03bf7fddee0649de6fb1c48937d601d58190c6d1767f5274cf1520395827513a

Sharing

Copy URL Twitter E-mail

General

Target
all-music-converter.exe
Size 5.5MB
Sample260711-qvt37aby8m
SHA256 03bf7fddee0649de6fb1c48937d601d58190c6d1767f5274cf1520395827513a
MD5 c57066f6e317e50a4e110f147411d2f0
SHA1 cb9f4255e38a597fe4715a3dd5550c32eb6379a0
SHA512 2f98432bf1503867930d3d907140513b4c3f1faac10a6dcadc95b54058b2bcb95c1dc12ad501aa63109a9b8eab18e861999119b6601cdd97ccc750c876dd1dbb
SSDEEP 98304:Rrsa4tsCJiNvM6f3Rlr9oW0buGl+0kIhJa/zN72tg9lOsBswStgbzZT:RrsapIiN3fJ0buk9thJgzAg9IsB4Q
TLSH
T14E4633D165500039C7504AB071ADC984AEFA1FDA68A1D10F1E48FD6AFDFB5C32CA6DE2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  all-music-converter.exe
- Size 5.5MB
- SHA256 03bf7fddee0649de6fb1c48937d601d58190c6d1767f5274cf1520395827513a
- MD5 c57066f6e317e50a4e110f147411d2f0
- SHA1 cb9f4255e38a597fe4715a3dd5550c32eb6379a0
- SHA512 2f98432bf1503867930d3d907140513b4c3f1faac10a6dcadc95b54058b2bcb95c1dc12ad501aa63109a9b8eab18e861999119b6601cdd97ccc750c876dd1dbb
- SSDEEP 98304:Rrsa4tsCJiNvM6f3Rlr9oW0buGl+0kIhJa/zN72tg9lOsBswStgbzZT:RrsapIiN3fJ0buk9thJgzAg9IsB4Q
- TLSH
  T14E4633D165500039C7504AB071ADC984AEFA1FDA68A1D10F1E48FD6AFDFB5C32CA6DE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/INetC.dll
- Size 25KB
- SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
- MD5 40d7eca32b2f4d29db98715dd45bfac5
- SHA1 124df3f617f562e46095776454e1c0c7bb791cc7
- SHA512 5fd4f516ce23fb7e705e150d5c1c93fc7133694ba495fb73101674a528883a013a34ab258083aa7ce6072973b067a605158316a4c9159c1b4d765761f91c513d
- SSDEEP 384:pjj9e9dE95XD+iTx58Y5oMM3O9MEoLr1VcQZ/ZwcSyekMRlZ4L4:dAvE90GuY2tO93oLrJRM7Z4E
- TLSH
  T1F0B2F99257EA179AF7BAAB3478B9E762497FBC211821CCCF5533068D1872241ED30727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 3697d11bdbe1e34daa26b1e89d84276d9ff28148906943d0fe888354c3b13620
- MD5 acde70f73d3b71b1c4222b763537780d
- SHA1 b053b2e5fdb97257954c8f935d80964f056520ae
- SHA512 598fc58a5f561e7995eccccb065faf2a2386bce0cfc4199fa95ba9fb74e9fcb291914676996c90728dd283223c2180de9fe073a4c936e60fbabe036d7e0a40de
- SSDEEP 768:L8+c2MM0Hxd1fBTsRmMZdauVKAFKpnp0jdhK7R+qVQTxM:L8+DMfHPxAIMtXIVQTx
- TLSH
  T144F24A18FCC47EB6E6DF0570080D4A7E826FC8181B14CE9BD3A51EA2D5A63729EE501F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $TEMP/MicrosoftEdgeWebview2Setup.exe
- Size 1.6MB
- SHA256 3c60fdbd71b468cf52fde6f780740a910c9d190e7023b1ac1217d427d794ccb1
- MD5 5424bac02db3d21e75c21ff2049cd04f
- SHA1 331caa8fd3168ce4cca33fba823acecc379ac917
- SHA512 879887a64c39dd9721c1cdc2361dc3a95fadda6dc7d4850c0489ffce7365215698eb3bceb09f274c585a0c2f9f991f5e3735b7bd4c4249bbdffc9f9cbbf2e511
- SSDEEP 24576:AiEMl33a62nb8ZY2gcUKq3J2B4dZSpQKmpNx/oKD+EKzWOTxO2vzLqw9JEa:AiEo3K78i3cUNZ28qc7/AEE86uw9Jr
- TLSH
  T1C075220135D14032F6B72D305AE0EAB66E7CBD714EB159CF53845A6C6A306E1E33A36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery persistence privilege_escalation defense_evasion
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral11 behavioral12
- Target
  installer.exe
- Size 10.9MB
- SHA256 06525b965bc65e9b17136f754f407257aa349f6043bfed9ee378d8378201019a
- MD5 06770a50fef2269315c4fd11d0a5e189
- SHA1 3b98f562ac81b384a26b8904e1e5bcfbc482d155
- SHA512 1a66ef25af3ad647327648189b6fd1887c5c744a0a81e9b940d4b1b83d86e779acd3da9c3f1e388af4fb694555bef29aed0715d0184e43db89a30bf6e9a4d754
- SSDEEP 196608:QLOVhrpBdPO2WtZjfxgQmtiqFly2uDsaL:w0rp2tVpoiqPy2ul
- TLSH
  T1FAC63912F65251D8C06DC174934AA232FB71BC8947347AEF5BE47A212E75BE06B3C788
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral13 behavioral14