Overview
overview
7Static
static
3EqualizerA....4.exe
windows10-1703-x64
7$PLUGINSDI...ol.dll
windows10-1703-x64
3$PLUGINSDI...re.dll
windows10-1703-x64
3$PLUGINSDI...nu.dll
windows10-1703-x64
3$PLUGINSDI...em.dll
windows10-1703-x64
3$PLUGINSDI...ay.dll
windows10-1703-x64
3$PLUGINSDI...gs.dll
windows10-1703-x64
3Benchmark.exe
windows10-1703-x64
1Configurat...e).url
windows10-1703-x64
1Configurat...e).url
windows10-1703-x64
1DeviceSelector.exe
windows10-1703-x64
7Editor.exe
windows10-1703-x64
1EqualizerAPO.dll
windows10-1703-x64
7Qt6Core.dll
windows10-1703-x64
1Qt6Gui.dll
windows10-1703-x64
1Qt6Svg.dll
windows10-1703-x64
1Qt6Widgets.dll
windows10-1703-x64
1Uninstall.exe
windows10-1703-x64
7$PLUGINSDI...em.dll
windows10-1703-x64
3$PLUGINSDI...gs.dll
windows10-1703-x64
3VoicemeeterClient.exe
windows10-1703-x64
1libfftw3f-3.dll
windows10-1703-x64
1libsndfile-1.dll
windows10-1703-x64
1msvcp140.dll
windows10-1703-x64
1msvcp140_1.dll
windows10-1703-x64
1qt/iconeng...on.dll
windows10-1703-x64
1qt/imagefo...co.dll
windows10-1703-x64
1qt/imagefo...vg.dll
windows10-1703-x64
1qt/platfor...ws.dll
windows10-1703-x64
1qt/styles/...le.dll
windows10-1703-x64
1vcruntime140.dll
windows10-1703-x64
1vcruntime140_1.dll
windows10-1703-x64
1Analysis
-
max time kernel
140s -
max time network
142s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
07/09/2024, 16:44
Static task
static1
Behavioral task
behavioral1
Sample
EqualizerAPO64-1.4.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISpcre.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsArray.dll
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
Benchmark.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
Configuration reference (online).url
Resource
win10-20240611-en
Behavioral task
behavioral10
Sample
Configuration tutorial (online).url
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
DeviceSelector.exe
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Editor.exe
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
EqualizerAPO.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
Qt6Core.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
Qt6Gui.dll
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
Qt6Svg.dll
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
Qt6Widgets.dll
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
Uninstall.exe
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
VoicemeeterClient.exe
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
libfftw3f-3.dll
Resource
win10-20240611-en
Behavioral task
behavioral23
Sample
libsndfile-1.dll
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
msvcp140.dll
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
msvcp140_1.dll
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
qt/iconengines/qsvgicon.dll
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
qt/imageformats/qico.dll
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
qt/imageformats/qsvg.dll
Resource
win10-20240611-en
Behavioral task
behavioral29
Sample
qt/platforms/qwindows.dll
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
qt/styles/qmodernwindowsstyle.dll
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
vcruntime140.dll
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
vcruntime140_1.dll
Resource
win10-20240404-en
General
-
Target
Editor.exe
-
Size
1.5MB
-
MD5
84378944a27918656b9eda88ab39b429
-
SHA1
8c8a358e2bf4f42a059f25a4621a289c2e483e41
-
SHA256
62aa425fd9666d3e9fa83fad53300eb26a51c0325b853a5f813720f0b2da3e37
-
SHA512
1c17b9cb61d6423926257df151ab0972141d8348bf0e6af61589f62c5b0daa1c762ab68497fd702d5b5c9fb68230a79db7f4e4c6a9735193ecb8a5e26cc3eb3f
-
SSDEEP
24576:5Y7gmwhDS6HTprDucBKDf2h5/ZqCBke840yq3ZzlaUeI:+gFS6HF3BqehRfBke82qZz0I
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4812 Editor.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4812 Editor.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 4532 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4532 AUDIODG.EXE
Processes
-
C:\Users\Admin\AppData\Local\Temp\Editor.exe"C:\Users\Admin\AppData\Local\Temp\Editor.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
PID:4812
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x39c1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4532