General

  • Target

    SoundPad.zip

  • Size

    8.6MB

  • Sample

    241109-m3lj8starh

  • MD5

    1e8932dc0d1f5a51adc929f8e1cdcc87

  • SHA1

    48742c86266401017ab21ec9511c3fbe3c6ad17b

  • SHA256

    c29eaf1b28f201fdafee9d48cf6c74f12d6b250672f639787220094d377f2ca1

  • SHA512

    5f4cf967c274eef48f9f0711c2288f9637e973a731362bbe51ce48e13806a3e655d1adb3deab65c2ef74dd0124232911b0065c9f8dd866998686e6ee9db847ab

  • SSDEEP

    196608:CgaPqmN0khNJIBe4unFglk4xJPKIVKAyPDKOolSwJ6:CgaimN0khNqiP4xJSUKAyProlSo6

Malware Config

Targets

    • Target

      SoundPad.zip

    • Size

      8.6MB

    • MD5

      1e8932dc0d1f5a51adc929f8e1cdcc87

    • SHA1

      48742c86266401017ab21ec9511c3fbe3c6ad17b

    • SHA256

      c29eaf1b28f201fdafee9d48cf6c74f12d6b250672f639787220094d377f2ca1

    • SHA512

      5f4cf967c274eef48f9f0711c2288f9637e973a731362bbe51ce48e13806a3e655d1adb3deab65c2ef74dd0124232911b0065c9f8dd866998686e6ee9db847ab

    • SSDEEP

      196608:CgaPqmN0khNJIBe4unFglk4xJPKIVKAyPDKOolSwJ6:CgaimN0khNqiP4xJSUKAyProlSo6

    Score
    1/10
    • Target

      SoundPad/Profile/marhau/SteamUserID.cfg

    • Size

      61B

    • MD5

      153727cf7c0c2dcba555e2cafb579e98

    • SHA1

      4ff945c2feff28ac936994aeed626caf17a37f45

    • SHA256

      2c2f3f8d579f9d0703fe251d162456572c9d4c07408493a512b0f069bb892a98

    • SHA512

      412af8e396b5eb13f33bb7d3c23591daf09e28abf131547299ba5c30c6935ca6620771b44fbea12050d1264cb91591f00a1bdedb4a51a9182ff81123f9ea8974

    Score
    3/10
    • Target

      SoundPad/Soundpad.exe

    • Size

      10.9MB

    • MD5

      0ae4f60d72e0d1c159505500b8a08ebb

    • SHA1

      bb352dafd3c3ebebb4414b799010fe5ebddbef44

    • SHA256

      ed3371229647ef876b45cb5940e48b461df58d4e68ad4932f5877eba90c8d379

    • SHA512

      88495911df544a04a4e09828ae10b57d3d945c41d6e28964c2d4d077afa43fec1c82a8ff6dcce57a3c7b9e5d02d1e47f800f557b022866f5f7be4a2db9b07536

    • SSDEEP

      196608:fDRlger67uOemwy1LR/XU3gmsRM0wWM+wC89ooEvu:UerSwAVE3XsRMiJpsf

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      SoundPad/SteamConfig.ini

    • Size

      121B

    • MD5

      78b9f7f1aac6a6c27ca5dc8c28f8ada9

    • SHA1

      809a93d50d91301141eec3f911d2e15d9ee2cf99

    • SHA256

      49a44a551ff28707f5f54c886d8d359a9d01ad758e9972f587ed9b93e75f8903

    • SHA512

      ba07d1362c276795d7c9b76434997997947e42de20ba6d33a3b6d756b1bd306e3fbe0a719c3e901fd3caa8195c24881661f0737f27035c1a196910cc3e007f76

    Score
    1/10
    • Target

      SoundPad/UniteFxControl.dll

    • Size

      1.1MB

    • MD5

      6ac19cffc0c58ce35ae704c381c4f702

    • SHA1

      c43900c5d56d62311a337b04c9489afc1c75c175

    • SHA256

      afe6075ea7dd1bdcbc47b38385216d11cdd5ebc3f82eeedfa6d766e9249d6252

    • SHA512

      61197228b9a1bb9810c68cc04928fd47e2bbe78d36f71c4a2ee498742fea8fd6c950cf43578fa20c6009f1ed6343bf8ca7bfb155512018aac88a4191fad4f939

    • SSDEEP

      24576:XBLW5gqPvbSfiCRcXw0qU6RmWByuAy5a/owH/1:ZqPvbv/Zwm4yi5aQwHN

    Score
    1/10
    • Target

      SoundPad/UniteFxUpdate.dll

    • Size

      442KB

    • MD5

      0ee743073ee6b68f8222be2661d95315

    • SHA1

      2e642772ec19edf73422fe25a8d45db1a006ff85

    • SHA256

      562b17370c7283e92a3353b76ab2aefd301c2e78782fa60ec9ee35676ad44f96

    • SHA512

      c3f2037bd37cef7978187f67f1d0633ee3067b4837e0ad9ae2a5c8efab8ec4ce6a14c1d88e200ffaa8677f74fd5995789297e6a7b5ac18d19dc9d53b4d9170ba

    • SSDEEP

      6144:12UHPCFzuxTmVCp41NpA9+2pVbW+i6kdIkl7haKGrgEOHWeohg6yKJIGFEph:12NzSC1Na42ekuMs2eoqO+Dh

    Score
    1/10
    • Target

      SoundPad/installscript.vdf

    • Size

      631B

    • MD5

      1a792aff29d6f07d1c3381634ba6baff

    • SHA1

      f2c7bb49ccaf63ffcd38d06dd2d51095b08d4344

    • SHA256

      270d2a3eef463b768ca4368e62444a7ccaff4e98c71f2ca05b721bfef2e03e05

    • SHA512

      3971dee038f1cd1aacf9151196a53e2bfbf4bc9a665f60ae79309b5544d81a733e3f7b9db422e17c5a95ba2930248be408e6fbf877f8eb12235277f46af5a4f1

    Score
    3/10
    • Target

      SoundPad/languages/cs/translation.mo

    • Size

      48KB

    • MD5

      5e8a5fee87f5795b0c3c8d02a6a83eff

    • SHA1

      6f86c686a7f29260d7d9b03180488fe668765c47

    • SHA256

      ca876dcfb11522ee63977c07e176cd3fdddc8bde374fde53a6a7367680638214

    • SHA512

      13fbd8912a361b59bd23b9ecb2ad4a80e0f6e32fc91fcf0befda5d31b182b1f492cd0ca6c095550383e2fb75258d6fc6230ac5f70e34d18e0a4c65e90262a5ec

    • SSDEEP

      768:4ZPGJavWhcadx7PW2DH3PdVvW/h7jUUhllX+XVSlngTvDpzWAAePn:4AJaehc6xDFDH3PW/hse+XVSlWpzWA9

    Score
    3/10
    • Target

      SoundPad/languages/da/translation.mo

    • Size

      46KB

    • MD5

      aee77e5514dadabfc575808e3e3b4cd6

    • SHA1

      a1518effa9c956e4048918f3c53a4b9b5ef11b26

    • SHA256

      c954cca2b32bab1cb5a8a8a578329c72c49368598126b90ea480340b7aacd524

    • SHA512

      0ea132359196b292d4de350172f5675baf1f1eaaee42e0075ff3d74362abff05214ed76f62da54d55817bca3c115699c6ba6f204b6a324809113760f0247e2e7

    • SSDEEP

      768:4ZPGJn6rW6U7PW2DH3PdVvW/h7jocsAP+AVvmocV/ZVrMrtbwQFc:4AJn2YDFDH3PW/hgdAP+Yv9cxmJXc

    Score
    3/10
    • Target

      SoundPad/languages/de/translation.mo

    • Size

      49KB

    • MD5

      6ff1d323c51c2ed88f05ee7ff468900f

    • SHA1

      49c7d5042fc7644c094c3be52d7d0666c268accb

    • SHA256

      5220672f99b439b1db77479ab170a5a0f2b65b4b14416b72447ded6f1ebcd40e

    • SHA512

      32c065115ea0ebca406fb0d5831c39c79acb7c8e45941df8f0074a3ebd4077a61e5b8b6661a3a001114269b085877f3cdb39a456f0db42c5d492adcb06aca97b

    • SSDEEP

      768:4ZPGJO77PW2DH3PdVvW/h7jCJrAWGNVu+6hI3uY11zxdHFXeZwxzU8d:4AJgDFDH3PW/hqJrbGNVKuLFywnd

    Score
    3/10
    • Target

      SoundPad/languages/es_ES/translation.mo

    • Size

      50KB

    • MD5

      f0be4e99dca44e2aa70c3b32dccfa82a

    • SHA1

      61c49931b877f4af8ede44dd9e29d2ff4fb7d420

    • SHA256

      d35905c669534e8770849dd51ba74071836f43e1047a7df7ef99c373ca185c73

    • SHA512

      eb32e5c6360822eed54c0274bd365db19cc69c56aee083ba17d07777b302c69554c50e16cf12e155fb53d35b2e34e4efdf27d1c960f1ab6f558e0628b32b300a

    • SSDEEP

      768:4ZPGJC2pFxC07PW2DH3PdVvW/h7jdsSI6Nrc45OFHztG:4AJ5pFxFDFDH3PW/huFhG

    Score
    3/10
    • Target

      SoundPad/languages/fi/translation.mo

    • Size

      48KB

    • MD5

      05561f37a16002c2ca8f65faef7d1749

    • SHA1

      260d64b7e458039316001eb15b09d844e909135c

    • SHA256

      8dcf58474fc5ab1514461e1f9b8e336ef0c13b49f26f7bceb14d477da7a85b6a

    • SHA512

      7a3c4c8c11512383d9db9173caa4db6203bc21bc931c1bf3f5460296589cc41e71b30b20018e201c95ee7aeae34f0c4fb9016b8049d2142c927f091e30d2fa91

    • SSDEEP

      768:4ZPGJyWk2M6bi7PW2DH3PdVvW/h7jfYPko2FAvikYPMt7i7:4AJyP2M62DFDH3PW/h3yj2qikYPMte7

    Score
    3/10
    • Target

      SoundPad/languages/fr/translation.mo

    • Size

      51KB

    • MD5

      9fd6ad7c6bc2b8fa3b155a97f0326fbe

    • SHA1

      862379e994419c9492b9f502cdbb3741f95fa54b

    • SHA256

      bf44674158ed2dec81843c7bfd0dee6595bb36946bec92e09ecfb9943fd0e5a4

    • SHA512

      c030d773818b6c0d41c09ad1ef2d965656708f8c53a1b8e6012d70a8059e25a5652fcd65d18a6be3d7b6ec1c99403068a6497178a40ecd3c075ee403365ed919

    • SSDEEP

      768:4ZPGJS7PW2DH3PdVvW/h7jdfXRHVEzKDx0EyhtIRJl:4AJSDFDH3PW/hFwe7/

    Score
    3/10
    • Target

      SoundPad/languages/it/translation.mo

    • Size

      49KB

    • MD5

      896a7d5d126e4473cedf237b76dbfae6

    • SHA1

      9729f9fbbc1810b31ee86094d68edba2b4e1766b

    • SHA256

      9e5fb77abbc5b636cca97637a07c9d40e03af74981afa2835900e3b65beeaf38

    • SHA512

      052e16ffb72c3e9576fee2a2c4faf47fbfa443ceec7cae65f12312b56d998b4ea89ccd5bbd3e7993822812a3798892c31b429b4b4b6409dbc96e87719bd4870b

    • SSDEEP

      768:4ZPGJfdV5iOoUh7PW2DH3PdVvW/h7jngOgZAPdUlLfci:4AJfdV5i/ODFDH3PW/hfgOgZIi1fci

    Score
    3/10
    • Target

      SoundPad/languages/ja/translation.mo

    • Size

      54KB

    • MD5

      d16294852611eb3fbe3d7407878148b0

    • SHA1

      990c4500a0c11e82639d15c0bc66f4a0686b0540

    • SHA256

      7a6b8050163aace177a004a2cf14eaa825229e7e3366318517f2ed434563cd87

    • SHA512

      010a9a614c413ce5ba2ba1244e5c2c2420ed7c76be4fc20b4f01c4784fdeb7c39df7e9de98334a5327133557116c6d6cb6d44e346fb4e7f26288b1842382d257

    • SSDEEP

      768:4ZPGJGCVca7PW2DH3PdVvW/h7jhQhq5Kzil6jwjohno:4AJGCiaDFDH3PW/h5Qq5Kzil6Aohno

    Score
    3/10
    • Target

      SoundPad/languages/ko/translation.mo

    • Size

      50KB

    • MD5

      9f0282e5e1e42e196a48261f57247637

    • SHA1

      dc80d18ec9a1244120a1feb1a3e70a058468642d

    • SHA256

      dd6d1dacef96225413043914fb7ae5beabafc72969b6312e47dce033896c32fc

    • SHA512

      e6d5535e182c5ea005e73d0c0277fc4732164b6b65c2faf8231fb269a0b524e63b8db8629aa1083fb23eab09f881cad1aa260db95b5ba26a07eb3ddf43459916

    • SSDEEP

      768:4ZPGJxjqIDMI7PW2DH3PdVvW/h7jjdeq5DPFBhwifn6K5y0/HxdJO:4AJxWWBDFDH3PW/hJJNwiSK5lU

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
5/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

discovery
Score
3/10

behavioral4

Score
3/10

behavioral5

persistenceprivilege_escalationupx
Score
7/10

behavioral6

persistenceprivilege_escalationupx
Score
7/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

discovery
Score
3/10

behavioral14

Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

Score
3/10