General

  • Target
    SodaMusic-v3.2.1-official-win32_x64_exe
  • Size 155.5MB
  • Sample260629-hayxmsgz2p
  • SHA256 ed838d996c985bbd3f091e33ea2242a9e217c3032828f92e44030932ece4b2d9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      SodaMusic-v3.2.1-official-win32_x64_exe
    • Size 155.5MB
    • SHA256 ed838d996c985bbd3f091e33ea2242a9e217c3032828f92e44030932ece4b2d9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks