General

  • Target
    abc5f9d50b8dbc75dd66baea383510f9c8b1fec0abfc5098bb76a5ea554a537f
  • Size 13.5MB
  • Sample260714-vekl2abx8v
  • SHA256 abc5f9d50b8dbc75dd66baea383510f9c8b1fec0abfc5098bb76a5ea554a537f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AIMP/AIMP.Runtime.dll
    • Size 12.5MB
    • SHA256 5e52f8e9c1ad10d593996983abbc580a6a1db3d64e24586ef8594e038307227b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/AIMP.Shared.dll
    • Size 6.7MB
    • SHA256 81a8ab45c6d4d62c228dd48b00d02d5f12e5b0b022314c3c31328a5ebc73c813
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/AIMP.exe
    • Size 5.0MB
    • SHA256 f1732c2a7bf9047b552a3d10b37f074f52df37316938cd00989b2f914d8f9687
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      AIMP/AIMPac.exe
    • Size 609KB
    • SHA256 f28fc7adba9603a69b6926e63226600e864c9239b8f1cc8501b01b40958e9313
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      AIMP/AIMPate.exe
    • Size 803KB
    • SHA256 8039fe91ea4302f91ea79006e0ce4eda8b4a69c72a0c53427c205067fd008e8a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      AIMP/Elevator.exe
    • Size 118KB
    • SHA256 2e8e46a7a1eb5a09ec7dd37e6eae8fdc9d1c9ea2476ad1c350f12b247f878d19
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/Help/AIMP-en.chm
    • Size 253KB
    • SHA256 3cedbf969e5c3383bb14f0cedde88e63785c3ade860fc5b78ca45d95319aec95
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      AIMP/Icons/aimp_icons.dll
    • Size 342KB
    • SHA256 831ecd467af6c4e171928236ff89af447107deda673fb957024becef35fab2fa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/Plugins/Aorta/Aorta.dll
    • Size 26KB
    • SHA256 c0a8ac0f1ac04272918cab6bc5b19de5127aad6e52f9668d7565235cf0218d07
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      AIMP/Plugins/aimp_albumArtVisualization/aimp_albumArtVisualization.dll
    • Size 85KB
    • SHA256 5d6ac65537fc0d5dfd293d578e5852cfe9b5b5dd16cf09a5627b6b25ca2053d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/Plugins/aimp_analogMeter/aimp_analogMeter.dll
    • Size 69KB
    • SHA256 f9ff0e8ecbfc8fa5a9dfdae1f5723448924cb7d778f3b868052aac4f18f75988
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/Plugins/aimp_cdda/aimp_cdda.dll
    • Size 178KB
    • SHA256 35f73192bf32a5a685ddb47813cf336a002ccb7944aa9a39fff121e7db7b585a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/Plugins/aimp_cdda/aimp_cdda_basscd.dll
    • Size 18KB
    • SHA256 04ab613c895b35044af8a9a98a372a5769c80245cc9d6bf710a94c5bc42fa1b3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/Plugins/aimp_infobar/aimp_infobar.dll
    • Size 171KB
    • SHA256 e14564d6e54b707d2cd5da731c3dc2e16589fa6673c2542c882a1b5c1bc0591f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/Plugins/aimp_inputFFmpeg/aimp_inputFFmpeg.dll
    • Size 119KB
    • SHA256 3d2541a19f696ae4d3188e428abb436402a3bd951bb1b6c401886ad6280b082b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMP/Plugins/aimp_inputFFmpeg/avcodec-aimp-57.dll
    • Size 1.1MB
    • SHA256 5af3c409f20cfb458b67ff969b83103416ff8df36235ea250fdf0438ce9fbbe4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

upx
Score
7/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discoveryupx
Score
6/10

behavioral6

discoveryupx
Score
6/10

behavioral7

defense_evasiondiscoveryspywaretrojan
Score
6/10

behavioral8

discoveryupx
Score
6/10

behavioral9

discoveryupx
Score
5/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discoveryupx
Score
5/10

behavioral18

discoveryupx
Score
5/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10