Overview
overview
7Static
static
5Harmony.zip
windows10-2004-x64
1Harmony.zip
windows11-21h2-x64
1Harmony/HA...06.exe
windows10-2004-x64
7Harmony/HA...06.exe
windows11-21h2-x64
7Harmony/pa...on.exe
windows10-2004-x64
5Harmony/pa...on.exe
windows11-21h2-x64
5Harmony/pa...Db.exe
windows10-2004-x64
5Harmony/pa...Db.exe
windows11-21h2-x64
5Harmony/pa...er.exe
windows10-2004-x64
5Harmony/pa...er.exe
windows11-21h2-x64
5Harmony/pa...md.exe
windows10-2004-x64
5Harmony/pa...md.exe
windows11-21h2-x64
5Harmony/pa...um.exe
windows10-2004-x64
5Harmony/pa...um.exe
windows11-21h2-x64
5Harmony/pa...rd.exe
windows10-2004-x64
5Harmony/pa...rd.exe
windows11-21h2-x64
5Harmony/pa...ec.exe
windows10-2004-x64
5Harmony/pa...ec.exe
windows11-21h2-x64
5Harmony/pa...ay.exe
windows10-2004-x64
5Harmony/pa...ay.exe
windows11-21h2-x64
5Harmony/pa...ue.exe
windows10-2004-x64
5Harmony/pa...ue.exe
windows11-21h2-x64
5Harmony/pa...an.exe
windows10-2004-x64
5Harmony/pa...an.exe
windows11-21h2-x64
5Harmony/pa...nv.exe
windows10-2004-x64
5Harmony/pa...nv.exe
windows11-21h2-x64
5Harmony/pa...on.exe
windows10-2004-x64
5Harmony/pa...on.exe
windows11-21h2-x64
5Harmony/pa...ef.exe
windows10-2004-x64
5Harmony/pa...ef.exe
windows11-21h2-x64
5Harmony/pa...er.exe
windows10-2004-x64
5Harmony/pa...er.exe
windows11-21h2-x64
5General
- Target Harmony.zip
- Size 629.7MB
- Sample260314-qqz4msg12z
- SHA256 fc4293bd8ee8a34a39be70338348773d55486c9c47c594e08fc09e2b95ff6845
- MD5 595f5231054aab395613cdc9a6014ae1
- SHA1 aa9a4512618e695d1208fcaf03d698d7b7107cc6
- SHA512 cfa62a046e727667f23fb219a9435100669588a5d6534b5a675ff27e9510a82164f24e17a3a089c29ebe0af455e5579928176efe521ae4941b897161c5c09285
- SSDEEP 12582912:B6W/6JFX/Y2oiPw/xEoPb12hQzYB9QkMzuF+1nP:BVkX/ZZcKibo2zYBeNKF+1nP
- TLSH T1E36933E8CDA2654DAFF9976CF311D1DAD8930233105E0E59D60E48CDE0E32A6EE4F529
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Harmony.zip
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Harmony.zip
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Harmony/HAR25-PRM-win-24106.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Harmony/HAR25-PRM-win-24106.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Harmony/patch/ClientActivation.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Harmony/patch/ClientActivation.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Harmony/patch/ConsolidateDb.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Harmony/patch/ConsolidateDb.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Harmony/patch/Controlcenter.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Harmony/patch/Controlcenter.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Harmony/patch/FetchCmd.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Harmony/patch/FetchCmd.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Harmony/patch/HarmonyPremium.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Harmony/patch/HarmonyPremium.exe
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Harmony/patch/LicenseWizard.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
Harmony/patch/LicenseWizard.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Harmony/patch/Pix2vec.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
Harmony/patch/Pix2vec.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Harmony/patch/Play.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Harmony/patch/Play.exe
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Harmony/patch/Queue.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
Harmony/patch/Queue.exe
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
Harmony/patch/Scan.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Harmony/patch/Scan.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Harmony/patch/Sdenv.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Harmony/patch/Sdenv.exe
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Harmony/patch/ServerActivation.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Harmony/patch/ServerActivation.exe
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Harmony/patch/Setdef.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Harmony/patch/Setdef.exe
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
Harmony/patch/Setper.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
Harmony/patch/Setper.exe
Resource
win11-20260130-en
Malware Config
Targets
-
- Target Harmony.zip
- Size 629.7MB
- SHA256 fc4293bd8ee8a34a39be70338348773d55486c9c47c594e08fc09e2b95ff6845
- MD5 595f5231054aab395613cdc9a6014ae1
- SHA1 aa9a4512618e695d1208fcaf03d698d7b7107cc6
- SHA512 cfa62a046e727667f23fb219a9435100669588a5d6534b5a675ff27e9510a82164f24e17a3a089c29ebe0af455e5579928176efe521ae4941b897161c5c09285
- SSDEEP 12582912:B6W/6JFX/Y2oiPw/xEoPb12hQzYB9QkMzuF+1nP:BVkX/ZZcKibo2zYBeNKF+1nP
- TLSH T1E36933E8CDA2654DAFF9976CF311D1DAD8930233105E0E59D60E48CDE0E32A6EE4F529
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Harmony/HAR25-PRM-win-24106.exe
- Size 588.0MB
- SHA256 36edf9628f7a0a6962ba0a713516fff8d36387d4529e2d98ede940856c90b91f
- MD5 00638068b3f782cf86d23a707f8563bc
- SHA1 39b7f70ffe35cc6b8a5a76c47bfc6ebddd6563f4
- SHA512 2e0dfba7785c5fc98d46188d7c45529cc76e2e132e95c3e4fc8887b56a3f6b024e480332fecfeeea0e1411c6950cb1b2cb92fdd46c1db51744fe52ea8725d083
- SSDEEP 12582912:uy/sXW5LDfawknPOz541Kxh1Xbb/yLaw0c8cvNSyQaJQXZ5j:uMo4baH25R8Lawh8cvNn3cF
- TLSH T1B05933236240192CE837047A5E5FBDA2D25818635220655BF9F4FFBB0CF869A7C4BE71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Loads dropped DLL
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Harmony/patch/ClientActivation.exe
- Size 607KB
- SHA256 b1b72edb59e0c9bca51b6167c4a27e1bb05b5a0f6f3ebf248b799b1aaace2c1d
- MD5 1c661c1aba490241a230ced04d76b1a4
- SHA1 ddf803509a52e756787c34c61b0c0f5f5c086d6f
- SHA512 f545ae66b081a4794795ef77ddef2053a42856e05f1f1fd56a21ff26899ef2cede2cbdd0583d3365b354988dc2f1436941fa944c7edc0c3b1011184e79e6fdd6
- SSDEEP 12288:ee+V0aWPzzOSXH9H858zOZjI9Pj2HSwjFJR+vBU5ajJUVt94UkN:ee73dHLfj2HFFJwK5ajJUVXk
- TLSH T1D9D4239BBD1DCCB0DA730A70F0E5960DE172CC9A458D1B672BD83AC578A0DD9261F24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/ConsolidateDb.exe
- Size 569KB
- SHA256 60292a97ceba413123953d7d9b7da77a24d9ba5290821b9e603342bde294c2b6
- MD5 30e100f01b017f65ad90f9884b587138
- SHA1 52316363643c38b5ba283b9d51a882e0b1d33784
- SHA512 be8439f54e29172871df8af1bbd5dee8eb0fd43607f952d1de472f25f5556f932ddfda4399c8698c753d6272e6697749391a08beef1a4a9def314dfb8528f047
- SSDEEP 12288:aoeg1CqqeN2HH07tQdOvCOZGFLgGzgNTKwMEqs:jrq9bLRcNTKp
- TLSH T1E5C4230372E495C1EA011A79F6C0C6A3E872E70256CA4DCFA60EF962F2FD8F1D91D119
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/Controlcenter.exe
- Size 3.6MB
- SHA256 61ffabd4cea80d7266d4ec7928666b0e7b35a0f724085f351ba9d28c9932a094
- MD5 b38bd168124bd5552d7a7e0040a04b70
- SHA1 01f13fb23196b5dae15be9e487908177894ceda6
- SHA512 788082f0996f73fa404dead303966b90dc2f9170d1f3d3775a3a8bb84cddfb9d72a1a56e64c042e36503ea59aab3edcb7b162a76eb0f9a75a8cd5394c22c3c46
- SSDEEP 49152:cEWM+QOcaFldA6Qsre4A2KcAA9Zr7OVwA54Zz69+apfwOahuoITDff4McwGb8aN:cqOca/NQsNKGrzzewOaADNjF
- TLSH T12206330AE16882D8DBB356BCC25BC9C1EF670C64DE68F36249D3BD49AD75CB70836205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/FetchCmd.exe
- Size 231KB
- SHA256 220fc5069610b01abdc63adf45159901858e76255122a180359f0b5f3efcce57
- MD5 1a9407fa37031ccf147884583cdebf0c
- SHA1 588e148ea198f8828eedcd25b201f07d8dc08ce7
- SHA512 71dbb4b838878cccdd633f0b1324ac6c5626ba0605ac37964385282538432379d8cde24b446483dbb1b4016f7d4a07d1cc0d5dc0c67f9008b5b6b2484f8d6cdf
- SSDEEP 6144:fibDlyV4XKUJA96M1cPEQFO4Sq235E2E6cHvY:fAS4XKUXXEQQmbQ
- TLSH T118341223485C1CE2DA32DA72F4F946D36E71C487428CD6C7692FA95EC838E96C39D16C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/HarmonyPremium.exe
- Size 9.3MB
- SHA256 881696ddc264541acb42ff8bb98fd536e0f6b6225a63854380beacc0cf7c7ab4
- MD5 af49e8ba17d56ae16fc059cea9f39b26
- SHA1 7426f013f6016594b9c82f2f9b1a6ed09580c100
- SHA512 6c059812d2ab68e6ec3d5eb812092a05179fbd49b2cd3255f5444ea004c0a4858097eeab687840f21226d3ece759b10e1919e3a1aafb113e869d1afe50af6a1a
- SSDEEP 196608:0H+SbytjwYrQJdd5qLSJxysWRBMSGm5adhCN7nWX502V:FSbirOdbHJxysgBLj5adUu02V
- TLSH T184A6230EC1348294C1DB12F04519CEFE95AFFD51682CA7CE968A7F45A0BEEB51927233
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/LicenseWizard.exe
- Size 1.2MB
- SHA256 acd1f7050f8b08d2b1cbd008c3e6506fd9a66e263e4498946c13d9504f3e1b86
- MD5 1143308c6f67f26fdfe25c316011c803
- SHA1 1c9611f590ed955359f49ad53d770f2f5f2582d2
- SHA512 a6e97c7a9e7d5a5ee82f32d752fbc5a6f4d672525a1f5f402834fe7f25a10fab357fae076f0b83c729972b8d8832c2f23bb9973719e46e1ced562f8748bd43a2
- SSDEEP 24576:trs3gVlR54I/yzvNVeRiieGeUj0uAGQAH2fmBbKN+Fsgl2qgaxg6q+oPc8vRA:trKgvR6e4NE+Uj0uAGQI6mB+cFsgl2qH
- TLSH T183559EE5AA1BE00CDD0DE63D07A66A1C31272D70AC332686DAD53568CF76F860ED64C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/Pix2vec.exe
- Size 758KB
- SHA256 69af08d088947ca041265a23794fb34322bf7799acc5f7e076f652e465cf6cbb
- MD5 190a3a6d65a34adbd8017feb01497b8e
- SHA1 6411668e33937e1ab03589446c7746fbd6f9e881
- SHA512 a152ad68b7cc1431e2e7ab068781ffe08d475bec70f2bc9c6f16bf7f8211011c976bf77f2ba0b1200e847a71065e96c8ceea36d5707dc1991c7aa75d8a004edb
- SSDEEP 12288:GQx/XQ9x7GY53HhDZxvSji5lj8jEAttS/ig0yl4oS19qPDOOPxiXc36:Xx/yVXhvSfttS/iWJW+Oq
- TLSH T128F423DF602C8FE8DF4357B0A6715E864F726448074869C2AA5DED73C9A7E30293624F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/Play.exe
- Size 3.3MB
- SHA256 3d19a66f9c920b337a0fe7bc684ed108af6b371ebe21839b14a964f946d2092e
- MD5 31f3a8c1fab336e32e40140ed28953e1
- SHA1 9d358089bb381a36149d41672c7dadfd66555e56
- SHA512 c6c31317b8bcf7bd6a2a1df3aff8a2c44c643f9b99b4b9e0fb54b39c09f9ca24de11dfd0e2b17e2cfc10808130e7284eb0b80c3d40cca48026d36a96ee5e6d56
- SSDEEP 49152:+YhFbza+XtsUsqcUoFIWq6I/BJDXlWARVP9J5q8cqR2Kf99ihixiKw3UzTQZ0QVJ:7bW7PPIWqFZN19Lbq8sXJ4Qx3MGy1
- TLSH T1ABF53359515CB1E8D36235B454C28E0BAE527CF813A73A86939EBDF5BC7BCF20936102
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/Queue.exe
- Size 581KB
- SHA256 4782459374404acf6b9c10e11d4fe3bdb229073c709abfcd9e80d26683ae3c57
- MD5 00c977ada217ad0541ed698ff2e152e1
- SHA1 c0cdc2f08db7f3a20f19ebcceec13188047d698f
- SHA512 612dc05c10353ff546e51524183834b420bd512cdffa3e2417113ce27ad4edef6a9413825539417430869b7753deeb065c8680eca2c8f0821bfc80b136148c16
- SSDEEP 12288:7JJWgPHxyVV4dp3Xe6Cms9/ynNnsQcHa0mogS7SUmHE64:eeyP4dZ1Cp9GEmog7UmHEd
- TLSH T1DCC4235724AEE7F4EF5253BABC40DA96E9930C0C687D029B29CE5E45F4B4A73513E203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/Scan.exe
- Size 3.4MB
- SHA256 81b49343c5d5cb7d87a9087cfaa5b0aca1e7f0c5cfacdc4a4a0dd7bfd223f409
- MD5 39f4dcaffb1e46866736419baaf3284a
- SHA1 982c032060cd8f3e8e33c93c76acf00a5793274b
- SHA512 ea6783ef19c3c5ad8d2923acbc162294820fa1513bc184abd61b342c691c16fa45a933a2e4f46f16664aa08fcbdad020f7cba9488de36ce42883ce5f2a50ed65
- SSDEEP 98304:xmfs3FXyUkhAU28u2iHZAJ23csvmPot6zeZ:xJ30A7yi5K9gmPot6a
- TLSH T150F5330E8529A2F8DF511C70C6538E4FAE73BD59743A058BA3DDBE01B57ACF12A76201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/Sdenv.exe
- Size 177KB
- SHA256 1e1054db8589cd047a187f3b6de433939ba9951cbc4cc02e3aa927e825bb5a32
- MD5 e2fc7a65263d6f2533d4de253f823652
- SHA1 2c0c168b8ae3bc99e9d672ee592d78e09a40c1a1
- SHA512 139a1ff77b749fdab23b09ec2c0a89b443e02c7f15515fbe42a8e67588d6744ce4b289220801cdb3d9bd1261db090f6dc692ef57c47f292fa3c893e52959eb1c
- SSDEEP 3072:mdN/hh21hbpL6FdHKNB4PLbyj5OAivQeFf281ZpSpGg7HNN/SC6nA:GphiJNyPyjWvhFf7IGG/qjA
- TLSH T1460412E3CB4F1CD0D9D12BBAF0C4CC7F6F3A64984105B76932580A9A9FA5FA14C1852E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/ServerActivation.exe
- Size 606KB
- SHA256 7b10ec9c30c9db3819bb623d8dba955ca2389760c54b00b0360a0570bbb45b74
- MD5 1f6a46325a215c79285efe8e0d1ad995
- SHA1 03eefb36bacc379cc8cdc3f9887ef3d2c5b6750b
- SHA512 25c1c4f6e612dbe6c4a5031f7583c2ebb58de35df1b80cfbae7f19bb5efa2ba7ec757c190c28a60432d734c4ad37f5f36fd22a7ea5a1925d097478ae26f683f6
- SSDEEP 12288:mhSeOZ06kF4szffnDRl4UkZBDIUxb8NPlILbDXAEoSAr8LK4aWtJ0:mhpOSNbDb4UyIUONPl0nAEoS8p4ab
- TLSH T15FD4235B604D69C4FF531B7AF180CA42F9B2F4960B14FE9A32DA6F12B872FB02501D56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/Setdef.exe
- Size 176KB
- SHA256 e5e2d3974ca762582932fe5af9aa1165758ea4698de94fb5dd48e527c081aa76
- MD5 f93fe18d2debb391d3ace6217b8b0649
- SHA1 0d2bdb03376c881d9245098556a06840b2cab9bb
- SHA512 fa603cbb1ebcbbb109db01204c8fb21b318e88afda24cf0a01ca580a9987f50a82f6dfe5eadd73a66ec82c0faea5ed0551128ea554e61d7396860bcb1a7469c9
- SSDEEP 3072:ZRjHY37wNr2Df96pV5EOPIZ7yQQ+0mkwW0H9spQmwfO2dLRSX0wma+C6:ZJmF61pApyQjgwWM9qHwTR+0Va+
- TLSH T1E80412C3E89D9CC8E7834F34F5C2E666C6B594EF272133162568AA956D74318C32D23E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target Harmony/patch/Setper.exe
- Size 182KB
- SHA256 521ed863c7651cbe9d4c8dd541e44ccaf2286eb2d1d681d1c1c4f3943c2ac14f
- MD5 e5a7b9a68f91e210ba6926e210ab28e1
- SHA1 0d513ae7e4c3b4459e9945ba3ee1c46420ccd9e5
- SHA512 299e5c28148e192c9fffdddc3f7612e66208d6858fa6f934521828336d6283895005502af23e6c53586c16f18281492ca7ad04edadf665487c9bbd694c6ffd07
- SSDEEP 3072:6fiWgn5LHQzpbTtZT7+E1bt/4rzzt/HoC6xIMre+gDGosC6iY:6e5Ezp9xv/4LtPoC6xPrwDZsuY
- TLSH T1A60412F792ACDCC5D603CE35B9E0CC2A9E3498DE4245238575689C836E54F34AB6723B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10