ad4ff13510f9b987d11fc18f22cf6a63621552dca3a938a958d71b612a2052fa

Sharing

Copy URL Twitter E-mail

General

Target
Ableton-Live-Idea.zip
Size 428KB
Sample260702-nq27wsg151
SHA256 ad4ff13510f9b987d11fc18f22cf6a63621552dca3a938a958d71b612a2052fa
MD5 f120c2c6aa9acd32a8811d72d100e851
SHA1 658247b8c8089a1aae97eb2f86e40ff794741224
SHA512 7a732003a891802aadcee85220bc703f75c644ba576e937649453b41b2b3f931befaa24a162af222c2163fa2afc695f6ffcd7512fbb3d609532079cecc8d2b3d
SSDEEP 6144:E4aSQblGLM4Yg862T+otKEUYrR1GqZK3X6h8R73SC1ympmEfKpQonI/C5wbPhT9L:TQpvf6otCeR1cEEfKvI/C6bha0//
TLSH
T17A94238139669007EDBF55725800F28F6AAE8AD64A43842ED7C3F17D7D0709B1963BCE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Ableton-Live-Idea.zip
- Size 428KB
- SHA256 ad4ff13510f9b987d11fc18f22cf6a63621552dca3a938a958d71b612a2052fa
- MD5 f120c2c6aa9acd32a8811d72d100e851
- SHA1 658247b8c8089a1aae97eb2f86e40ff794741224
- SHA512 7a732003a891802aadcee85220bc703f75c644ba576e937649453b41b2b3f931befaa24a162af222c2163fa2afc695f6ffcd7512fbb3d609532079cecc8d2b3d
- SSDEEP 6144:E4aSQblGLM4Yg862T+otKEUYrR1GqZK3X6h8R73SC1ympmEfKpQonI/C5wbPhT9L:TQpvf6otCeR1cEEfKvI/C6bha0//
- TLSH
  T17A94238139669007EDBF55725800F28F6AAE8AD64A43842ED7C3F17D7D0709B1963BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence
- Drops file in Drivers directory
- Manipulates Digital Signatures
  Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Modifies file permissions
  discovery
- Drops file in System32 directory
- Modifies termsrv.dll
  Commonly used to allow simultaneous RDP sessions.
behavioral1
- Target
  Ableton Project Info/Project8_1.cfg
- Size 459B
- SHA256 6e62b03977a1f75e9b6fd2eaf057b4e80ad815741cde67b0e9877aa527965863
- MD5 2e26829d9908532d696ed53cba1b6f01
- SHA1 37ad50c4856f5c3b4655cc19534cff28b87c71c6
- SHA512 1a57cc1a02125e201e55d7cf4d17b3d0d0d52ae8ca2e2e67e5fcc0def97f0475d76f24da94acde35f15386178a922dade40ed193749e5586f31e02b171a9b950
- TLSH
  T1F6F0651B5BEE00A8F3FB1BB5BBFA505689723D195B20D83C1642164F0931955F5E0737
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral2
- Target
  idea_Thu_Jul_02_2026 Lessons/Clip.png
- Size 27KB
- SHA256 4f6fab1758a98b0af16bb4a307ded4505a6642d69bc478766c26dfc663ca979f
- MD5 192ae4663d39e32a91581193262a1141
- SHA1 22518bfe9db21e770e50c0e933bdb7a2d58a8cb5
- SHA512 e9e06e2c4699ceefa95e239a8aab4bebad62359b0cc5ab20053cdcc56536c6cc083746238338f0c945106072bc6b673b66da6cfec234fb92e137a4c02aa30070
- SSDEEP 192:ES0tKg9E05TMk625fi38o4rmxRWxIwlNG53sJeiDV9Cv/JrUXXvxZ0K3goxrKjql:4XE05z625qslrRcc3B9LJm05xroEen8
- TLSH
  T146C2C03EBCB0B678495CBD321CC82501FF744287E991AD0579CCD85A2F11F954E6B196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  idea_Thu_Jul_02_2026 Lessons/Large/Clip.png
- Size 31KB
- SHA256 b8bf94d2c119354a294337be0d0da370eca3a4f8c6689a3be2fca3863c1fd33c
- MD5 dd4f2e3f1abb8ca987494c98113521ee
- SHA1 3db2b57ebc1d38a11d02f21909b2fbf7edfae05a
- SHA512 d65fa681708d04d20be5ed46fea787d4d05dcd37497e2797662771943ee1c1e6fcb8ffd0678e028dacbb1f46a35aa52344351c47e65c68dd8caeae6e71839982
- SSDEEP 384:6XE05z6u5Fp2O8YiSwSXoqPma8prE4cGGv1weXlcPv7aTneGjL:A35z6zYiSwSXo7NJBc7v1wEOoneG
- TLSH
  T1BAE2BF50FEB0B89CC58C62350ED70501BCBA879BD4625C4AF6FC785E7F127474E0A9A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  idea_Thu_Jul_02_2026 Lessons/Large/MasterPlay.png
- Size 338KB
- SHA256 baf6673619052eb6f3f261e13df298450c065967b85d3939c2e8d1c5e618fff6
- MD5 4df3bb23c065e990350b9ed53ed212be
- SHA1 6009cf7b7150cdd48e2c1ed3845ba745c8bc5287
- SHA512 9b497038b778007eea2b79934494b6cd66956fdc385bdaf0efca478b3c8055b934b85580d4e14a68021611878c568c33579f31f927e1e1688331bcf86288be20
- SSDEEP 384:YXE05YXv5JIvYP/A7ZQdFSjdaRfZK6joAOfAmANtmXRprrzNi:C35YXYvYP/tMjd4fJjofm
- TLSH
  T1E1747127FE81F566C8485B3149A6DA903772B44A6E538B0B31DE7B7DEF7A3C11E42110
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  idea_Thu_Jul_02_2026 Lessons/Large/Notes.png
- Size 32KB
- SHA256 c8285a2b53dc1d617d6539422e08163c793fcd6edf3bddc6419d235c3819e51e
- MD5 d776ed9cc8180ba12d3013528965a982
- SHA1 1101b2a67103d1bf79a408b287b9246432bd070e
- SHA512 3fbaec501874b57e5c479a85344f46f0d1262aefaa2374f9a4a21d59ab2c2e2c24d11a7e2b8eb675497c9e03dc929f45b4b59c4d497028bb3b66cb4ce2f618d8
- SSDEEP 384:iXE05o6j5SMMjvopeTCAePUYZZwVJtvzdb8dj4/HyIUzxoL:o35o6oMMzieTDePHuVJtvzdMjiyIUzxs
- TLSH
  T1FFE2C0761C30F44A174A69727DC48C451BB3024786910D44F9CFA8B91F76B6B8FEF692
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  idea_Thu_Jul_02_2026 Lessons/Large/PlayButton.png
- Size 26KB
- SHA256 92e5f0beef83f3ecdd84f2bd7837d058a5e0fc526f4a92e6bbab94ed0631ecfb
- MD5 6ed763faa9f7272f7b3274397df96231
- SHA1 01e0ba2133ff46d4f1456337168f62c002724da8
- SHA512 8205c26af7b8edd11c28060443b81f826b81190025e852a1db84e6eba2e48d78dc422233cfa41e2673f018db12378f91df64a647494f759e70ce554486d98ad4
- SSDEEP 192:qS0tKg9E05TTkXN5vU1iMewwPOIA+4jq17OyapXtW7Lwp9LAwucQqXzXOiZ:eXE05MXN5gsmIA+banXtW7qbzQqXj1Z
- TLSH
  T18BC2BE456971704B1CC67F702DC62006EEB7A683AD849D35F1EE64DF1F10BA20E8F98A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  idea_Thu_Jul_02_2026 Lessons/LessonsDE.txt
- Size 1KB
- SHA256 7f301c9929a1d099a079e7dc5696267653b79d52b42b6fbdc112577a03e5d8f4
- MD5 232a165d619ba9bfb29b3cee96f40c94
- SHA1 30042aff1c4374bee0b3b24524b13cb8234c2c4a
- SHA512 02cbbd72dd6c518e88fdfb7e81dbba5fa1160d9e226ea30d93f7e7373e18bf8f7effa2f93267b6816d01fe0c204317619459457b8f63bf89962b505c41a36e57
- TLSH
  T1992111E6E4C36299C61371267B111D63FB48E11D818E7A18505ED276BC8B6F7C0AF8B4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral8
- Target
  idea_Thu_Jul_02_2026 Lessons/LessonsEN.txt
- Size 993B
- SHA256 0cd7813933d219362723790c6f88aaf3abc94e9452497520dafa8a2f6b1f5f5c
- MD5 11bec155b8063d10251773e9b9890e07
- SHA1 e6ed05588a19cbdd18131ed7ffbaae4c7a6434c7
- SHA512 f608af89332aa15610cc9df9ed3e9e7f5ffe0b76d2c34dc076aafb13249f802411f146c32f284e0391fed850fdb2eb0cfd375b2805babaf985f480c57f5c9ccb
- TLSH
  T1761154EF811F6B3589320007A35BF1F3FB148059C2E857A1F44841BD78576A3A1FA8AE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  idea_Thu_Jul_02_2026 Lessons/LessonsES.txt
- Size 1KB
- SHA256 7f1659a07e6a5395e9541d539210986ae8d1ae7aeeaa7cc4a3a59d945eba08c1
- MD5 c401c252a7a45f6d57a28862d37c9845
- SHA1 86f80ebad7fd8b2dd336d983cb112ddb6154a6d0
- SHA512 38e4c9eb9f07e4ae9a62cb0c9e246a8eb3438b6e71d9365c67d2081ffcf2baf27a33f9b17224ca8565f9478f40a5b01e860a8d31d105b5da644c80732c7fcb09
- TLSH
  T1172133DB82912E8785C3320263D1D1D3FD58C0C46256F536C4CFDB21EE84A5DD57E954
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10
- Target
  idea_Thu_Jul_02_2026 Lessons/LessonsFR.txt
- Size 1KB
- SHA256 faec342f06baf0bec51f74e5c6cfd6c28e414f493c04d68a878dc1e8ba212de7
- MD5 988716c0169367aff287c28a41714277
- SHA1 b523e149f55b4585f0ec2b39d8461cfadf47cabf
- SHA512 72c49ced6142f45fbf79fd0e7b27714deae58b8d86301601962483a80ea3c93065059c53ac91cbe11831ce8049fae40f7e4d47d134507b9f6d12a190d85d469b
- TLSH
  T1CC213F8F0241348E44E2B01ABF4142C2BC44C418C2AAF338A84603604ECA86E66EF8DE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11
- Target
  idea_Thu_Jul_02_2026 Lessons/LessonsIT.txt
- Size 1KB
- SHA256 7bf41a1e3b0cb632d7f1e65a300e324d5eb3aa17c24074cd21ab43ff70ccf441
- MD5 848b056134cca990dac6f2b835436bbf
- SHA1 f49fae1734786635a696d1a457e5d720028dc35c
- SHA512 87b34579172f7e3fde99f33b4acaae937804020bcb652f89a74a4cacdf7a71e56235a279c6fe4b824eaf81f3228b0e1a4d62d043d962675c61c7f18ac251cfeb
- TLSH
  T18F1166BC4465348BA4525084637180C5FD899885D66EB93890DF321D4EC7DE5F07DC4C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  idea_Thu_Jul_02_2026 Lessons/LessonsJA.txt
- Size 1KB
- SHA256 d5815fb0178408b49d362e1acd4d5f5bc7358ced398996ea89448effde15dd28
- MD5 3ee48cd3793bf7b88c3dced7f2a1c489
- SHA1 7e5d7b49cab67ac5d52d38f4b9846f6c443b334a
- SHA512 7aac33a2a826a89512e0644c8e7a2dea1b0a776f6209da8d85a7a105b696e10102c61e55a50614d95d1ab6aec80a9661a54a0e4eb97bb075022ee16e9da8ac17
- TLSH
  T155219E6CE3C1B8399C2022E1295E79906156ECABE47A313C803CC834BDD67AFD6317B4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13
- Target
  idea_Thu_Jul_02_2026 Lessons/LessonsZH.txt
- Size 1KB
- SHA256 6e48aade7bb68c94e7f764b0a85fcdae96f31455fdd140a165defb8843b4d0c3
- MD5 64a6d82efa78908e91347cab1891a4cb
- SHA1 e35a96548b23b6e34ec5d1c366803452062165c8
- SHA512 b2b76be70274778617f3885617e5ba752dd56d43ebf07bddea01c5548a19e4af8f0070477af20928e5d12299f4f1bb3c4abf666843494e8d010ad688a6d03646
- TLSH
  T1171132D252A0DB560493705887239085E878D83692BCF808F319C9E2FD9AAEAF033807
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral14
- Target
  idea_Thu_Jul_02_2026 Lessons/MasterPlay.png
- Size 98KB
- SHA256 cb6d5d2d919f8a91235794db37b9aa7ddf2c70a22926dddfaf99a47dede9868f
- MD5 031e2e1e52dbefec2915e3d8b4a0c025
- SHA1 1e7829f2ce49a4e2a7afabff1306be44fcf55244
- SHA512 fefeb5bf56f88d6c1a71d466eccf04ba95198590962f8f8bb1b52ebab2070fd9b8d68eb2ddc5c770292e993619b72e0474ea86bb06ddf86358a6193c5cd0cbc6
- SSDEEP 384:lXE05tXk5dVHkKATjbRW7cJioqxktbiYPOW7:R35tXkVEKATjbRv0xk5iuP7
- TLSH
  T108A3B333FF51F803E4886A344E46C5852726B957AF019B4B39DD7B2E6F3AAC64E12310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  idea_Thu_Jul_02_2026 Lessons/Notes.png
- Size 24KB
- SHA256 a73058e57a98876dd5c2707639074a5708c6bf6c38df77c8c030ebd5fa82b32b
- MD5 638b517ef6ce8a4850cb78f17f2ccb7e
- SHA1 3898e9038f206c91743ec1b053ebebbdf9642a5a
- SHA512 4f4c679b3f6c84e26e1f33062311e5412b1a11076880bb48f9e28543b57612b8379b9dda1c82f1f050bfb5b411dde50fd7a6b1c0000a6cab256a0b7ab8e392b9
- SSDEEP 384:WXE05o6c5/lqc30HHEZa8vyA7kFu9TIao:s35o6EYcEn78vyAYcIao
- TLSH
  T1B1B2AF16AEF171ACA058F9366DDD10014D222387C6A36D40BBCE24AB1F56B4FDD0F5D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  idea_Thu_Jul_02_2026 Lessons/PlayButton.png
- Size 23KB
- SHA256 c648ef269ad0f337b4936b868057badbd400b5a02f379f1decfbf5aa659d0171
- MD5 621b0b38c49ac7ae64bfccfca3276e18
- SHA1 5249d211b1bd726bfd52394def18fa703c6092ad
- SHA512 6c7df3326f709dfea596518201c5d571d04bbe8b5a87f6607b1548e84a8c8825f735caa573f44055d78d9e831108c738c5fec2a9da2d9ac41cb0ee61954ee54b
- SSDEEP 192:nS0tKg9E05T9kXtU5loBZCAfnzfIWgiNTKQ8dZM6om/Q3rz:NXE05iX+5qCSTIW1TGo7z
- TLSH
  T1FEB28C29FDF1B2AC418465392AC861865EBB46C7D8021D047BCE1D972F10BDBCC6F3A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  idea_Thu_Jul_02_2026.als
- Size 4.5MB
- SHA256 e7d7aa9d6752607414ed3174b83b6d5c664b3a0c96645d4cabf76ed008e13fe5
- MD5 e3e4802de65636b6471fc652c9871dca
- SHA1 a3e8f49bcd2bbfd020ae6b245488ffd935d8ab1d
- SHA512 27f4395bb9e7c90443273540f94aa6ba54661e44c326813d44f8d7b2841c619b1e692b39083e7240090a112283ec0abb598777d147f936ec10cad976122aa379
- SSDEEP 6144:rGifv03DrN2nnn1XqPJSUroooXpztObEYKxH:t
- TLSH
  T1F5264990F5F488B6E9054E5B1241A0527FBE20FB73D9081AF61C2FD46F62EA507A31F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral18