General
- Target SodaMusic-v3.2.1-official-win32_x64_exe
- Size 155.5MB
- Sample260629-hayxmsgz2p
- SHA256 ed838d996c985bbd3f091e33ea2242a9e217c3032828f92e44030932ece4b2d9
- MD5 87f07358b7ed705080514d532f8a4e35
- SHA1 3c29d768d7ceae5065da4a06e0899c087750a0b0
- SHA512 19d2cc2244cd436a4ad06702db90e298bdbdb784273e0d11389510538005c96b0a32b5b4a4506510b1df3bb859e656fa0ca8b8f54784a98f6c24779acd81efdc
- SSDEEP 3145728:h0FlQWBz4z0wyYZThz8h66B9+QnrGZZjxocJVZpkgffGdaZ8kmPQWxtiz4kDsEhh:OVMzmY/C6sabjmcTZpkg3GdPjPvtIsEX
- TLSH T18E7833C80E96EB45D4B942B37484E2B9FD4E6608505E9C885FE19CBEF142DE34E3943B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
SodaMusic-v3.2.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
SodaMusic-v3.2.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target SodaMusic-v3.2.1-official-win32_x64_exe
- Size 155.5MB
- SHA256 ed838d996c985bbd3f091e33ea2242a9e217c3032828f92e44030932ece4b2d9
- MD5 87f07358b7ed705080514d532f8a4e35
- SHA1 3c29d768d7ceae5065da4a06e0899c087750a0b0
- SHA512 19d2cc2244cd436a4ad06702db90e298bdbdb784273e0d11389510538005c96b0a32b5b4a4506510b1df3bb859e656fa0ca8b8f54784a98f6c24779acd81efdc
- SSDEEP 3145728:h0FlQWBz4z0wyYZThz8h66B9+QnrGZZjxocJVZpkgffGdaZ8kmPQWxtiz4kDsEhh:OVMzmY/C6sabjmcTZpkg3GdPjPvtIsEX
- TLSH T18E7833C80E96EB45D4B942B37484E2B9FD4E6608505E9C885FE19CBEF142DE34E3943B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory
Enumerates processes with tasklist