General
- Target Ableton Live 12 2 7 Suite WiN-MAC Plugin Crack.zip
- Size 5.4MB
- Sample260424-ed8dpses2y
- SHA256 edfc08852075b7872810af17c26c570c2f0f610a47ccbc93ac31935230c624fc
- MD5 782162d89c4187767d3c83e6bb299296
- SHA1 827c3e4b914c6cd11e364a5c915d4b2cf38f46ca
- SHA512 cf11a7590661929a11e4654ea6cbdb0c71783fd93fd823df6ab5626ba1162c7d3ad8d4a176ce6bca3e730ac02b231172e731055de80da4adbc27b629bbacb7f8
- SSDEEP 98304:b5OWaX/gL7kBO5WIw0XDR6PktQwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxz:1YXI3kG9t6PktQw/tyd3w++lz0byz
- TLSH T11C46023BF28B647DE06A56357AB29110953B7D216A128C4797ECF48CCF261B01E3E397
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
.exe
Resource
win11-20260130-en
9 signatures
900 seconds
Malware Config
Targets
-
- Target .Store
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target Ableton Live 12 2 7 Suite WiN-MAC Plugin Crack.exe
- Size 2.0MB
- SHA256 1acea67dd16a9d9d0111a70a954fa73898f629c0fa0a4e45c5d5f937d121d215
- MD5 d9b1a9872a5e8319d861b56fba40d3bf
- SHA1 d937262e91e4e12261f02ed378349ce5bac9f940
- SHA512 ab998f5e2f7e815ff7ad8db2c7bc0e8c5bfb7951d972bc92134fc30d0c32fa1b4395e698e2e8f01515dcbd8290ca1f0ca46a075f1c9f40320193e1ddab208b9b
- SSDEEP 49152:RuI2h3Gayun/ggS76zvJO5WImt0XDR6KG4VqYq7:R5OWaX/gL7kBO5WIw0XDR6Pktw
- TLSH T103A5D03BF28BA53EE06A1A367A72E110543B7A2165164C1696ECF88CCF751701E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1