General
- Target Music.exe
- Size 87.1MB
- Sample260620-d8tclaes9y
- SHA256 05400669f894325deec83a1e135eb0b194228591d737dfa25f4f5a0be1affa12
- MD5 32d78bb7f90d4392f04451633a030184
- SHA1 5f82805cb4d421b79af029ba6252d3fecb15d879
- SHA512 90d93dd19d944e0f0ceb9c8cda40220088131ae9063aa793d314b521f3262125f753eec8e84c5b51d406bbd7316594407603000c65c3a3766291fd5aed89425e
- SSDEEP 1572864:WDq/WTIAiKLfPOwuuYr5oTfQgfHtcaSc/JUNnN1hadunnd9lkqWXYzfggqodaMpJ:DWNj/uv6TfNeaSc/iFpd9lkXY/pF8
- TLSH T1B01833499D42E283F56EA437C9B7CB15D432BC9C2A925B4D5B9000B53DDB3CA0E7FA12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Music.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Music.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260618-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Music.exe
- Size 87.1MB
- SHA256 05400669f894325deec83a1e135eb0b194228591d737dfa25f4f5a0be1affa12
- MD5 32d78bb7f90d4392f04451633a030184
- SHA1 5f82805cb4d421b79af029ba6252d3fecb15d879
- SHA512 90d93dd19d944e0f0ceb9c8cda40220088131ae9063aa793d314b521f3262125f753eec8e84c5b51d406bbd7316594407603000c65c3a3766291fd5aed89425e
- SSDEEP 1572864:WDq/WTIAiKLfPOwuuYr5oTfQgfHtcaSc/JUNnN1hadunnd9lkqWXYzfggqodaMpJ:DWNj/uv6TfNeaSc/iFpd9lkXY/pF8
- TLSH T1B01833499D42E283F56EA437C9B7CB15D432BC9C2A925B4D5B9000B53DDB3CA0E7FA12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory
-
- Target main.pyc
- Size 75KB
- SHA256 0c578d2538c80cbe75c961a8b6a803f4d5e5a1c361ad0c82a727569aa52b4317
- MD5 44821f07e75c4ec364199d614b0d1aeb
- SHA1 f2452f1078606c8424cf12891127bad503ecbc65
- SHA512 e31afd36b3df9e1f28ff32f21d60effebc104625cdc56f69f31a10effb6274225b2dd239b8652609b2a7270ddeab1132782fc01edc5f032f810652aa8836cefc
- SSDEEP 768:EVpWB8RWzp7FsJR0Ex+HNqvdvKXa0MQt5lLiIXclv67ulvSaK:EPWB8RW5E+tqFvKXZvt5lmgkv67YvVK
- TLSH T10573E67AA9B89A1BEDC5F535B1C1CE95F712800267118343F62DACFE3ECD269094932D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10