Overview

overview

7

Static

static

7

SoundPad/Soundpad.exe

windows7-x64

SoundPad/Soundpad.exe

windows10-2004-x64

SoundPad/U...ol.dll

windows7-x64

1

SoundPad/U...ol.dll

windows10-2004-x64

1

SoundPad/U...te.dll

windows7-x64

1

SoundPad/U...te.dll

windows10-2004-x64

1

SoundPad/s...64.dll

windows7-x64

7

SoundPad/s...64.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    SoundPad.zip

  • Size

    8.6MB

  • Sample

    240913-px46ha1hnd

  • MD5

    1e8932dc0d1f5a51adc929f8e1cdcc87

  • SHA1

    48742c86266401017ab21ec9511c3fbe3c6ad17b

  • SHA256

    c29eaf1b28f201fdafee9d48cf6c74f12d6b250672f639787220094d377f2ca1

  • SHA512

    5f4cf967c274eef48f9f0711c2288f9637e973a731362bbe51ce48e13806a3e655d1adb3deab65c2ef74dd0124232911b0065c9f8dd866998686e6ee9db847ab

  • SSDEEP

    196608:CgaPqmN0khNJIBe4unFglk4xJPKIVKAyPDKOolSwJ6:CgaimN0khNqiP4xJSUKAyProlSo6

Score
7/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      SoundPad/Soundpad.exe

    • Size

      10.9MB

    • MD5

      0ae4f60d72e0d1c159505500b8a08ebb

    • SHA1

      bb352dafd3c3ebebb4414b799010fe5ebddbef44

    • SHA256

      ed3371229647ef876b45cb5940e48b461df58d4e68ad4932f5877eba90c8d379

    • SHA512

      88495911df544a04a4e09828ae10b57d3d945c41d6e28964c2d4d077afa43fec1c82a8ff6dcce57a3c7b9e5d02d1e47f800f557b022866f5f7be4a2db9b07536

    • SSDEEP

      196608:fDRlger67uOemwy1LR/XU3gmsRM0wWM+wC89ooEvu:UerSwAVE3XsRMiJpsf

    Score
    7/10
    persistenceprivilege_escalationupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      SoundPad/UniteFxControl.dll

    • Size

      1.1MB

    • MD5

      6ac19cffc0c58ce35ae704c381c4f702

    • SHA1

      c43900c5d56d62311a337b04c9489afc1c75c175

    • SHA256

      afe6075ea7dd1bdcbc47b38385216d11cdd5ebc3f82eeedfa6d766e9249d6252

    • SHA512

      61197228b9a1bb9810c68cc04928fd47e2bbe78d36f71c4a2ee498742fea8fd6c950cf43578fa20c6009f1ed6343bf8ca7bfb155512018aac88a4191fad4f939

    • SSDEEP

      24576:XBLW5gqPvbSfiCRcXw0qU6RmWByuAy5a/owH/1:ZqPvbv/Zwm4yi5aQwHN

    Score
    1/10
    behavioral3behavioral4

    • Target

      SoundPad/UniteFxUpdate.dll

    • Size

      442KB

    • MD5

      0ee743073ee6b68f8222be2661d95315

    • SHA1

      2e642772ec19edf73422fe25a8d45db1a006ff85

    • SHA256

      562b17370c7283e92a3353b76ab2aefd301c2e78782fa60ec9ee35676ad44f96

    • SHA512

      c3f2037bd37cef7978187f67f1d0633ee3067b4837e0ad9ae2a5c8efab8ec4ce6a14c1d88e200ffaa8677f74fd5995789297e6a7b5ac18d19dc9d53b4d9170ba

    • SSDEEP

      6144:12UHPCFzuxTmVCp41NpA9+2pVbW+i6kdIkl7haKGrgEOHWeohg6yKJIGFEph:12NzSC1Na42ekuMs2eoqO+Dh

    Score
    1/10
    behavioral5behavioral6

    • Target

      SoundPad/steam_api64.dll

    • Size

      3.4MB

    • MD5

      fde6c8bf079648ef175bfe54a48c33bd

    • SHA1

      86da9176866a1f03ca8ad7fd381c3f2cfc89c6e8

    • SHA256

      0a1e5c53cbad6b21de61e11f023c0d3f11f698164c743bd272741a7ba59ca5d7

    • SHA512

      d750550d1abe01f8b59623e58dd366d3baa6b0a03a48f0c95f381d30481ffd20549801979c3c9d19145521a0f3dd8dbd6397347ec4d3448ab1ef4ad8e781a1ab

    • SSDEEP

      49152:sqg1gpl5AKwKsRtf1Mx5k1aGLCnAWWMWWAwK3TQz4Cq9NVF14ZlEk8gtCbC5qAmk:GUnZ/slM7k/2DaWNcCaEk8oMexLCFJ

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks