General
- Target Free Download FabFilter Pro-Q 3 v3 26 WiN Plugin Crack.zip
- Size 5.4MB
- Sample260718-mt3gdsb17x
- SHA256 38b7db554d7c896711d2473d58dea5dc28e45f015e13885499f83eba0e978b7b
- MD5 956d73dcc23da4506c65683b3dc56c9f
- SHA1 985e239231e46427900e929cfaa0e8b18a837390
- SHA512 e08b5aed17005717981d5256787c0e6a0fbd51c9720f42d3dba276562e6d00d1011dfa9233a664ab120513b4b333fd35bf8e903c1d57bb3b13bcc93a1c1e75ec
- SSDEEP 98304:oAX7NIqKTeWFDvqrc+3TwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxx:3RWFjsTw/tyd3w++lz0byx
- TLSH T111461227F38A647DE06A56354AB2911095377E216E128E4B97EC749CCF362A03E3F347
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Free Download FabFilter Pro-Q 3 v3 26 WiN Plugin Crack.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target .Store
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target Free Download FabFilter Pro-Q 3 v3 26 WiN Plugin Crack.exe
- Size 2.0MB
- SHA256 d18ca6034d18245d7c9557abb50ebe9b50286f0e18ae49415bc15d4abcb51bd6
- MD5 994c1dfacb8226f4a6405b1e510f2cc1
- SHA1 d55fdba49b0b812768c6c6049099a4c78ccfe8bf
- SHA512 9c5add2f7ed20c2c8b2ff9d25802690bceeb2accd25e1407f62909eae53bd9a6413bbcaac828426ee394b29228198e48cfb5aaf33bc0eca60158692d2bc28f5b
- SSDEEP 49152:yAX7NzIUt1ITeLKFhVCsmMqrc+BG2L8d1:yAX7NIqKTeWFDvqrc+32
- TLSH T1D0A5D033F28AA53EE06E5A3659B2D150543B7A616D138D0BD6EC389CCF352A03D3B647
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1