5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b

Sharing

Copy URL Twitter E-mail

General

Target
lmms-1.2.2-win64.exe
Size 35.1MB
Sample260530-galrmsgw8j
SHA256 5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b
MD5 8a5e80d496c3052a2057098dcbb1293f
SHA1 f26b1be68206eaa0b36f1ee057bda45b45070a30
SHA512 e99d92bec376c548c0b3f8569fa43414efe9fa3f24d43a23c281a526a5a4c94642ddd0103a369b5feebe0b63f00c2633925be7a22ed3ccd70ef7c599fb424351
SSDEEP 786432:fJNH9O9cqiO3Z3QBH9OiJJTtDUv2P2YG+O9aXNTqtuHkwloovV/6+:Rd9OT3Z3Qx9OoUvNY/O9eNT5EhMV/n
TLSH
T169873386A2E850A2C1BCDF76109F00E798561F1FCE73C28AD8D9B6791836D350E9BF54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  lmms-1.2.2-win64.exe
- Size 35.1MB
- SHA256 5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b
- MD5 8a5e80d496c3052a2057098dcbb1293f
- SHA1 f26b1be68206eaa0b36f1ee057bda45b45070a30
- SHA512 e99d92bec376c548c0b3f8569fa43414efe9fa3f24d43a23c281a526a5a4c94642ddd0103a369b5feebe0b63f00c2633925be7a22ed3ccd70ef7c599fb424351
- SSDEEP 786432:fJNH9O9cqiO3Z3QBH9OiJJTtDUv2P2YG+O9aXNTqtuHkwloovV/6+:Rd9OT3Z3Qx9OoUvNY/O9eNT5EhMV/n
- TLSH
  T169873386A2E850A2C1BCDF76109F00E798561F1FCE73C28AD8D9B6791836D350E9BF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 18KB
- SHA256 dbd0068d46077ee1ace4eaafc3312389c29af22d306c5757a1a29a93146604a9
- MD5 adec63bd08a185bffe6fda335d29df87
- SHA1 23f37d31f3b1c07547ad4fa2747305a04ac09b54
- SHA512 44bb32fa41b0c2b41d637f15dd2cab84ad6f9dae39febb263923eeee19d1c80d65ba3939ab87d34fbb28af6a6f867c21daab5810d289e309451c67ef6f65a88c
- SSDEEP 384:LPs/sv/Qji4uGGAjc6GKv3WRg0DXRpLJXCYAkF3cuzFNS:LPdEipAmbhX1cu
- TLSH
  T19782E746FF461CF3CC8509344176F32F5A58C474AC268E10CB89AE69DDA7D72D19E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 9KB
- SHA256 e5ef538f9ada994299a0860c26f68ae0649495f68d388b910a05cba00d3ee365
- MD5 000ca2d1e21f4b461b2c8b888b098a4a
- SHA1 42fafc505d2fe16657fa5ebbd5ccd89c3b386637
- SHA512 ba0b2960c95fff4428999adc02f82c88b59aef464f2057be0b8d93c523293e84a9b8edd73d9a8dcfac96d9340a7d09815c8ebd5cfb317bca81e07855d08e0fbc
- SSDEEP 192:+QLDyzpK69sLG87l1Eu3VA9XJLYKFaZc75BDuqz:+QL+zU6AGjuwJLJAc75By
- TLSH
  T14B12B5C9FA0678B1ED0508354243F67F56AC20208C53CC46E5501E6DEDBBCF58E097A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 23KB
- SHA256 2e1b11ee20e5061ea86dc6b01e3efc659e887540afcab7317cdfd6a8eff87ec3
- MD5 125aebb055446fb52aa5956cf99e8a9a
- SHA1 6b58fd08a8ff2763219cc6b0dcdb875f9970f850
- SHA512 5f85e48bd3ae2fd2be0595b93cbf74674e0281210688dcc73691178b295a702e8d43898afb6e5d8b7e82de98b4ee28194c9838ddf8279cde85f7fe48d34dc8b7
- SSDEEP 384:7AQ5GjarYFU76ffyEIPb9p206QrHwIl8ToknCLJy4k9KyFkKCKWin/aY+:72XixPbPD6gQikUywWkKx/aY+
- TLSH
  T1F1B23ADCFA4391F3E8D284F5215A7F3E95B28650C83B9A81EF54C950FA73AE46208717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 6KB
- SHA256 9931a2f8bb44b92ff26062b99cbb6e41ed1cfad65079dec5d6d9c006223bd121
- MD5 7f780de67db61a924bebc0cafaded3ad
- SHA1 3ac359dce08ceff16e4214fe45d83fdc8e3f2e1a
- SHA512 8378f04b6f5085e887ed46874414e5681f0ecb6889dbaa25eb78f75112d4be603aef8dec6a2a81857a19978f6ccf07d65d566ff3f0943da809de22599ffdd8f2
- SSDEEP 48:6qX08pwehWTmk61T+8tH1GNO/icjsgnFp8hKAYKFaLDzzDz/xRe2v1e:GkwehWn6086+sgnchKAYKFafzf60
- TLSH
  T1CEC1D6AFB30140B2D94318B416B7BC2F36F789004E071C2ED6D278671896A353816A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Qt5Core.dll
- Size 5.1MB
- SHA256 64d345fe6b73c2f249164c6494074c0393d7ee45388c562d57aef9708a1f3c26
- MD5 b1f30ccbb0d01071d9af4ec6eb85a3b3
- SHA1 691146c9430c96d789fd2955a2c65b820a9202f9
- SHA512 61388eb4253b3b04ccea2b57062936c0b17fb83122639435c40f03458beec7ab652486e1f0e402c405b867505d6f8928a83ab848e1d2ce3e1708e9d88881fb3a
- SSDEEP 98304:+v/RNsL12fxXz+NIVnB2H0SorJsv6tWKFdu9CpllQ:gWI4mncOrJsv6tWKFdu9Cp/
- TLSH
  T132365B43F3A351ADD96BC13446ABA332B931B8594131AE6F1638EB712D31F606B1E71C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Qt5Gui.dll
- Size 4.5MB
- SHA256 b8e72ec747f1f056f07536446934ee0606525f0eccdcae78966e6097e4d577e5
- MD5 23439958cd89baa6970c1aac9060af2b
- SHA1 522bad44bd28149e62ff7ec45b38bb8cfca8c0e5
- SHA512 3d909214e74f7ed718688b0e2b7f86319bfbe20a902c4f127f2f3a7e25b2bd781a62afd30eaa07bbbcd87d9ff03f05b053a6e63c007bbc89790cfcd97dac5638
- SSDEEP 49152:qR7gxfIqqH22A9pcoNHWh2EZf2KucPtchYTesGY2XtHM0r8+YtjY1hCKyO3la40r:qdoNoDucPKmTmY+Qy3la4m/tGc
- TLSH
  T173264A97F2A360DCC52BC13442A7A632F4317C650175BDAF1674CB762E21F606B6BB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Qt5Widgets.dll
- Size 5.7MB
- SHA256 7e5754119941a4d996b00fe5731c005044f21e51bcf8315dbdccad9a21077c21
- MD5 9364bbf7fc86cd2f0a9d258803ee4105
- SHA1 0d0cadd5181df2a1f9540d0017daf7cfffe41157
- SHA512 2687d25b60f6ba3e352ebcde651449f6fbced20ebc33359873ccf3626b5b87af865a2d471d2288d4e5212d06a497f76a82362f2d2dfe6de7c9f8f1068453dcff
- SSDEEP 49152:RvIi8GdnZAUzjfz5Z+9f3VpM2W8LVaHGf/Kdj+sHHL2DY7FmEexkVskzbIyo8QuN:Rn7zc3McAMO1xFQ+cBKhf9
- TLSH
  T1C5565B47F29354DDC96BC138479AA3B2B5317C580635BDAF2620CB362F51EB0EB1A718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Qt5Xml.dll
- Size 361KB
- SHA256 3864e3649485fb23d12f01e968a19f7ce0eff987c02e74e602c0b5527f92912d
- MD5 790afb9ad63350fe327cbe409c08f01a
- SHA1 652b7d29dcbd633282de7c2a6d39a0e718a4bb1c
- SHA512 084f44583fc16c00126ed4ae340fa041b9ebaccb4e041dce73da66c6ccfc4be726cde486f199c056e3e3342db87314407af392f33d9efdd29adb15974b2c785a
- SSDEEP 6144:5rPIKhCmvlwVuZa+hrctIWFXKxpFE0CqwHGYkC/S6C+/0UPiCTmRsU:5rAKhpvlwVuZa+hrctIWFXKxfCqwYC/L
- TLSH
  T1B3742927F69269AED21BC17889F7A333B572785D03317C6F5174CB321E20DA4276A62C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  SDL.dll
- Size 1.8MB
- SHA256 2e3065bbdeea3b954b409d96a24b925ab7984f2f15a67cd34b5e774d675e4462
- MD5 6acfa9b50ed9448d025d811b5f78d948
- SHA1 f2999079a34803a7b99f10f8d9cc180da3e1259a
- SHA512 8567ca9aae3e7acdf2b811ddbcd67f6834f7129cf3bdc78a49b38a46f9407e7ad8ebc48a97e3c1eda9c4fcbf997f6344c6adba8777fbbd157850e3e3e4f1a62d
- SSDEEP 24576:j4dVmGBgLXw2PvPdCi80yvPvo61FQtlD0pskBbzRTiNpo:OlBgDw2Pv1mvPWlD0PBbzRTiNpo
- TLSH
  T187957DCBF796CE5FD91603350CEB47213378E18423C7EB1B2A1896B42D273956F85A4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Uninstall.exe
- Size 525KB
- SHA256 0325caae308d73fc6f7b3e3a3de21fcdc4ffd18e76230ae8ee8928a56999b6ca
- MD5 65d89fc8960a5d095097c849a93a5efe
- SHA1 c3a35b02acc9922f4a26b52fb46221c2e1e4aa3a
- SHA512 57f0a192b7ade1e33ce0ff33948aa99a6fb4d9b5b25caea0d82d67b2e6d2c620d8c96cc69f7b9699f5f95ecd893138529556685953ff0a70777d874688697bd0
- SSDEEP 6144:xmR3kSaZW678d2aYd/RnEysweS9tvy7ETDzeFgR:xI3zIPpptfvzeu
- TLSH
  T131B48B96A2E45082D53CEE7250AA10E794561F2FCDBBC2DBD9ED76762032D781F0BE40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral11
- Target
  libFLAC-8.dll
- Size 850KB
- SHA256 b710b87ca63ad96c4a4d3201807624c266c757037fa61622b113030324b8e10a
- MD5 43c541620fb71d46644ab29d4daf2355
- SHA1 f24b28154f838cebfb461f671d58237f88a5c47c
- SHA512 b6d0f798608b0a887c572ec8054f28fb98aabdee32c3bfaa93c7d4fabae42cdbe317ff8e8cc1b5f22601e0612f199137dd69f781fe1afd2e810f120dbde4c63e
- SSDEEP 12288:hQ37b4h4brSbNuJJWvYGn9knheKZDD1Nn3MI8DpfhwReMKgAc4n:hvNBubIYTnkKzx8DdhwcgAc4n
- TLSH
  T16C058C9DF7D29D9EEA26427149AB83237735F544274ACF670A10EA302D13FC03FA6A51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  libfftw3f-3.dll
- Size 2.1MB
- SHA256 af27aac8163c106b8549d29b4895eda5cb243a2a2b83404d407c810bee18e695
- MD5 36efd33b3860007282a83f4eeaf9c4ff
- SHA1 4c58e592ab37ec054eace43b297632e16d93cdc2
- SHA512 af915d7cc953deff55d94b370975fe803b1db03b2b72b8d4eff408ac4dc4c197214b341be1d7a2d38271a77d664357f461fc8ecd9af56e1690b794a8a75778e8
- SSDEEP 49152:AMNi+stG6CCqwCy2D9+mtDfubpG3GTrx4JCbu:Vso629+6zCb
- TLSH
  T12EA53B42F6ECC9DAE13F6C3162EDFA2BB61134014D14099BA3F0899C5F667C42F9691B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  libfltk.dll
- Size 2.6MB
- SHA256 33515e361558bbcb098c34a9c1887f53b1c32e393c73aacfee576caab2c0f786
- MD5 e1bc70e49a20034b7b152b3fbac4d901
- SHA1 fd8d5f3b122f7633d5988fe506a18a37483e9c47
- SHA512 13522f1470606982fd3a04efcce107b2cb8780c867c2dd7f108955bff3b8891650831fcd24887b7537dfd06fe1349061524b4b9477d886e3fdf74c10ce483807
- SSDEEP 49152:lMkiuxzNB3WuNEHvIG4hg7CMJ/lVBppitwWo7Vb5EgtggL3xMe25CB07ktEE3k4v:vNEsQppRJhukkaXMjE1
- TLSH
  T14BD53A62ABE59C5BC96642349AD3D331B3F8FD425332D78B4640C2313E57AE07F86686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  libfluidsynth.dll
- Size 2.0MB
- SHA256 c1af844d0341256ae1647d4ac34e421c923101c82d9cc7dcf01423e99d627a52
- MD5 df3753f35250ebac4a926854895558bb
- SHA1 04f644ebf092d989aefe7389bf9e8f430c916fcd
- SHA512 19690eaec2a81b094d0caf938645c770ef25a933f62ef66bd8d0fc33fac7ba30340099117967dffb765ab10b5cf547da095643bd58568da1bbda290f5314de7a
- SSDEEP 49152:r0SkR7rATHjind6BPnBr6EBLwAn4jdwznJ9LPp+:gl0nbyjdw/Pp+
- TLSH
  T13E95594EA786CA9ECA5102314FA74728233EF5546773EF331EE852783C67B01EE52985
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  libgig-6.dll
- Size 801KB
- SHA256 3200b9740378b60df71076341af06d67d4ca3086219dea6c3a9d08b8d30d8620
- MD5 2a7e2c316655fcbbbe3d51f2cced6ef9
- SHA1 60bdff72a5029f9743f9fc1e8be95ccc4b41f89f
- SHA512 106c8c79bd833ddd8c5c55eeea8142e67ae26347c1b3c280371f8512fe65e473eb71f0b0dc040899c5ecc79e219b3f60b5c46c5fc68e859909825346d328fdf9
- SSDEEP 12288:Qc+GVNYzEJek9LRa/GTW+bBWGzdx8UmF96Lzc5y4xPs:1VIyekW/GTW+bBrdC796nc5y4xPs
- TLSH
  T101054A17F7A349BCC56BC13583D39772BA30B8194234BA2E1AD4DB222F25D605B2F764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  libglib-2.0-0.dll
- Size 4.0MB
- SHA256 23beec04ee5661ff6218452913b790b627ca20517380121b8c7cb82670aadf4b
- MD5 23955399aadf82b72d8efae1788ce50f
- SHA1 8157d01e662dfbb6501b6d0a27acef32059fcccc
- SHA512 df5de8a1359a7126833e7b82872d2ca3b8004a4e21cf26cdab964a397c640e9b06d9b250025f1e968ad344fb4346c347f69c9f902f09949d60e563f6318aa526
- SSDEEP 49152:Yne3wsWKYK6F5d0eVm7tCk67+wEUj3uHQtCevs+as:/HY9F5dstCkwEUT/s+as
- TLSH
  T10A166B0BA785DD5BCB5942708CEB43162732E5883B17AF172E4CD2703C6F756AE86B08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  libgthread-2.0-0.dll
- Size 165KB
- SHA256 1a468af306a8cfab2d6af7155a027aaa70b7a1c4220d79438fdcd47cb9b28a66
- MD5 fec8ff78c54b54adb81047798feda172
- SHA1 581361365b812132e6f596c04676ec05bf15407a
- SHA512 684195137f389c7b523568612cd87c772ff32ec9e34c0b4a7eddf8af86302ac4d160a997ac16a0fdcd160a023f5dbd3ad85d40cb58a468f3670d123c2de83504
- SSDEEP 1536:13j9gq7wpe+B8kmzpV77aMo1qqe0CclR/wClckMmimevRZxPI34Bt0z:13jSqgypVgqk/IvR0oBt0z
- TLSH
  T1E5F32ACEBB94CC8FD924023909E2C3252739F5D01B578B37ADF49B361E276907E89586
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  libjpeg-9.dll
- Size 1.4MB
- SHA256 2c0bca5099a1e733404f9797b0759253e82ffb0c0467b4f33fe17847c67e0a9b
- MD5 58ad32afc82f9ac17375aca8712c439d
- SHA1 b0271dfea0fadbfeff7c3e5e7e060d3e63da4912
- SHA512 2d946616967a94c002d20abcc9496dbab02d7e55fa2dfb5f9853e602587e4a3691f7097a7345c96cb77572b55734287724da9af558f9bc513191e1a86e057c20
- SSDEEP 24576:uQugxKAr4qxH7UQX/gXfg/zcysSbis8dklRIEn3:uQudvfmn3
- TLSH
  T134655C0FFB89CC1FDB5671785C629B0023A4E185B689DF1F2924B5F82E137235E69788
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  libmp3lame-0.dll
- Size 572KB
- SHA256 acaf6e5199b5cc0b532431128246e33f7875451bd1f330c7f1cb542941c5ffee
- MD5 e43f8709e1d23871916a2cee964ebd6d
- SHA1 baced9fb4b3db609b02347569898f0b7c9ddecfe
- SHA512 426fb75e3231b1387ac984ace449abb6ab698b251450d0d5bdb8843e2e1d1df8b4739c5a5cd239a05fba7b482f24e4d2e2cd779b3b36a8c84b51a20c60e81e66
- SSDEEP 12288:YeV1c9E6/7H+2t8/N+EOoYZZMQrB8R9ue5jNbSjt3W+PyppBXdo:TTm97H+TSBLMkB8R9ueFNbSjtG+PyppM
- TLSH
  T15DC46C82F2E1CDDEC422963442A6B727F234F4940761DFDB1B60AA385D63B906ECB751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  libogg-0.dll
- Size 164KB
- SHA256 8f9575386333681b02295c2c73d9568eb8b3f6c87db9e97e7c48a8b6e73d2b88
- MD5 b48307dc13b66115c10c54a52ec55adb
- SHA1 ba30911dc00b32cada0c954f74f0b3f202442092
- SHA512 ca9b3fb3cc9f86f7f7bfa7d704ed2462246b59b6d1cd6348e7c9c986cd84a6a220e09c6728dab892a98865107a07b468c784cc986a4f13d2a89e5da9b5126a66
- SSDEEP 1536:hZbBPj/GpBZRlU9gSo94/77V1w/cbqeri4o237ClbJwMmimTRHNoxTKbNjy7edyW:htBPjuRlrD9cb7nvRHI0NO7edyW
- TLSH
  T1FCF3188BAB94FD9BC920433648E7C321333DF18067438F17AA2896792D632D6BF95D45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  libpng16-16.dll
- Size 1.1MB
- SHA256 8b1930b423ac675e8bb06e2cbddcdba0ee082d952a128d8cd5cdd70065808cca
- MD5 0c3f21c775b7ccfbd73e3acfc82f1d18
- SHA1 583274d9ae0c24ab3c99c3a095e66e409b15b684
- SHA512 80862968c9695d002732f6cbb3631c42882a788f9931c9578f38f0c5e533551486bdcfd26e7a6c758bdfe34b5a522e1e66fff88272336b459bd7e0d46abe085d
- SSDEEP 24576:mc40/VYBEt7ElaoBjG1Cd/Zmuo8CfVA54BiS8Re:/zVYBEhElaoBjG1Cd/Zmuo8CtA5RS8Re
- TLSH
  T145458E4FBB40CD1BCA0A42704DEB57292739E1A83787FF5B1E2892B4BD53B15AF86144
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  libportaudio-2.dll
- Size 1.1MB
- SHA256 c43e65b2317b1b69f312556ba5a4e644bffda0bbbb78807ce518071e4b49ddfd
- MD5 5a08f2b6168dd7169154962f162464b7
- SHA1 573405639ab2526ef893186341ff40ec3c37e7e4
- SHA512 d5a82fa834fd2357cd4f9e33b65cf9b31e635b1e7828c33d83fe9beac2c0f3df325741573ee651fce5817fdd59e96c59b49763f1b2798659fadf37e0b114323c
- SSDEEP 12288:pWdRFUcoojsugmmSEJTtmtbUYpPsSECbof:pmFUcGugmBw+PsjCbof
- TLSH
  T10D4539A6B3919DABC61683B18CDF97202738F6482307CF1B4504D97D39577F2EE8A909
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  libsamplerate-0.dll
- Size 1.6MB
- SHA256 8cbf3cb1bfaa1679947a912fbe428fb9bacd927249234816d488d14eca4eb273
- MD5 738758695cdcc8947f9d9a987c207fd5
- SHA1 47aed67233766282c2ef18276ec1d33437230879
- SHA512 49f4433983c8aaa2a3dec8144e9395be10a835eca984663a3c951543a9b11bc99cdbb96d47d39ef9156a10603e092daeb16c785130d01edff5a4a40d6e9c5619
- SSDEEP 49152:PAPrdudcpo42JKsDxi3EjDox9ToCQWcRxXdi:P+0g2HDE3EjErToZ7RxXdi
- TLSH
  T1637512965B91CE4BD8208232D9D6C3286736E3D937CBDB471D18E4342E77286AE853C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  libsndfile-1.dll
- Size 2.7MB
- SHA256 d834cca7affd8e7e542d36ad92f649e4f420bdea729c54c233fe639a304458c9
- MD5 ca55ffc4777f2dd604da597e28cd8846
- SHA1 8af76b22014c325f4308109f4e3da912378a4495
- SHA512 66bdd66261941189177430e440f3a699a94643e1aac51008c828a625e884d42ce7b1c1aaf5bb4ac8e87dd3eda1a3563828f8949827b02bcd241d8f0c157a9e29
- SSDEEP 24576:xxqPe6cHpPtIpL/VgkNj5G+T5G+neXg76onyWWMI65EW9ZcI6sTHd79lUu+xvuRU:x2wt+/uIG+1G+J5pGl6BvaNTvVxCkce
- TLSH
  T132D56ACAE791FE16C93543B40CE747392334D08563D39B2BCAB8A1B0AC57B746E81E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  libvorbis-0.dll
- Size 376KB
- SHA256 1a5df9308cc6247747fe242a2f12ed7afc6460406af32162d6fd9be228f1610d
- MD5 e9dd12292b0bf45acb573c5fc3e2afd4
- SHA1 c0325b076685c5438a084e8c970fc98d50f3b264
- SHA512 0da0c4ef63242f6b447f1d73ddd5093ba2f49edebf362df0e2add052d04193d38fd061020a3d62af5f66696b623afd44bac35629eb9b70bad5bc563ccf1e7b2f
- SSDEEP 6144:4uQEU8uuDwl/FlQfHY32UbaV8a4/VTQRNASxqAsXdyp:bQEU8MxgE2UbaV8R/VENNx0Xdyp
- TLSH
  T1A3844AC2B6999CDFC8E6863441AAF327F334B58C23558F532B6096F81E17F906EC5642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  libvorbisenc-2.dll
- Size 778KB
- SHA256 d073c6b7861b77b59bb4286fe0474e824d544438a6a3d903b914a480a8a37012
- MD5 7f688502911d55204b2c1bb6ae3ee131
- SHA1 9cb42153a19ebc0823da8d6520e703f59bb51a72
- SHA512 cc109df714a1f51d0b9098d06df19ecd3d514444052495a9ffc39f5ceb065d87d39769b50126c56a68d297b06711d3a6fad959e649653ebc13de9b7f001b82b2
- SSDEEP 12288:HPLHz8Si1x6OHScQ5RcayP3XaVexu2k7d8:Tz3i1x6OHScQ5RcF6Veg8
- TLSH
  T1D505FB13E6D2AD53DBE412364091E6312631BCBCD7D39BB33C94B97CB9A72C41B69620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  libvorbisfile-3.dll
- Size 150KB
- SHA256 5d061c46abf64dc33718688fe3e5bead3baff4ce028e1052ba9924fdbc24e3b0
- MD5 9cec6b1e262a94b035d381c19d0abdce
- SHA1 b33acae432d55c473e39e027023d81c9b1a597cd
- SHA512 b5ba552874046433ff93948bc2f74a71630d69275760e58dc7af449ef17be1a9916b0a8f603ad8591c1f54eddad9f3d8f8a40f8a0e0fa77f223d621c4964eebc
- SSDEEP 1536:6aljYkbHiSXC+ZQ8gY1VSjsTvA+q0rO7QtBCYKXbQQzKYCl5MxiWVRigq7G8r7:6afziSQ8tKjsTvAYKl5RiZ7Pr7
- TLSH
  T17FE318C67BD5DC9BD926823A45D6D322273DF0801B438B176A349A355F23BE07FC8682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  libwinpthread-1.dll
- Size 302KB
- SHA256 1466a080ebcbe94913976b8099b750a9e7177700e098a3a74027b8049e67cd87
- MD5 5ee4f1ac1aa28e38e00c75330c4c7675
- SHA1 51857daa9e8757e4a1729bf930c229e88832d981
- SHA512 3a69f0524594ac9112b34a749f60ca5d8c20eb66d17d2e3da1981115871ddcc892f90bd76d27c88597ca641a28b7d94d71495482f810de2d4132f955d35cc3b8
- SSDEEP 6144:tD4fcuVZimcYKbjb2ISCDKIvE7nLt7iQIBT5bO2ZFU+q6hjxK:Vu7imcYKbjbHSGjspDYVOkFU+q6hjxK
- TLSH
  T180641ABAB794CCDFC521463588B74321233AE19027478B07AE24F2742E6B658FFB3585
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  lmms.exe
- Size 3.7MB
- SHA256 99d8c322066c8ff25c1bfd6f3b9c5b7757d8a80cd62bdc1c7e06f6cfa01332af
- MD5 3a1c41955ab982d0943f549bf9db57fc
- SHA1 ecdecee21480b102e5b41ae6ff3524e01d00e5eb
- SHA512 3fa1df7baec92e3e227a195b22ffe397639a514261b33fe4d403d78c39058aace35d8f7036885e6e7de1c889f072dfddf404e60597ef9dd8175fe29045a4dfa5
- SSDEEP 49152:+qzgtrLchznAMuc4pBmOt/2uigm/G13ev1a/1mYbH5nJ2ylzeMjv8gkzXFxul47G:+L0hlOt/79nJ2Ym1Sd
- TLSH
  T10306F607B651909EC42EC93842AA5173B4363D6F8A71995FC1E4FBB51A30E702F6EF18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  platforms/qwindows.dll
- Size 808KB
- SHA256 82e42d65debcae3120863071a536500684e3e50c2e6f6d2b506654c9fdc20095
- MD5 f22a7466678ad312d01cb1b804ad3af0
- SHA1 5e6447e952cbada0ce94c3be74180cbcb27c902c
- SHA512 d81db7fc3b3acf2b3bd9910fffda669755880d96db376928d65d1089b85220795637f39b3e827434224b85b721d751f000a7c3eaf2221a4421c8f05f8d7961f6
- SSDEEP 12288:sZe0mZDeH1mXjOC3ksUtTLLR0m1iK4sosMWZZ3EnFg:BAmBStTnn1iV9Wv
- TLSH
  T12905F857B763359DC42EC23842D76332B4357C5A1271AE2F2660CBB67E00EB2672A71D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  plugins/32/Qt5Core.dll
- Size 5.1MB
- SHA256 e198f1f271edc524f4ee0049d02b578e0bf32951f46effff4b79405e1b362f28
- MD5 12705089c88634bac5d1a48c1edd9e9d
- SHA1 d7b503848bf50d260233ea30d4db69bb5081ab0b
- SHA512 13b889026a62c2153e6df1c48fc9037631468fe1bc0363bad69453223360656bce63278bc231d20a59d2c3fd7632d0519664af17cf70bfab6a1a887635ff2a51
- SSDEEP 98304:8IIE6rtpj9oj3c46whhEECNMIqtsoeK1ncVxYmwJsv6tWKFdu9Ctltt:+HQhC/VxYtJsv6tWKFdu9CtXt
- TLSH
  T1C9365B15E783C1B5ED6345B1440BFBFF95302E218422CC5FF6A8BF48EEB2A51251A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32