f429b53a2ec4b4decc746411f0093486ffc34c1c8bbfd323447158b61720e898

Sharing

Copy URL Twitter E-mail

General

Target
REAPER v7.62 WIN-BTCR.rar
Size 40.5MB
Sample260419-t2pc3ab16s
SHA256 f429b53a2ec4b4decc746411f0093486ffc34c1c8bbfd323447158b61720e898
MD5 761e86d67113097641a378bd32cb1071
SHA1 0c909bdb1ba14b11eb3ffbc9b211cceb7ced73ed
SHA512 4f9ff5c7d3c19bda163ad2b53dabd0c3b524778ba19029bff4b199bee018edc84c30aece5d70e1d566e159b8f5f3f2d3b132614dd38ba261bf100764185429db
SSDEEP 786432:Q8co+a//bT6S9LRI7/77iKcjoUdbHTx0RFNH8VIkfB4c7o0NGJV74IM0XArz:xaa3bT6wcJccUFHd03NHicc8lAIrXu
TLSH
T1D59733001F2B9D7E64EB1C0E61E7B0569609A47636283143015AF4BFFB53DAC5BC27EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  REAPER v7.62 WIN-BTCR.rar
- Size 40.5MB
- SHA256 f429b53a2ec4b4decc746411f0093486ffc34c1c8bbfd323447158b61720e898
- MD5 761e86d67113097641a378bd32cb1071
- SHA1 0c909bdb1ba14b11eb3ffbc9b211cceb7ced73ed
- SHA512 4f9ff5c7d3c19bda163ad2b53dabd0c3b524778ba19029bff4b199bee018edc84c30aece5d70e1d566e159b8f5f3f2d3b132614dd38ba261bf100764185429db
- SSDEEP 786432:Q8co+a//bT6S9LRI7/77iKcjoUdbHTx0RFNH8VIkfB4c7o0NGJV74IM0XArz:xaa3bT6wcJccUFHd03NHicc8lAIrXu
- TLSH
  T1D59733001F2B9D7E64EB1C0E61E7B0569609A47636283143015AF4BFFB53DAC5BC27EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery installer
- Executes dropped EXE
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  defense_evasion
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $INSTDIR$_8_/Effects/Liteon/deesser
- Size 15KB
- SHA256 3e822ce973a47bcf37f59f4227d6651089f0733ebbf7b630f26fd6547a63b687
- MD5 0f1c9b808f72e17015fe643ad9fbbac9
- SHA1 4326c0fc4b0fa309a23655a2c07e13bbfdb10fa1
- SHA512 6f57a5238b22ab41f04a2452f9184932680fc26dc4ee5892e812213629d7f2dce30c8e0abb361bbabd507c33c990815e6bf258c807cbd400ae17350ea1db72ff
- SSDEEP 384:8rNViUpNbcE559BWoXj959hFn9ShO7Q3b:8rNoUpH5hfRa
- TLSH
  T190721F4CDC316EF51A25F1AC6B4368C8F2CF0E9893658414DD6EEC939B1EB2A141EE53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  $INSTDIR$_8_/Effects/Liteon/np1136peaklimiter
- Size 15KB
- SHA256 4aeb6fe6f8da9c7c8fb1d162a41fe1f53a459040a2a508f6ac5f69771d5a30c9
- MD5 683bb9cd691ed9be9d87c5135be312fb
- SHA1 4682295dee92d35a571159062d7dd3f706bbe6c8
- SHA512 b6f99a6b66f6769c4a89c3c61f313d0b089c280a81303e795fc26540ce5918391cf40abe9615308e60820f397536fb309b55c34275c8c221fe6de5af70386824
- SSDEEP 192:S3rt1SjHaA3F3+i1EmP/JNcD88U6aSGS8LU/qTs+S8nMPbYvG6wK:8r+71+iBcD88UVLUKS8nMPcvG6R
- TLSH
  T16F626042AD56DB300460D67C9B03B6C0E68E48EAA3553178694DF0DA6D4FB27863FE4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  $INSTDIR$_8_/Effects/Liteon/ringmodulator
- Size 9KB
- SHA256 1a0e69a718654133a4dff2b5dc7854deb94e721100c7a906af7a9460a3b4229e
- MD5 86bcb8d15adae36a60aeb83a3cf85ba2
- SHA1 49db15967dfbc88ba3af076ba95c551f702be4d9
- SHA512 42da5e39d70362c16c1cdbfa7fe303a4d0086647b341f23cb60a7ac7a4cadce0ea60103d7aa3bb01f1c1884b3526e052af0768e88bb3b3a64d3f51453cb7877c
- SSDEEP 192:H3rt1MVUyTi2p+zgHDpsB+NIWD38bYd+Bq9kHsknjtn2xK:Xrap+zkuB+NIWEzk9En
- TLSH
  T1CD1287570C098471C764EBFA8B2BC412C5EF14868B45139BFE3D0094E9A57A889BFB1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  $INSTDIR$_8_/Effects/midi/sequencer_megababy
- Size 119KB
- SHA256 fcbcfae159a158460595a83c3a6db95903729ff2565b0860ecbc787156934cd5
- MD5 e0d5ab5987ad81e94e8feddae4039dac
- SHA1 c6c2f6257148ed918200b17670421c9df08d8001
- SHA512 98f760d3b1b10740c5b36adc3da30884afeff7aa66607a8b80487bde68cb99dd4876b86834b657be1b3d1728cc1131c18a33bd93c2f64c44ffb0725996a054c1
- SSDEEP 1536:toCEkjdOeJjlkj5wIy8ddFHm7wP6JHyIXKV:uCEvjj/dz+Q
- TLSH
  T1CAC3B35F4322168F49F28B2B4F45A185D1F8940B82425B9EFE5FA7C61FB0664D0BACD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  $INSTDIR$_8_/Scripts/Cockos/Default_6.0_theme_adjuster.lua
- Size 90KB
- SHA256 0a2ad4bc677e8c270c6e3683ac4967a41fcfa935414c94298515d5e718014de8
- MD5 ced3b32321a4a064754e6f28bb9a8588
- SHA1 e56a7ef7d300019a7ce20bf45e115320c80e7d00
- SHA512 16fff0244dcf416d58465ede24f698842a5ad655157cbdaaabf0eff20dae74eb4dcc268e030e4a47ccd6c0b04663325f602a83c3af68bc862455a36a4dd3b7e6
- SSDEEP 1536:oqUq183rloYlYqSbmfps5bOn97fohbOvbU11vRbxvJqYGwwCk1uZO3YPo:9Uq18bloYlY7bmfps5bOn9UhbOvb6/vo
- TLSH
  T10193180A74213370810795EF68473A07BBAA641326890571B4BD80D96FE4FB991FBFF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  $INSTDIR$_8_/Scripts/Cockos/Default_7.0_theme_adjuster.lua
- Size 252KB
- SHA256 795fbaec94577ad518782bc6d58eba83456bfdcf29650ac246dbd79a10abfeef
- MD5 9f20903e4368a0eba2909ee23216b7c3
- SHA1 ee7a0530d622dde6a499f29fadf059975c641e26
- SHA512 8cf49292b71b15e095cb837ad1e9a83ac79d9b3e91324c89d49999ceb822b35bd0ed02b3b4348ff0932478edbab25a3d70d1b51db5b49043468fa985a7ebb9df
- SSDEEP 6144:L7D7Z7JK1H83b+wrHx5wJ8Bk1Tk3KH0jTuK3LF1T8wqrwK6q4DpHPJQFuVFFIArN:B7JK1crRgNaF1TcwK6q4QF4FCpyj
- TLSH
  T1C144C61B759233F06386D726D5174E19BB37209329022471FAAD19A0EFC4B2952FFF98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  $INSTDIR$_8_/Scripts/Cockos/lyrics.lua
- Size 21KB
- SHA256 86d284628b6a8175b324125afa19cbdd716e5a7561892f10e0f314dec28292ca
- MD5 4e06b5d1230328fa02a0408fb393bb8e
- SHA1 049140ee197954845853b75d7dfe9fc27fb8b12c
- SHA512 77446de5004947bb425306e259995f94286fa3889d1c188571da2cce9ab02e58d9c00d1a9ff5e010d0f978c6878e4a050346f5598127adba90d96c35b74b9316
- SSDEEP 384:S+fie7us29Z1iAHAHJ4He22NbX2a/wvupFxzWdVk3/1412WI5xPc:SdUMniA3z2lNwwx8Ozy
- TLSH
  T1F3A2342FB481A171C3E65534544314B297A9291362078DAC72DD93F8BFE133B92B2F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 32dd7269abf5a0e5db888e307d9df313e87cef4f1b597965a9d8e00934658822
- MD5 4814167aa1c7ec892e84907094646faa
- SHA1 a57a5ecbdfa9a8777a3c587f1acb02b783afc5ee
- SHA512 fb1f35e393997ecd2301f371892b59574ee6b666095c3a435336160481f6ef7ed5635c90ce5d2cf88e5ef4a5affb46cb841b7d17e7981bd6e998531193f5d067
- SSDEEP 384:3A7q72y8XYDSDJe7H+KXKKK2KRKuKZrjVo787foI7:3sygyraXjQ7Zl99
- TLSH
  T13B626D6652988BFFD321113AB6A333235BE591103770715F4AA36F947C34A93A63D326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  $PLUGINSDIR/portable.dll
- Size 24KB
- SHA256 25e5a428e663c6b6c352e7eb313d9fd265e944e0f8f88c7406c3fc15d1ad82b6
- MD5 c9397d267d0d10169c4535f6d5e06a6c
- SHA1 2fc5d2e909d56042d32b3fe0a5ae39fc58d110ef
- SHA512 143943d8e02392ef41c2c43641db9d1737a108defb9cd62a3ed3dce800ccbc8f5997f1d0ea4846ae675e3f2b0efbbd9cebd5c5c0022822d10a89a356983440e6
- SSDEEP 48:q9aX7AL2vnYLtSFs4p3Wj4vLj4GWTQfQx2m28gF244m4y+bAghX:YaLArMpGjsjdTUt2t25m+
- TLSH
  T1FCB2752753F438B2D57A07733197A2ABA796533013D0410D7E7E111A2F3401BCD26F96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  Docs/REAPER Quick Start.pdf
- Size 98KB
- SHA256 58045223424d936adcefc09c06f635c30a1aaba0335fc5d5954b43833b53fd72
- MD5 1bddb792fec19750ccbbb8352b2b8ffe
- SHA1 dd300cb011e0d9abd57f41503e31367167fddd68
- SHA512 1438030735aa9549e13b2e275210a9c6bb825329acd568d8c38f8debe04474ce01be5e44ef6b76913d47b59d33c58954615754cffbce67de04f9ccbaa8341631
- SSDEEP 1536:loTqjohGkVSC9aZHu40Y7w58PxeVPM6b24k8frIP4T8m0qd4gBE:1lHfEU03kPm8m0qzBE
- TLSH
  T165A3E738FEF797AD1509230F328571420D7B57C3E980648936CF8E7A1F50AAEC58B56A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral12
- Target
  Plugins/DiracLE.dll
- Size 268KB
- SHA256 bb61ed1bf7e2b98e040c20936523bd9bd71ea2b546d6fa95ed51f1541a8910b8
- MD5 93238672c08442d0fa2f41923e2c51cd
- SHA1 98f97cbc1747a02d00116123425c45fbd86be531
- SHA512 e013e3a7a25d1ccac6a4abd4980cb9e6a3f0637d7e3712d5a20e86841a338adde350a170aae978d8aec06d6764d5c018a8feb94f09e035b658f9a1b0683cb686
- SSDEEP 3072:ZDkQ3hnmg5lalIXt6Wbtz+nFdor2gUbbzsl49oa/p:Z5Xt6qwFdor2gUbbzslo
- TLSH
  T1B4447463B34529E7C48E0CB508C73177E993597C92787484CB16BF6E3B2BE34AA19D12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  Plugins/FFmpeg.dll
- Size 4.6MB
- SHA256 32dd1d45471f0238518e004a70ce577b1edb04b9e6d01eecedca3a657ae1d603
- MD5 22e91ff9401a432a66ab92fbfdbcf918
- SHA1 099810d31ece85b7e23f77dec7a2e131ab2bd710
- SHA512 194b7966e5c2e1f75a834c680a87bd5f06b2188f7e087541a11cf3c1e6957b882f0173a2d40d57f63b4ef41ec77f9730a9240b5a7267cbb96350c9066b7f0c4b
- SSDEEP 49152:uPjk2EZsWzSUEQbn23e5TzGQTJ1QcWb9zv+peGNLtVcU5WZbwdztJCMp:+Gn23ETnTbQ75zTQtVFWZbw1r
- TLSH
  T1FD26A483D68743B0C57E087184EBA13E47352E0D9C508E9AFBC8E635B4E36317A6679D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  Plugins/FX/reacast.dll
- Size 605KB
- SHA256 46077452243fd28c5235abe9e1f708aeb900ebc5ed8ce1cdb45929641cb7a91d
- MD5 a76b845756245f65d28cdfea6931dfd6
- SHA1 ee80be6f997abf02ff94a55ed391ed7cea9ece7e
- SHA512 7340ffdd2a3e8e6ef43633cf6a985cb5f9c23184c06a8069e1d08f78cd3ee2f9a88dc2320daa58a9edc8e382743602cbe8f3a643b263071b20272f1c1a619fc9
- SSDEEP 6144:9MtTysiv/+HKd/HjRbBQ0/7LAaHttSZBjOWgL1ABXV/rJ4Vc1kKkMbOmM:StmLOaRBQ0PAaeZ0taTFNO
- TLSH
  T17ED4AE12B192C0F6D86B04B1915B6B335EBE3D660630DDBBFB949F984E35980672E307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  Plugins/FX/reacomp.dll
- Size 422KB
- SHA256 c1535e7128d1648aa7aed4433627e5bcdff8264cb8cdaa2ec967f069ffcc9a3e
- MD5 39ac37680c0cbc142d0d6152aa6a5bc7
- SHA1 121774c6cdf23928ea3b186933908644286346c1
- SHA512 701d868d9cef11a5ab30eca36f92d05c3b0b9b1d62a67a75a5dfbbfd63d32676bbdee6d8e55580994bfe543015af0836da1a2f06a74c74af838f8196ff1bf906
- SSDEEP 6144:OsRAcRa61Uc8/M0jaZiXZWX4XW6MFQ6/YY7E6htsnWvXULMvdOYLxlNLi5e:DRaPhUZFhPBkL/L5
- TLSH
  T1B194CF1239E3C0F7C46D02B5648797639EBB7C26453299B7BBD60FA81E30651BB1B306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  Plugins/FX/reacontrolmidi.dll
- Size 448KB
- SHA256 36d552a0672bbd4ff96dfd6ade08af5237316eadc92ab0868e57a186f1172304
- MD5 fbfb3e1495ba722e52423b0d9900a679
- SHA1 9d8d5e8b798b3a5e911090e8c317e955965036cf
- SHA512 2a6ad3efd7c569d7fd0f127065fddd5b2e82fe8deb4e8837d3a5adeb7effdb0e1f4ca8174f17d7f59d3bb52faf341c073d04c5308230bc3d95b4da3756917c29
- SSDEEP 12288:p3JWRLu40vMuAnqe63tJn5/pghRAz6rZz:LW3AJn5/pghRAz6rZz
- TLSH
  T1AEA4BE10B1D3C0F6C45F007158DAEF3A2A7B75604B219ADB7BC45FEC9EB9292962D306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  Plugins/FX/readelay.dll
- Size 370KB
- SHA256 9a5a5f04e5dd7575db163e296597ab51b5e41c21da36c2d5205fc342f9c5112d
- MD5 259741ffbe8a42554d9e89f3aaca2823
- SHA1 a9c5a02270be936c9ed7c5c9821f88a3be7a316a
- SHA512 80bee07e75333dac1afb9c082d8931effd5b070693eec3d67bd2dcb1c07c29f440c6aac5e6d36d67c5f949f7452a9acaf76b223529018f674ff04d490d8189fc
- SSDEEP 6144:o6UEDFouA//SWFgGpcxNJvh6UOOelF1skeE7L:o3EDFouA//DBC6UOOWF3
- TLSH
  T14F84CFD171E1D0F6D03A117AB05697234AFA3C3655369DBFFFD90A984E32181A72B30A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  Plugins/FX/reaeq.dll
- Size 527KB
- SHA256 bb5a24f74dc3be64c82d76fbec0dd079c89dee7972a2008065c81f01fa0b4864
- MD5 b2f9b9fefe4a7115b4c4ee99bc3580cd
- SHA1 60ea927941dc4cac6af24ff3d6c1b7ff4f5054aa
- SHA512 f0f95aaa130e7b5ec72b069a8b0081220a60a3cc5a122cfa8760747f501020562708263b20a64dc9e34f7fd840848388e080eb5dea5271eb195b5200534f2667
- SSDEEP 6144:Clu0Tn6h2Tg4HqwkTUH1ENoHVmo4b/vEpxTQz5lmjuzXun:CEw6hoHq7C8/vErBUu
- TLSH
  T1CEB4C0A165E2C2F6C02A013463D6FB328EBD7A360635D9FB7BE549A80F31541BB16317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  Plugins/FX/reafir.dll
- Size 467KB
- SHA256 f2ca9f587663bcb994ef26647209e389fcdcd9ccd007d37b5a1bbcfc30c31903
- MD5 9221223b189408946eda41e3bdc98a43
- SHA1 7f333ed3bb6b2711e76deca040c2667724684604
- SHA512 626e55c3aaad51e020f07bef7aabefcc43f4d64732e27266ab1c185d955108fa12da48781000ed5e10b775b6bb0b71eee6691d2ac1aca48d2c56ff1e8f610c8b
- SSDEEP 6144:dRlAmR4WY8/nQd2d4Fljzz4/9K5wvjkPuYPpafyHaEi4J3E:zlAmXnQsObj6Bk1YfD
- TLSH
  T198A4BF517693C0B6C03F02385187AB225F7ABD2A4534DDBBABD98D9C4E35845B73A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  Plugins/FX/reagate.dll
- Size 390KB
- SHA256 f5da044977050a2fd4aa0705ea901a971675a7d52bb4279c5d22ac4de7033cc6
- MD5 3ccacb3385e453eff739621a96320811
- SHA1 71d1f3a9e8e4c7b087a94970d8af7c87b001a216
- SHA512 9e4d7911c5a2bccf65a7e410d77c593230e17cf6e0549e10a5e02996b566811425e39fa9cfd9a27279a401ff2c388597457cec2abf475ba2a7ab80dedaf05f10
- SSDEEP 6144:1LKVARj8o+LcOjy1b2XLyYGmN6cxXlP9Jm7rkgb:1LIARooRDgXL1vlJm
- TLSH
  T1D884C00176F3D0F7E07B05B4605387239ABA7C26A53599B7FBD44E9D4E31901AB2B30A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  Plugins/FX/reainsert.dll
- Size 404KB
- SHA256 d5234b151ee1cbef276bc45a315599f449c882762c296d40549f8fe3c17ebcd3
- MD5 71cca9d804fa230158218dbcb1f4473e
- SHA1 4b35245eea183dd826c57eabba677936d41edab0
- SHA512 6253929ee2a23d5381f2780f2f24b9e4653e980dad29b4ae8878f9459023f56adda11c68dca2c47af38b0dee5f67c098f99c57688fe12ef126e7fbf1cf248b6e
- SSDEEP 6144:mbvFORegSc/O7faN3+erB7UEx+mJAYAT71QqG7vBm7:+dORerc27A1B7UEYmqYAT69k
- TLSH
  T16894CF1175E3E0F2D06B15B160439B374BBA3E254236DAFBFBD40E9D0D212526B2A70B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  Plugins/FX/realimit.dll
- Size 484KB
- SHA256 d32b45109d4a9e4af55886f77ceb537c728241c0fe4e7ffd55e7a1a9a1552795
- MD5 f78fa92ea69498a863315c31fbcdd1c4
- SHA1 1f311619ead83708e4728287549b220cb92edaa4
- SHA512 d2b5565a50b6af9cf22de88cb10c638954ba72be9256c9d0d0c37d6e39a98cc375f84ccfc3280753d8bb83435e557579bc5d3ef6db81d76de04877fd93a4e5c7
- SSDEEP 6144:+uNNDeDWdKka2GLnFjaMbBBT3md75sMX8fCau+IWOJSrgMKfXyRDn:1rqQhGpjt4755iuJP/5fi
- TLSH
  T1E4B4CF42B593C0FAC42A06705186EB335FBE7A694130DABB6FD88F5C4D36542673A31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  Plugins/FX/reaninjam.dll
- Size 619KB
- SHA256 3af40d87cca5fe1be85863534689831c7663a3c72eb73be064c2f2487bfb3cb4
- MD5 4482ff613429e18f19321d3c913af80d
- SHA1 426d49391c001c7f8fad7651b0fbe8ae9824422d
- SHA512 9a281e8bc606b4d3c6dc988609215f05ab95419dcfc129981c724ecd93dd57487eda38890b8bbebe504de780b9b4c5e478b68d99af64f953d945d0e3f2984953
- SSDEEP 6144:eA7fu4eM4hq0mBFdrjwTALnnTnmwyNByJ1LJkRubV0lSHnp7kWbBBzxO9Q/rKEWi:eA7fZe3hw5jSALnTn3yiuuZyWFTqOrH
- TLSH
  T1E8D4BF1320A3C0F2D51B04706126BB335F7E39AA5A34DAAB77E86FDC4D79181672B346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  Plugins/FX/reapitch.dll
- Size 379KB
- SHA256 58ff9afe411a96716bf8ae9d39c5f30f08db5c8acfd5dd0b6fdbb1f8d6816270
- MD5 edf6b5e903d2d64681506d20ab1d08b3
- SHA1 92ea02cdfb23c905b2db27bd169fa14c2c19da77
- SHA512 af7329884289532bea55cd92c34b16ed43e35c8fa1696be0b0532ea11993c621590190fa25a9e7463cceea802c38f9916be57ceefa73004cc3411f5ae7a8f88a
- SSDEEP 6144:+bQhYygUhj7TUYx+Y7vVankfnhpTSsQAc:gQhpg0EYZvbfj
- TLSH
  T1FA84CF5176E6C0F7D16A0136A053D7238BBA7D265836D9BBFBD909D84E32201B73B306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  Plugins/FX/reasamplomatic.dll
- Size 490KB
- SHA256 4cd7008f781282da2f51cd0393c02a88f47de0d66db2252776cdc59478c50bff
- MD5 e2a543f2761105647928d0fb4f922fe7
- SHA1 3530085dfbe9b3c08377eae2e330e6905907f3a0
- SHA512 4933b3d718112b54e22a991f1c96acc43a559e15224a3dafedfa66c86f80a349796d57010787fc0915ed1182186949efae73d10690e69977e5ca6a54c5baeb1a
- SSDEEP 6144:gCB8TPGQVSuJNW1GnSmf97j8GP+pAfzk2uPwqCtmnRxGhsnhUkqKS:g08zGQfJY1GnSY97vb4CtsBg
- TLSH
  T1FEB4BF5270D3D1F6C05E0870629697335F79391A4631DABBBFE45E6C0E72642AB3A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  Plugins/FX/reastream.dll
- Size 378KB
- SHA256 da182806979250e7930b5022fe2378c7482436fdc731fdd2e86b6f9238a0343d
- MD5 d23147411637a31c2ea0b33bfa367780
- SHA1 58c7a15095635d1d36660178debd806447a5e004
- SHA512 7255bfe52247a7a7d1b26687442d324b282dc3b9ed0ad295da7b66d45c8982fba3e3c6de6bd1ef8330d58311a389b0577b18fdbe8869cebd5c7d90778ce42763
- SSDEEP 6144:2IyeEcQQt8kScaomE8pMa2vwpNVR5nkX/:Titk6EOlpZ
- TLSH
  T1E584C01131E2D0B7D52E0534B053AB335A7E7D6A49339EABBFE819D90D32251A73B306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Identifies Wine through registry keys

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27