General

  • Target

    SoundBridge_64-bit.exe

  • Size

    173.5MB

  • Sample

    240908-3smbsa1fjk

  • MD5

    edeb6e3bc1bb8ae249f0afae975503c4

  • SHA1

    f2e0bce9857bb3aecc2daa4b46df0318d32bb98d

  • SHA256

    eed0eb60d42f15d8704cb8792c5f431953ce48fb195296b3c064113620db0b19

  • SHA512

    b06f64c022eb9abe18f0b81dda35fbdea6142d7782b4bf19ee9a36992558c93bc5c3b620a98ec5d98c84b26887456978c2902836df9f5cd6bcda7c50e070bfd5

  • SSDEEP

    3145728:TQxCNTi9qmjpm7qcpWglalOW4DQ5/nr+jGSVnqbKEv7fbcz9/LYs:TsiU7pm7jWglEiDg/reGSVnqeW7gh/Lr

Malware Config

Targets

    • Target

      SoundBridge_64-bit.exe

    • Size

      173.5MB

    • MD5

      edeb6e3bc1bb8ae249f0afae975503c4

    • SHA1

      f2e0bce9857bb3aecc2daa4b46df0318d32bb98d

    • SHA256

      eed0eb60d42f15d8704cb8792c5f431953ce48fb195296b3c064113620db0b19

    • SHA512

      b06f64c022eb9abe18f0b81dda35fbdea6142d7782b4bf19ee9a36992558c93bc5c3b620a98ec5d98c84b26887456978c2902836df9f5cd6bcda7c50e070bfd5

    • SSDEEP

      3145728:TQxCNTi9qmjpm7qcpWglalOW4DQ5/nr+jGSVnqbKEv7fbcz9/LYs:TsiU7pm7jWglEiDg/reGSVnqeW7gh/Lr

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks