942aad800fd45a2bcdf737460872f13b9d3ffbcbe0e841ffdd16e304d7eb7649

General

Target
voicewave_installer_20260622.1782149848318b5507780.exe
Size 2.0MB
Sample260701-pgmlhsdy5m
SHA256 942aad800fd45a2bcdf737460872f13b9d3ffbcbe0e841ffdd16e304d7eb7649
MD5 c34c0487985f82f769934b264e4aa9b0
SHA1 3349226c4fab814e14092a28ffec1fe56a281cfa
SHA512 36f9ef56dc5354627e8e31445f49f87c8e9ce2f7bff88f94d6dfea54d334431280ba9bbe7c5434f03555116b9e68849a4609ef566e6e9692932c0f8cb05c1bda
SSDEEP 49152:d/QgXsq73YGNtR3feQYsQVPTGKRo8PChvSfhxpPa/Nn:dBR73YGNtxfeQYsQVPiKbPC4fNyVn
TLSH
T1C195016D4EE2758EC651D87AF7F5A57C489A4E36CC2201C17685204CDF29B83E98AF33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  voicewave_installer_20260622.1782149848318b5507780.exe
- Size 2.0MB
- SHA256 942aad800fd45a2bcdf737460872f13b9d3ffbcbe0e841ffdd16e304d7eb7649
- MD5 c34c0487985f82f769934b264e4aa9b0
- SHA1 3349226c4fab814e14092a28ffec1fe56a281cfa
- SHA512 36f9ef56dc5354627e8e31445f49f87c8e9ce2f7bff88f94d6dfea54d334431280ba9bbe7c5434f03555116b9e68849a4609ef566e6e9692932c0f8cb05c1bda
- SSDEEP 49152:d/QgXsq73YGNtR3feQYsQVPTGKRo8PChvSfhxpPa/Nn:dBR73YGNtxfeQYsQVPiKbPC4fNyVn
- TLSH
  T1C195016D4EE2758EC651D87AF7F5A57C489A4E36CC2201C17685204CDF29B83E98AF33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1
- Target
  $TEMP/downloader_easeus/1.0.0/46free/EDownloader.exe
- Size 1.2MB
- SHA256 6d2d20f4f89b01d146407f5569aa75758ace2a1796457bc1bc3fe13082c9150c
- MD5 12aeda75bcb5b9dbd13bd85c0181aca9
- SHA1 964d92810d8f42bb16b63a37406a4d9457ca6f27
- SHA512 bf53d9b800d0b71c0a5b4305ca0ce661af0af0ab1e4a0c35dbdc6febca219ecf261886831254e592818afa90618a2ce2f8f6050a370ecbcb6a848bc7206434bf
- SSDEEP 24576:+0TDvES51nIHFifKcXEp/YV2tlUkLXcYnbqrQBuVvgC3m9Pf:t3bXGllXcYbbBuVvgC3m9Pf
- TLSH
  T1BC459C60EBD381B2E09704F46DBFB37E99397664031585C7E3D01D2A0E616E2BA3539B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/downloader_easeus/1.0.0/46free/aliyun/AliyunWrap.dll
- Size 476KB
- SHA256 bc2f1685f7157336027d370718dd2428c8a3883450a6191979d22745c3bca7fc
- MD5 1ff4ff46834cba11482fb5d0f8c533ab
- SHA1 6295fbebf55542839454c1a54c3e00355f020043
- SHA512 659604861088c164d53d87bad6bbd24ef01c539d63322da541de29b9d14398c484396b16f627d2fb32b6d9b934e7a4b4a25bcfecadf9d13a7db4d9e97086c583
- SSDEEP 12288:LaK0OuDBlYPIj/q9DQsEfExtrlp87pMaIPuboWMlyF0P/:Z9DeuBc/IPu8WMAF0P/
- TLSH
  T1B8A4BF53AA81C1B3D18A017517B6B77B2E39A7355324D8C3F3D81D785E206E27A3938E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/downloader_easeus/1.0.0/46free/aliyun/AliyunWrapExe.exe
- Size 101KB
- SHA256 015b2652280118c2c5016fec99fc542e32fd39ddfc9df513fe49677fc9bf6d42
- MD5 1b6da142052f6736f7a657149de75bee
- SHA1 1affdaa5faaa6844e6f47e5827ff351975be6cd3
- SHA512 bf4eeff93839045d71115e7b7b79755b0b871ceca221a3eaedcccb19b9492672f04ee166192809ecdaa1575160bf2516fad5f5062520613dcc1f062577ae3555
- SSDEEP 1536:x554a+kMgHZ73LkUluTbDJgX+oLENoN2CraI9WkF1X8OEdlg5BaAUY7BB:CswTbD6LLraInhEdlg5BJUYdB
- TLSH
  T1FDA36C217980C032D8A714738EBCDA69966CF9311B5599C7B3D80B6E0F61BE0BF31267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral4
- Target
  $TEMP/downloader_easeus/1.0.0/46free/aliyun/InfoForSetup.exe
- Size 60KB
- SHA256 e23e375713ec4d7372dc3fababfaa612ecced4f207e7bd68ce5571a21499e2bd
- MD5 af8a1f5caf9c8411d3eee07007450910
- SHA1 5a3c2bd68f6e180920e94319f305f56defb995e0
- SHA512 feddc353f9f8ce519f88fe8618c52b30eb6dd9a21391c295b95196183be010bbc03d3b605df72936804fc724b7075bc52af153c0ae477966bb7aac046a9da55e
- SSDEEP 768:6Vyp8XwXEXrjOgRXvLH4IE3jDnIoiiBbIADgykhUMId50BLbCYiBwa:6ECwXShvLYIE3nnInie2khc50U7Bn
- TLSH
  T1E4538C127891C032CC2A44B55D34D7A09F2FA92217A498CB7FDD1ABE4FA17C05B3636A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5