38739cf67326b970c7f65de865ec1c4253a6d8c2a11dac8b13eb110be0d61f86

General

Target
MikuMikuBeam-main.zip
Size 6.4MB
Sample260527-ll84jacv41
SHA256 38739cf67326b970c7f65de865ec1c4253a6d8c2a11dac8b13eb110be0d61f86
MD5 6a08c618c485f6a4b3c791859370511f
SHA1 6113c3d511ad85c05814f20cff440e7b1da86860
SHA512 e94d6d7664dec1707940abb694dadfa6dd0b4f60243a87fa9314f5c5bfe9e66dabbf89d7dbd9a6c082e84139567700066950b56ee484b5d403f119434dbe5b0e
SSDEEP 98304:1Q8wTAWhITvsZ519LNMIIhqKuVaTinCDwSye9LvpVFflvK5E8HLNeThUcy1f0/PX:1Q8ZpYpMIlnaE4Ny0zpBKq8rWy1uMXW3
TLSH
T18E66332A412F08B7E90E41B5F943895A2D1BB2457C7CBB701F1CDDFC4FA651EAA16B08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  MikuMikuBeam-main/web-client/bun.lockb
- Size 120KB
- SHA256 67f2203476864c27a3efdeb704a07cf2d17c47e0a7f916f08f02d8e9df708384
- MD5 da5e14bea41600a785652d27c905e307
- SHA1 9479b42f6d484dd879387a24a39cf619edb75ed6
- SHA512 3cb8d56938899102f88d7cc54ecf496fad95d06b26b4c0a94869030c00435d6181cdf82406424727638c827ec9255e903cebc3cb4f05120b3d5b25456a5ea375
- SSDEEP 3072:6oVAiHLryUl6/ZgfFhbNYZ1Em2qDKfucCg+2eMIA6iOE6uK1M:P1HffgKfFhbNYZ1Em2qDKfucCg+2eMIZ
- TLSH
  T1BBC395969F044263FB6143FCC9E37F14AE2BD59A4FC24713E36496BE8C913E43912929
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1
- Target
  MikuMikuBeam-main/web-client/eslint.config.js
- Size 739B
- SHA256 fa3cc12579fb0ef678a3153b31ec396d81ef2fec284a1a5ecb779c0ff336cfe0
- MD5 2bc8570a791ea45c9895ec66bc8a86b9
- SHA1 a74c8534e33279f1dbc26a7be1df87a46c73220e
- SHA512 6ff3fc0f8cd8ee9d04fb0594c1100920c9e7d6b902bc7af1c0bf9daae5a4e9f949aaa44444f56eaa3fdb4c9ecd90a4cc9ba10cfdb70576b2af2cc9c70436ec03
- TLSH
  T11A014793995E64C16992089FCD2929D359B8438F2DAE7861F0BFE2705F8C2DC7274300
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  MikuMikuBeam-main/web-client/index.html
- Size 377B
- SHA256 6f5732e54d2cf16eb46ea9506fe469a18893cb1b604a7147c195a4b17169b6c9
- MD5 8e9ef0e4508cb525b1fcc6bec57a23ee
- SHA1 532740ac82f2edc48c0f1dedbdec2ff7241fedf8
- SHA512 f56cf23837e54d4d3174191c898ea7942e23b2bbcfcad3e3d53065b0de6e747e20ecaee8285a144cad12cd7defd9f0372d4f9bf3db2b0170ac7ae712040712b3
- TLSH
  T132E0C042C8F1C906422046607ED0F2080E49C7C7A3827D463ACA71675FC1B91CEDB1EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3
- Target
  MikuMikuBeam-main/web-client/postcss.config.js
- Size 81B
- SHA256 e32657baf631d7c5f4dc67b4b2ee0ec8e7d5b3c41860e09cddce7c0377cd80bc
- MD5 c735540bb63936a123bc867d950c9f69
- SHA1 50423d11f317aef9d5fcfb2563b2a501b344dcd5
- SHA512 76c7d177dc28bc7feaf7deaf88c848dad5c613bb5fd0ef0d439c39e871494064578b2af02b9a5f58ce18a5788709906a672d5b42a26db19532b8fd6b80321b55
- TLSH
  T13CA01202407C6253509000021790401290D94AB22C093881724005145F0D11A1035240
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  MikuMikuBeam-main/web-client/public/miku.svg
- Size 2.6MB
- SHA256 6aef10934b3a04c2efdcb522f7aa3aad4cfa30a59244373b8a583f23cd8d3ba7
- MD5 3587e241ea17bd77612cc6ee00a36a61
- SHA1 249876d655c57b8054eb219c5fea9eed4ada9460
- SHA512 ea7ad592c656edbf1341806dc8987d6fd07f87a755a17b5c1b0fb0020f207901b991979c2ccb4c1eeeeb38fbf96dd588f8f21cc344e01295da857961b902b142
- SSDEEP 24576:yyfncv1cVZYPgsB+GlB9+TE8GeI0Rc/1xfIoIYsoQmwma+mBGEMf571z9fKCXz5o:yoqSzv8j8GehOa8AB6BSidTt9a+hIZr
- TLSH
  T15AC533806EF92CAF8F6D813B50BF1A1D26E60E43418D21ABC7E871DB525AF448D77079
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5
- Target
  MikuMikuBeam-main/web-client/src/App.tsx
- Size 18KB
- SHA256 a196cc9a103dc92b053d4060c717cc6246b17cd8319b98368f3bf3086c41b8d5
- MD5 603d768007209edeadbf3bbc49d44b37
- SHA1 5b72099e37cb6fe551d6ad8b3ae060eea072cda0
- SHA512 62786b3b6db81298e769c7f1151d00b0524466fbcc500cf91bd2e6aeaa396240c668e70804092917ffcaf43e0721b6c326af91272f2a3a338ad739cf776c841f
- SSDEEP 192:/gaPyv3bxxiwbmobeWqcBsHjD9+oalyecP938uflAk2dlfdlezDdlw2NvfXupWQ/:/kWwbmKSDQSfAk23f3ezD3w2NvfXAX/
- TLSH
  T1C992526031F218DE459784716BAF94155E3AD313FA4FCE89FABDB3801FC60209E97698
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  MikuMikuBeam-main/web-client/tailwind.config.js
- Size 170B
- SHA256 316c86f90ec708a4e953dbba5f6064ddae1feb701754f872b599c4bc2a0aceb5
- MD5 1740dcfedc2dc7ce615b49ac9ef034d3
- SHA1 08a1abdfac340b1b5967ce1582f8fe36d178b05a
- SHA512 e6dbcca67256b8120e363f68c6537a4cac42559b79e7e91a259300772e41c1c2b929d49f312fbde4251f5eeb6abef1832d688462dbc8e01b088126a22a2484a6
- TLSH
  T1ACC08043147C57534565D14147C04577965917B15D153C36569D147D175C10854F5349
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery execution ransomware spyware
- Executes dropped EXE
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7