General
-
Target
nanoMIDIPlayer.zip
-
Size
38.0MB
-
Sample
241017-xfgmwazbre
-
MD5
1b6e7bbee2ae08ad60d0e68633d0a3e9
-
SHA1
a0cf256265c07e1c2d1ff79ea1878b4d77898bce
-
SHA256
7a8081547f0865aa0c4689b56755457c379ff45d2016852dceb096c8f076fef1
-
SHA512
ee39befc1ed7a22d2fd6baffbe3b03fbc159bd08def7ebfbb2b438572764fffe14d94efa566337d4291eefc0274411d7ba7735fea81039eb643554779e0d63a4
-
SSDEEP
786432:o1O5sIPzdPamCM2Oi+BB+zpSg9BHf0Y3wbP170vgy:xsIL1qM2OvB+zca/0Y3wTtKgy
Behavioral task
behavioral1
Sample
nanoMIDIPlayer.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
nanoMIDIPlayer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
nanoMIDIPlayer.pyc
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
nanoMIDIPlayer.pyc
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
nanoMIDIPlayer.exe
-
Size
38.4MB
-
MD5
901f7eaa52db35bd550cc57110d04ff3
-
SHA1
3ca068f7f4a688ce6c55866d740d78e09a64b566
-
SHA256
cb5a0e9c3701233e1006dd14019fa242ece4a37e2dbdf92a9cab39064ec118bd
-
SHA512
30adc5491b6e15915113d4ea7738657b79a5cb39742126bbb911650851ebc566a5c8f2ef4b3f78ca4f8b233afc62d7eeca15ea6d9468590b589eb2c96869d963
-
SSDEEP
786432:UAjeQts+MgPQy0XQEWy+nUU0sc6yEUcDhQfW8p2El5FIi4e:CQtW8QXQJysOX6yEpVKWA2GnJ4e
Score7/10-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
-
-
Target
nanoMIDIPlayer.pyc
-
Size
260KB
-
MD5
79695e069463963418d4a76e15d8cb32
-
SHA1
75e1dc69d1bc043b316c275dc9377f4fc6aaeb54
-
SHA256
74a0909b0685ede9c77bd3184de199f2ff9dc19d82af6784d49099467745a23d
-
SHA512
4e2037ca5933148c32af3d9cca8b78800efe66c9286d40cbd44ff36fe643730895b2e07fd852e8e3ba9375878dd437b636e922eee341c2ce0e05eab86a5dc9b6
-
SSDEEP
6144:SFy4AQ1kubyH+14SvJMgvptZqOPk/uIKEYoV:S0TIyHMFvTDGK5i
Score3/10 -