e1f5f78f744ddd0c1d9392ac2f19b1a7077ee27043a09355a60de06980fc4963

Sharing

Copy URL

Twitter E-mail

General

Target

Crack SoundPad , By Burdix.rar
Size

7.2MB
Sample

241005-zgbt5asarq
MD5

73164c909d0347b14798395ef88ce211
SHA1

6f51c7e4c246982aa8651690678d66fcc2f70520
SHA256

e1f5f78f744ddd0c1d9392ac2f19b1a7077ee27043a09355a60de06980fc4963
SHA512

3c27722ab836291aeac916ae64e42ec74d7d6cb075b2a2d11d7b28cc723853b2b4765c13c2ef662c274636f329e1193945740237b54944e78f33b0eda6642cb9
SSDEEP

196608:ae8fPDao4PcoJDxWeHnCvofD8befhcfEx7CIt3AbY:ae83b4nlCvIeefKsxm83AbY

Score

7^/10

Malware Config

Targets

- Target
  
  Crack SoundPad , By Burdix.rar
- Size
  
  7.2MB
- MD5
  
  73164c909d0347b14798395ef88ce211
- SHA1
  
  6f51c7e4c246982aa8651690678d66fcc2f70520
- SHA256
  
  e1f5f78f744ddd0c1d9392ac2f19b1a7077ee27043a09355a60de06980fc4963
- SHA512
  
  3c27722ab836291aeac916ae64e42ec74d7d6cb075b2a2d11d7b28cc723853b2b4765c13c2ef662c274636f329e1193945740237b54944e78f33b0eda6642cb9
- SSDEEP
  
  196608:ae8fPDao4PcoJDxWeHnCvofD8befhcfEx7CIt3AbY:ae83b4nlCvIeefKsxm83AbY
Score

3^/10
behavioral1 behavioral2
- Target
  
  Crack SoundPad , By Burdix/Profile/CRACKED BY Burdix/SteamUserID.cfg
- Size
  
  61B
- MD5
  
  f52a171e8ceaf98f510e76d382768182
- SHA1
  
  c2e164932223c56143f9b43b7c46795699d3c0a1
- SHA256
  
  f36a0aefa2507a43adfcad20a262a7895a17b19565f02430bcc79f48c1b9ea0e
- SHA512
  
  03d84f4067da98a06b36eb71e224a09ae890a9c36a580a567c56150135bc457348cdd4acedc0bf9b1a85c18f577fe56c0471b2a7856bded810d9766640b6baf2
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  Crack SoundPad , By Burdix/Profile/CRACKED BY Ray_Black/SteamUserID.cfg
- Size
  
  61B
- MD5
  
  eccef3489e9d42b2022c238e3806fb40
- SHA1
  
  0818a1ca953ec257cabda784fe6e4202473150b6
- SHA256
  
  bce2ac78574807fc55cdba6b339be188e9995b28568fabe2b86d4dbcb36e316a
- SHA512
  
  5e8ea3eabac905304e53fc1bbbf979ef9282e6ae21f550bec9e408f351713c57abd6ef0c6e4f2a565b190f1b1b6b63fa11d5bf5aaddfc03c02349591351584d5
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  Crack SoundPad , By Burdix/Soundpad - Raccourci.lnk
- Size
  
  1KB
- MD5
  
  428f4ea8cf531b3c3540c90fcc7a27c9
- SHA1
  
  fd1c2217d0a6d270d3c3ac460528c3199e7c12dc
- SHA256
  
  f89ff09ecad2ef5a98b85ef5b47ac1e3faba33152a02fee4880972858e1e0e1e
- SHA512
  
  439886fc561259e6bd3f502c4dc65b99f6aea8604c9e2102110d2f425d6f7ec66a0bd1f51198df7d66a5c3d73d348c831848cf293c1f72733bb18e17043cbdae
Score

7^/10

persistence privilege_escalation upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8
- Target
  
  Crack SoundPad , By Burdix/Soundpad.exe
- Size
  
  10.9MB
- MD5
  
  0ae4f60d72e0d1c159505500b8a08ebb
- SHA1
  
  bb352dafd3c3ebebb4414b799010fe5ebddbef44
- SHA256
  
  ed3371229647ef876b45cb5940e48b461df58d4e68ad4932f5877eba90c8d379
- SHA512
  
  88495911df544a04a4e09828ae10b57d3d945c41d6e28964c2d4d077afa43fec1c82a8ff6dcce57a3c7b9e5d02d1e47f800f557b022866f5f7be4a2db9b07536
- SSDEEP
  
  196608:fDRlger67uOemwy1LR/XU3gmsRM0wWM+wC89ooEvu:UerSwAVE3XsRMiJpsf
Score

7^/10

persistence privilege_escalation upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral10 behavioral9
- Target
  
  Crack SoundPad , By Burdix/SteamConfig.ini
- Size
  
  135B
- MD5
  
  8aaae6e65f734e7f90b2d11966c76a16
- SHA1
  
  f910a899891026e6d22305d176a73d2588b99715
- SHA256
  
  c2702d244e84cb0abc4f964062b9ecf51b1697712ad4c03b37d345f93d045bba
- SHA512
  
  96f0c7cd0b8e2ce8365f907a03c8229ed733fdcd07a826d82aa242c870f5994d04b1987263ba2a8e0a314ab281d5cf9905cc562177e09b499a99fe3e8d3cfb5e
Score

1^/10
behavioral11 behavioral12
- Target
  
  Crack SoundPad , By Burdix/UniteFxControl.dll
- Size
  
  1.1MB
- MD5
  
  6ac19cffc0c58ce35ae704c381c4f702
- SHA1
  
  c43900c5d56d62311a337b04c9489afc1c75c175
- SHA256
  
  afe6075ea7dd1bdcbc47b38385216d11cdd5ebc3f82eeedfa6d766e9249d6252
- SHA512
  
  61197228b9a1bb9810c68cc04928fd47e2bbe78d36f71c4a2ee498742fea8fd6c950cf43578fa20c6009f1ed6343bf8ca7bfb155512018aac88a4191fad4f939
- SSDEEP
  
  24576:XBLW5gqPvbSfiCRcXw0qU6RmWByuAy5a/owH/1:ZqPvbv/Zwm4yi5aQwHN
Score

1^/10
behavioral13 behavioral14
- Target
  
  Crack SoundPad , By Burdix/UniteFxUpdate.dll
- Size
  
  442KB
- MD5
  
  0ee743073ee6b68f8222be2661d95315
- SHA1
  
  2e642772ec19edf73422fe25a8d45db1a006ff85
- SHA256
  
  562b17370c7283e92a3353b76ab2aefd301c2e78782fa60ec9ee35676ad44f96
- SHA512
  
  c3f2037bd37cef7978187f67f1d0633ee3067b4837e0ad9ae2a5c8efab8ec4ce6a14c1d88e200ffaa8677f74fd5995789297e6a7b5ac18d19dc9d53b4d9170ba
- SSDEEP
  
  6144:12UHPCFzuxTmVCp41NpA9+2pVbW+i6kdIkl7haKGrgEOHWeohg6yKJIGFEph:12NzSC1Na42ekuMs2eoqO+Dh
Score

1^/10
behavioral15 behavioral16
- Target
  
  Crack SoundPad , By Burdix/installscript.vdf
- Size
  
  631B
- MD5
  
  1a792aff29d6f07d1c3381634ba6baff
- SHA1
  
  f2c7bb49ccaf63ffcd38d06dd2d51095b08d4344
- SHA256
  
  270d2a3eef463b768ca4368e62444a7ccaff4e98c71f2ca05b721bfef2e03e05
- SHA512
  
  3971dee038f1cd1aacf9151196a53e2bfbf4bc9a665f60ae79309b5544d81a733e3f7b9db422e17c5a95ba2930248be408e6fbf877f8eb12235277f46af5a4f1
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  Crack SoundPad , By Burdix/steam_api64.dll
- Size
  
  3.4MB
- MD5
  
  fde6c8bf079648ef175bfe54a48c33bd
- SHA1
  
  86da9176866a1f03ca8ad7fd381c3f2cfc89c6e8
- SHA256
  
  0a1e5c53cbad6b21de61e11f023c0d3f11f698164c743bd272741a7ba59ca5d7
- SHA512
  
  d750550d1abe01f8b59623e58dd366d3baa6b0a03a48f0c95f381d30481ffd20549801979c3c9d19145521a0f3dd8dbd6397347ec4d3448ab1ef4ad8e781a1ab
- SSDEEP
  
  49152:sqg1gpl5AKwKsRtf1Mx5k1aGLCnAWWMWWAwK3TQz4Cq9NVF14ZlEk8gtCbC5qAmk:GUnZ/slM7k/2DaWNcCaEk8oMexLCFJ
Score

5^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral19 behavioral20

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Event Triggered Execution: Component Object Model Hijacking

Loads dropped DLL

Drops file in System32 directory

UPX packed file

Checks computer location settings

Event Triggered Execution: Component Object Model Hijacking

Loads dropped DLL

Drops file in System32 directory

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20