Overview
overview
7Static
static
3musicprese...er.exe
windows10-ltsc_2021-x64
7$PLUGINSDI...ns.dll
windows10-ltsc_2021-x64
3$PLUGINSDI...nu.dll
windows10-ltsc_2021-x64
3$PLUGINSDI...em.dll
windows10-ltsc_2021-x64
3$PLUGINSDI...fo.dll
windows10-ltsc_2021-x64
3Music Presence.exe
windows10-ltsc_2021-x64
7Qt6Core.dll
windows10-ltsc_2021-x64
1Qt6Gui.dll
windows10-ltsc_2021-x64
1Qt6Network.dll
windows10-ltsc_2021-x64
1Qt6Svg.dll
windows10-ltsc_2021-x64
1Qt6Widgets.dll
windows10-ltsc_2021-x64
1concrt140.dll
windows10-ltsc_2021-x64
1generic/qt...in.dll
windows10-ltsc_2021-x64
1iconengine...on.dll
windows10-ltsc_2021-x64
1imageformats/qgif.dll
windows10-ltsc_2021-x64
1imageformats/qico.dll
windows10-ltsc_2021-x64
1imageforma...eg.dll
windows10-ltsc_2021-x64
1imageformats/qsvg.dll
windows10-ltsc_2021-x64
1launcher.exe
windows10-ltsc_2021-x64
6libcrypto-3-x64.dll
windows10-ltsc_2021-x64
1libssl-3-x64.dll
windows10-ltsc_2021-x64
1msvcp140.dll
windows10-ltsc_2021-x64
1msvcp140_1.dll
windows10-ltsc_2021-x64
1msvcp140_2.dll
windows10-ltsc_2021-x64
1msvcp140_a...it.dll
windows10-ltsc_2021-x64
1msvcp140_c...ds.dll
windows10-ltsc_2021-x64
1networkinf...er.dll
windows10-ltsc_2021-x64
1platforms/...ws.dll
windows10-ltsc_2021-x64
1styles/qwi...le.dll
windows10-ltsc_2021-x64
1tls/qcerto...nd.dll
windows10-ltsc_2021-x64
1vcruntime140.dll
windows10-ltsc_2021-x64
1vcruntime140_1.dll
windows10-ltsc_2021-x64
1Analysis
- max time kernel
149s - max time network
123s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-es - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-eslocale:es-esos:windows10-ltsc_2021-x64systemwindows - submitted
01/06/2026, 01:07
Static task
static1
Behavioral task
behavioral1
Sample
musicpresence-2.3.5-windows-x64-installer.exe
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral2
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral5
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral6
Sample
Music Presence.exe
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral7
Sample
Qt6Core.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral8
Sample
Qt6Gui.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral9
Sample
Qt6Network.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral10
Sample
Qt6Svg.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral11
Sample
Qt6Widgets.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral12
Sample
concrt140.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral13
Sample
generic/qtuiotouchplugin.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral14
Sample
iconengines/qsvgicon.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral15
Sample
imageformats/qgif.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral16
Sample
imageformats/qico.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral17
Sample
imageformats/qjpeg.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral18
Sample
imageformats/qsvg.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral19
Sample
launcher.exe
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral20
Sample
libcrypto-3-x64.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral21
Sample
libssl-3-x64.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral22
Sample
msvcp140.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral23
Sample
msvcp140_1.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral24
Sample
msvcp140_2.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral25
Sample
msvcp140_atomic_wait.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral26
Sample
msvcp140_codecvt_ids.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral27
Sample
networkinformation/qnetworklistmanager.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral28
Sample
platforms/qwindows.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral29
Sample
styles/qwindowsvistastyle.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral30
Sample
tls/qcertonlybackend.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral31
Sample
vcruntime140.dll
Resource
win10ltsc2021-20260513-es
Behavioral task
behavioral32
Sample
vcruntime140_1.dll
Resource
win10ltsc2021-20260513-es
General
- Target musicpresence-2.3.5-windows-x64-installer.exe
- Size 19.4MB
- Sample260601-bgswmsc19k
- SHA256 2609f9d126a574baf70e85b53c5d3042824e3728c906fca5528c1edd684181d8
- MD5 59480b39e7678ed5095a7042e98a1f25
- SHA1 2d6a660a909b8d34164b7d41007aa4bc8a0244eb
- SHA512 e23b6882be997d942077e35d58d411388bd07b6bef8118a49b36af2bad58966a1f47ce54e2a2c805b69fd40a8f8fa0084d147e07b9b6c5f8ab3f593b8cbb9f16
- SSDEEP 393216:yftw2PCg+Y75dsSLIwK4b2qzRw1vRK8VC0AWS/glFeGqM8:ysg+YF9VK4b2cRw10mzA1/glFDM
- TLSH T1AE27339B1240EDF3EC618AB1DFB2A1A53199F11537DAD2DB5412D60C821E98C7F423EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
pid Process 2064 musicpresence-2.3.5-windows-x64-installer.exe 2064 musicpresence-2.3.5-windows-x64-installer.exe 2064 musicpresence-2.3.5-windows-x64-installer.exe 2064 musicpresence-2.3.5-windows-x64-installer.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language musicpresence-2.3.5-windows-x64-installer.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsyF473.tmp\InstallOptions.dll
- Size 15KB
- SHA256 89dd7d646278d8bfc41d5446bdc348b9a9afaa832abf02c1396272bb7ac7262a
- MD5 d1eefb07abc2577dfb92eb2e95a975e4
- SHA1 0584c2b1807bc3bd10d4b60d2d23eeb0e6832ca2
- SHA512 eaffd9940b1df59e95e2adb79b3b6415fff5bf196ebea5fe625a6c52e552a00b44d985a36a8dd9eb33eba2425ffea4244ed07a75d87284ff51ec9f9a5e1ac65e
- SSDEEP 192:E6GQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT311929WtshLAzgSrX8:E6Nt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH T186624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E4678565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsyF473.tmp\UserInfo.dll
- Size 4KB
- SHA256 a921cc9cc4af332be96186d60d2539cb413dfa44cfd73e85687f9338505ff85e
- MD5 f8b6dd1f9620be4ef2ad1e81fb6b79fa
- SHA1 f06c8c8650335bace41c8dbe73307cbe4e61b3b1
- SHA512 f15811088ecde4cd0c038db2c278b7214e41728e382b25c65c2eb491bc0379c075841398e8c99e8cceba8be7e8342bc69d35836ebe9b12ebebff48d01d5fa61a
- TLSH T1A78173BB92E40CF3D0A44BB740A71CE362B5DD301762001F4A478AAA2590B67EE7E715
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsyF473.tmp\ioSpecial.ini
- Size 1KB
- SHA256 8d052a732b3a1b9a5398525390e697b52894f146e10ca387484e1841b6be7070
- MD5 8938be851f398caf37f903e528c90ee3
- SHA1 30c64daf6aea581746f59bdbec5301f47400466c
- SHA512 1249cdcea4454e50bedb7c8d9d5ab167379f0539fc21f69ee58317e204000ba66ca7815c072caee068738ae98619f6986551a7bdee530fb8d60263b82bd29e9b
- TLSH T12D216B126AE85615F2F7BB08EAB541348B2A7C519C3DC40E82D00A4E09F5E80C976BBB
- MD5 SHA1 SHA512 TLSH