General
- Target BetterSoundCloud.0.6.0.Setup.exe
- Size 116.0MB
- Sample260503-24gp1adv2p
- SHA256 d7e594d72b44527056efc6e867ca0c0484c2c4e7c4091c108e9f5a1c1a20a630
- MD5 e5cb3232bb0c0c487ca35d28d15d9260
- SHA1 01e9bf82b44e2071e78c7c2cddaffad38def263e
- SHA512 145e6597260f8150bcb0870b4ccf9e5748a81b59652188f96b34b5d6b3545242d3b94aab9e819fd7ee534cd03598bf6d2ac45cdbf8cd26fae15e993406b7487d
- SSDEEP 3145728:9KLKwk8PnbbJH2Ry0T+tpnvnI1wiRz4OMwuAaE9Qjq:M5k8PbJkyXpvIiW1MRAaEQq
- TLSH T1A7483390EF68416CE937693B19E7E3246182B633DB9B8967266403C17B026D3F7FC950
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BetterSoundCloud.0.6.0.Setup.exe
Resource
win10v2004-20260130-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
BetterSoundCloud.0.6.0.Setup.exe
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target BetterSoundCloud.0.6.0.Setup.exe
- Size 116.0MB
- SHA256 d7e594d72b44527056efc6e867ca0c0484c2c4e7c4091c108e9f5a1c1a20a630
- MD5 e5cb3232bb0c0c487ca35d28d15d9260
- SHA1 01e9bf82b44e2071e78c7c2cddaffad38def263e
- SHA512 145e6597260f8150bcb0870b4ccf9e5748a81b59652188f96b34b5d6b3545242d3b94aab9e819fd7ee534cd03598bf6d2ac45cdbf8cd26fae15e993406b7487d
- SSDEEP 3145728:9KLKwk8PnbbJH2Ry0T+tpnvnI1wiRz4OMwuAaE9Qjq:M5k8PbJkyXpvIiW1MRAaEQq
- TLSH T1A7483390EF68416CE937693B19E7E3246182B633DB9B8967266403C17B026D3F7FC950
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.