbe82af9d3a97b84
- SHA1
  
  5d20a16e1cd0ac84e545762ca84c0ab95f5e3786
- SHA256
  
  8931df36c0af402faf328aa1e94c211ea3df91fccc21ce3194621daff4e49a9f
- SHA512
  
  b475517e9368fba6f4d9add898d7d4fc9dc402f1c510571e986e8693cbccf61d65e381dec3b191504c8ddf67f7f915ee9162c1699fc2ef5ef73c57156dff788b
- SSDEEP
  
  6144:5zKbJqbPiX2SljtWOOJsABtgY1DNar8IZc1Jfi645XEKD8Wg9/JF2weTzd/nuxOl:sqbPiX2g57BY1D4HZ8fixB0W8Z8f
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral11
- Target
  
  Editor.exe
- Size
  
  1.5MB
- MD5
  
  84378944a27918656b9eda88ab39b429
- SHA1
  
  8c8a358e2bf4f42a059f25a4621a289c2e483e41
- SHA256
  
  62aa425fd9666d3e9fa83fad53300eb26a51c0325b853a5f813720f0b2da3e37
- SHA512
  
  1c17b9cb61d6423926257df151ab0972141d8348bf0e6af61589f62c5b0daa1c762ab68497fd702d5b5c9fb68230a79db7f4e4c6a9735193ecb8a5e26cc3eb3f
- SSDEEP
  
  24576:5Y7gmwhDS6HTprDucBKDf2h5/ZqCBke840yq3ZzlaUeI:+gFS6HF3BqehRfBke82qZz0I
Score

1^/10
behavioral12
- Target
  
  EqualizerAPO.dll
- Size
  
  620KB
- MD5
  
  30cd687d92a837e9ced52ed63cbfff9f
- SHA1
  
  41c6b468891442f1dd34128bb58917d983fd1bb3
- SHA256
  
  82597002b0ece342862dc32085b44c0ab3cb6f669b075eb2840f99f46ccd2630
- SHA512
  
  6ee8085db534dd688abab6cb99a08a8d2ab7297120097dd789a9e6a5b9d401ce5ee916f2aa4dd1db89a1ad957bba127789efd2d53cee23df1ef008f19565674e
- SSDEEP
  
  6144:NQpKDWC5QWiSFkD5hR1OM9rv58nIOMtY0mw3dSH/mRt0OCKflL0yoqUmUNUAPXTp:upo/RDU5hrO85lOMhmwsSP7bA/TYaZF
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral13
- Target
  
  Qt6Core.dll
- Size
  
  6.0MB
- MD5
  
  7ec4e096a94814a74f65529bd0114938
- SHA1
  
  943682e0c49925525d9ca8afc3853f7311950436
- SHA256
  
  653a445d56044410903499952a2cc1ae575e059a75603a2b2a37b10d15db51f0
- SHA512
  
  a59431899e75ca7526bbb3962b2ef96073c611fda690e6001d10c61de87c8bf9749a9154ef75d77528ac97d818504f115703ba3e024033173d9d93a7142fa285
- SSDEEP
  
  98304:l76sZMr/XenfejKFdu9CwJsv6tCs/3E5T:kbfjKFdu9CwJsv6tCs/3q
Score

1^/10
behavioral14
- Target
  
  Qt6Gui.dll
- Size
  
  8.0MB
- MD5
  
  2d4d3c6393fd7e75889c97af05cd0b99
- SHA1
  
  e915d346a0d3f5a94fe5dab213c19ed8f38163d0
- SHA256
  
  f710aab637560f64e759b2932fab383d01002436c73885a6d19b317e54d86bfc
- SHA512
  
  6a5ea4fc1feb0a27d2e4f215d61cd9a55b37a1b5fb53b73055eb4f5fee4bb0702b4b4a2aa5fe2d1a5398564794aef60816dcb482a91ba38e71a1953297605672
- SSDEEP
  
  98304:LXoXe4OGtMCLvbdJMzx/DrfC0JDOyat+wUiMq:LXo3MyBJmPC0J0
Score

1^/10
behavioral15
- Target
  
  Qt6Svg.dll
- Size
  
  481KB
- MD5
  
  c9a0285bf33b8baf5e21c54cf152b1a1
- SHA1
  
  24026508ddccfa2f41c07b668eb3d3239cd937dc
- SHA256
  
  88194a929933800eac26bf9f9e06489f71ffb8a56e5f9a184c2eb2d820a0d4c8
- SHA512
  
  99f06b7062efaf7ad2628c161caf242db1d5fdb014cf141884fe9932e913e8b3e11796f1b1e203867df80bda9ca3c233489991c8e7d90b820b9cae369600942f
- SSDEEP
  
  6144:vx247y4nlG9aK8+RGLid5hAoHVMLIf4fFfKRcuB0JDmbfCn7tTssW13DhnCdJY:wfKMlkLidDA5KRcF
Score

1^/10
behavioral16
- Target
  
  Qt6Widgets.dll
- Size
  
  6.2MB
- MD5
  
  eba4b1ca47653bb73a51f84fa8a90ac5
- SHA1
  
  8523c7c479231111d4ae47e52ec5fa430e51eed8
- SHA256
  
  f9ee5e7968633d05f157d0b63a3ce231dda76e9511425c585bffd7d504981666
- SHA512
  
  192741e49d43ba0b0d392b8ca8edf5a6a792fbf26c3a1a2351b06cc5a421d85b2434e5f4099e99056e150352aaad136ed954a893d3d6a7a33ce6eb2196fe97dd
- SSDEEP
  
  98304:hGnn0bhngZ4tBaVEk3VzPRBsVIQV7u5Qp0haTjh:g0b944tBaVDlzPRBsVIQZu5QpC8d
Score

1^/10
behavioral17
- Target
  
  Uninstall.exe
- Size
  
  67KB
- MD5
  
  e89291c01f635b0500e587f05674ab2d
- SHA1
  
  9ecc40165b94b131ad34a34ed46cd6b918d38415
- SHA256
  
  d07e1b443e7387814821ba85bd5ff5f7fc66a9e41c9c7692cc9ce1235f3e00ba
- SHA512
  
  29df0625ba31d19e8969d6e9e6be22447fc30c9d70d583d5ef647cafd0bbb26c15e8804f95f0eebcac5d3467c402b7f721ee1a86f8b9a7d9d4066abdd12f6b51
- SSDEEP
  
  1536:UErU9XLGOA9yMHI7jsOzDcpgdLeAyN4PGS9WdI0:UEre7GjyCaFvcpceA7GS0
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral18
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  fccff8cb7a1067e23fd2e2b63971a8e1
- SHA1
  
  30e2a9e137c1223a78a0f7b0bf96a1c361976d91
- SHA256
  
  6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
- SHA512
  
  f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c
- SSDEEP
  
  192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4
Score

3^/10

discovery
behavioral19
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  1c8b2b40c642e8b5a5b3ff102796fb37
- SHA1
  
  3245f55afac50f775eb53fd6d14abb7fe523393d
- SHA256
  
  8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c
- SHA512
  
  4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57
- SSDEEP
  
  96:o2DlD3cd51V1zL7xqEscxM2DjDf3GEst+Nt+jvcx4T8qndYv0PLE:o2p34z/x3sREskpx4dO0PLE
Score

3^/10

discovery
behavioral20
- Target
  
  VoicemeeterClient.exe
- Size
  
  539KB
- MD5
  
  8b76f62e7004c76121cb07fb4b532f92
- SHA1
  
  0b21f4652a44eb82d240db9d54f1f0e027c267d0
- SHA256
  
  619941813449bebebbb4ae384ab645a9bcbcc16b5c22845e0a6b6b9e30ca3ce3
- SHA512
  
  7ebd3059a18f7c41fcc40e9ea280f935a2d0e92c9bba12719b24a4ce9cc5c788a05e3c564f9de64da975ac0d8d94ed8909922ad0dbd6a35bff7c44ca3c3ad9d3
- SSDEEP
  
  6144:AgYNr7/IU0I/a2FDqPGQeSBeid8vS6cERyHFE6BfAIODb6BPK4a1fs:Yr7/iga2FDoGLSBH8vKHAIQmBPha1E
Score

1^/10
behavioral21
- Target
  
  libfftw3f-3.dll
- Size
  
  2.6MB
- MD5
  
  9bc1a19ef7fafb31b43a964895ed9dcb
- SHA1
  
  4e9eccb805eb876177a6b3a42f912ac52e9f20d2
- SHA256
  
  42ca18fff35dd12890e04478bc990005b3969cb744f6843976bd436ccd7f0a4c
- SHA512
  
  72c5bc879c8869f0d3c00dc32f9187b267969948e5b578ac1a86af8c83d7126297eb9a7958d6da156a5f348aaca60bee0822c5416c17240cc8850dc2cadc2d8e
- SSDEEP
  
  49152:ZbVolI4xMje7CLVUnHQl1Wv+sKwh14RT9Z04TMzYr1ZBXwD2idL:3o+0ae7GQ+5XZidL
Score

1^/10
behavioral22
- Target
  
  libsndfile-1.dll
- Size
  
  1.7MB
- MD5
  
  ab078f3f6241fddfd39637d7b9358834
- SHA1
  
  c895b2555e99a34bed57ecaa328c56bda4481b3b
- SHA256
  
  740dc79589813c83f5a6b8ea214b5c1031041881b4dc96703e295a7c04d09f5b
- SHA512
  
  f5646ce0255ae551308c6861447c39deade07f775ff33526bdc58e22a90132cae86ac44767b2b83c07633f54f8b516e06e2efdce75de98d9a0fa530d6e581d78
- SSDEEP
  
  49152:gmYf13JE1o6kK5eQnahfzNqTBboLTfKIK15sRcRcQQQkixzjYz:gNJELapfJq6b
Score

1^/10
behavioral23
- Target
  
  msvcp140.dll
- Size
  
  561KB
- MD5
  
  72f3d84384e888bf0d38852eb863026b
- SHA1
  
  8e6a0257591eb913ae7d0e975c56306b3f680b3f
- SHA256
  
  a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
- SHA512
  
  6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6
- SSDEEP
  
  12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB
Score

1^/10
behavioral24
- Target
  
  msvcp140_1.dll
- Size
  
  34KB
- MD5
  
  34a0ee0318a6be3f4a17826e5c17f8e3
- SHA1
  
  5b252d10138d6666892ca9da1e1d95af24de1097
- SHA256
  
  91cd05c16c61c39788c47434602a59c17f5b08dbb3eee04ce85f8d5b70e8e604
- SHA512
  
  ffd28202e3dd91b89b7d3161f33243e52e8a0b59d31d917c3cd0005c1e97cc818d1ebba9a4971e602164d31b42448c8fef8d0204618ef4134255876c7bd7fe5b
- SSDEEP
  
  384:zLjh/2cARG7SIXvQ7Q9Ra09dSvWcV5gWWBCSt+eiBHR9z12zfq5yEFHRN7m3hR9i:XlWRGu7QHa0PSxadQr9zjgElmb9ze
Score

1^/10
behavioral25
- Target
  
  qt/iconengines/qsvgicon.dll
- Size
  
  62KB
- MD5
  
  c6bc45e850e42e563d6a48b6a138759e
- SHA1
  
  b1757a7e7b8c01f005edf61c14e866331ab444b1
- SHA256
  
  d78ec8068d5ce1eb6aabca785599dc3a699bf11834705ab0edbbe425ea0aaaf1
- SHA512
  
  8827cc787ec82908cba6e4291b32f329547d809db5f453833b2e0fe6d70d82f064be6ec0ee22adfefd5d3d6b7d68eda0175726a5f3330801eeff985dfb3c55dc
- SSDEEP
  
  1536:QC6qOzRHheJZdkDX52p+3xhfbx1mY/zmu82Pa2nfgT6C:BMpf3xz1mY/zmu82fnfgTp
Score

1^/10
behavioral26
- Target
  
  qt/imageformats/qico.dll
- Size
  
  33KB
- MD5
  
  b2d95e59fdd4ee1b07e904f463278799
- SHA1
  
  452b7c33176368bfaceaed030657bd7da11e967a
- SHA256
  
  21547409bfb03b9863324cfce0151c7e32853ddd9627303d2e2256bb9b6c4945
- SHA512
  
  11aa34606639cf396e6e95328898d7e68dfbf45275b7482772ea2d4e3caf82c37412fb98edae9157adc7efd0ff5e91b7a4f2f0367131688da6436254c12ab65b
- SSDEEP
  
  768:28s1et8gRQgd7iZtdyUzQ2wV/zOCeX3kG:TH/QgNiZw2wV/zOC7G
Score

1^/10
behavioral27
- Target
  
  qt/imageformats/qsvg.dll
- Size
  
  27KB
- MD5
  
  df73c9e6ed525c8493cef96483f193a6
- SHA1
  
  a47aa648c943c4509638b43e2b7abd9765642db3
- SHA256
  
  560abe5c4b7f117994823f095daf3d67e0f5e5486570c5bbe2a8e3700b574aec
- SHA512
  
  0afdf012532c8e3a671b62e1ffedf40d1b626d969d3909fbbe50b19514b59f0e79edfa7e36060683cf27a3409119c51fa3cf27320fe342c9634ff987c5d1f374
- SSDEEP
  
  384:aqYwUXXP1rHPdxHmguyBRL4wh7+ou89y7to4XVg/ynW40NJMXVep6ADa:wvRHTVR4g7+ouC2o4C4dXVeEn
Score

1^/10
behavioral28
- Target
  
  qt/platforms/qwindows.dll
- Size
  
  799KB
- MD5
  
  ec1b0f7df878939ed427a3f6365f2052
- SHA1
  
  d7b7d3f7f0aa5c314d95fe97f45cd9e4d60618b7
- SHA256
  
  b5da606ab265c21a9e9b2ec3f98868bc54bc3089e36f0ef31a55cda1c09ba1bb
- SHA512
  
  cae152fc967a08713cae5bf51488f4665f7daacb8a97ea3b09140697b8b35c3dedbf9618aeb4fc2c02667c316b214944927064b581b50330398820feeccf5aa5
- SSDEEP
  
  12288:b2IrcMFSB94BAQTW0WVocjnmx5vO1dtttD54J:b2dMFXBAQTW1Voc7mxp+ty
Score

1^/10
behavioral29
- Target
  
  qt/styles/qmodernwindowsstyle.dll
- Size
  
  188KB
- MD5
  
  90512dd16e0531199cd0de7940a13400
- SHA1
  
  36afc9f00ce726dd7de50a619c0cc258d7f5afa0
- SHA256
  
  b92de57305156f925647189029c8178fa2c006303ea02d41103929c3efc636b7
- SHA512
  
  dc630d01fd62464ca29a7bcac6132797ae3eb02af087b44c79c581d1fd7b024afda583aa96495508f01cca2589a85ecbfe05f195006b07fb827754d1c2d0e40c
- SSDEEP
  
  3072:yXfG8MixvyfAKNSF1DE0utNtIXzGh0/HquCL1gRljMhmeuUxIQuCPLUAu:yvGzi1yIQSE0PGh0qsHMhmeuUxIQuCPv
Score

1^/10
behavioral30
- Target
  
  vcruntime140.dll
- Size
  
  117KB
- MD5
  
  caf9edded91c1f6c0022b278c16679aa
- SHA1
  
  4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
- SHA256
  
  02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
- SHA512
  
  32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
- SSDEEP
  
  1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
Score

1^/10
behavioral31
- Target
  
  vcruntime140_1.dll
- Size
  
  48KB
- MD5
  
  2bd576cbc5cb712935eb1b10e4d312f5
- SHA1
  
  dfa7a46012483837f47d8c870973a2dea786d9ff
- SHA256
  
  7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
- SHA512
  
  abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
- SSDEEP
  
  768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Event Triggered Execution: Component Object Model Hijacking

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32