907da6987c3fd2115fd62c8dbcba9837cbdeb8dd00851265c601a93261184343

Sharing

Copy URL Twitter E-mail

General

Target
OmniSpeechAI-Detect_2.5.4615.0_x64__sh8fphax66b9m.msix.zip
Size 51.0MB
Sample260721-vxz5fa1fpe
SHA256 907da6987c3fd2115fd62c8dbcba9837cbdeb8dd00851265c601a93261184343
MD5 f9e334a0151e82980c894c5bd2b5a5d0
SHA1 8d264ff6220849e9664912eabde378c0e8757dbc
SHA512 02ded583826dfbc903fbe7f68d51f66d76874379510dfe34ee1e8942268bfe1bcab9da960f1e705cb3bcb0861dbd92ad9a89cdaf0612dbd5826a8a39337c5f34
SSDEEP 1572864:0K9oXGRJgg1ebTFhax+hFSb1BVM5RN1TKopG3giB:0KOGjd1CFscFSq5jhQ3giB
TLSH
T1E0C7336C3F717640D053FA3722762AEF5B486976C603DAB3BB584F2C64E1E2609B8750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  OmniSpeechAI-Detect_2.5.4615.0_x64__sh8fphax66b9m.msix.zip
- Size 51.0MB
- SHA256 907da6987c3fd2115fd62c8dbcba9837cbdeb8dd00851265c601a93261184343
- MD5 f9e334a0151e82980c894c5bd2b5a5d0
- SHA1 8d264ff6220849e9664912eabde378c0e8757dbc
- SHA512 02ded583826dfbc903fbe7f68d51f66d76874379510dfe34ee1e8942268bfe1bcab9da960f1e705cb3bcb0861dbd92ad9a89cdaf0612dbd5826a8a39337c5f34
- SSDEEP 1572864:0K9oXGRJgg1ebTFhax+hFSb1BVM5RN1TKopG3giB:0KOGjd1CFscFSq5jhQ3giB
- TLSH
  T1E0C7336C3F717640D053FA3722762AEF5B486976C603DAB3BB584F2C64E1E2609B8750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  PsfLauncher32.exe
- Size 293KB
- SHA256 5be4befa24eab8f67913c568ab3a82ece70f8a713148e3270b943fbe894343b0
- MD5 45dfcbf54078c4bad4611e0ead558403
- SHA1 ce02e7b977a6b5aa9cdbe94a8459cbde1166b5d6
- SHA512 16d35de70550238673ec89755cef5031a09dfb02f4530c723ce594eea30485554de3172d214dcd4e8430eb1df11a2c780fc9259c611788682c4587b9f9777500
- SSDEEP 6144:/N0JLrPFhIurUJcOt5+W1RiETVwBO5FgncJAOiCBc0:/N0JLr9hIn3F1RiDB6J0V0
- TLSH
  T1A3548E11B682C132D9B111320A79AFB685BDB9244F2059DFA7D41E7ADE303D26A31F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  PsfLauncher64.exe
- Size 387KB
- SHA256 adc8db388b8ec3c69daa7b2d948c5c2bb92f14c3ce502170c9d7e426a4a380c7
- MD5 325064c0a405290b5848056e185140cd
- SHA1 e974cc649a20598f483ab7e9cf53b17d0ed7dd41
- SHA512 b723dca8ba273942888ffdc32eb73cbb78cea52b7e80819709c517918863d067d8812b0cb6556614093e2d9bbe56bbfab75029c3722b0e529a6114c5b29224f4
- SSDEEP 6144:gtnpteQ4C9hHB3JU0wGBFGConXlq6nKohL+mTK/RjUK:gtnv4QhlJ5wGB8Xlyo5wn
- TLSH
  T11F846B0AE7A904FCE0B7D2388DA34906E6767C4D07719BEF139486661F237D19E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  PsfRunDll32.exe
- Size 83KB
- SHA256 dd779fabeeff9ee8501ea2be5d02fad8f266ec4c9472c4f178186d852ab2319a
- MD5 2e272eed537c698e8aca661694a0b223
- SHA1 8b472709fa600ac7a93a79bc6e0db86c7b2ce126
- SHA512 9ffa920756ff66f5c198d87efc683da3cc0816ba1ebdec51bbd74f97b6bd2e328681943510f371fe59079747db4fec4791029815c5076721fb8518912929ebfd
- SSDEEP 1536:OURuSa6ZGQb3pLhTCiH+E+MtFSQ40XHicpNXQDG3Hl0S6gsWRUchcdeppCEwcmSm:FuSp13pLheiXSQ40XCEN30F6kejCEwcj
- TLSH
  T1B3834A52B5C19471E9772A310868DEF18A3EFD605F619EBB2358063B4F302C1DA25DAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  PsfRunDll64.exe
- Size 107KB
- SHA256 c17e441aad35b07bdde806d3ffc2ca3c731c050f596e9ecefebc12974ec0b8e1
- MD5 6baf3b5e0b987709d418e8cf1cf145b5
- SHA1 0c5b0d5c02ae66776530aead7c93c6314761ffd1
- SHA512 576f70bedcf69e65000e2c89cb6473f64c11f64df5162f5e687b555079228f6c236031508b4f3fd403a33a214d3bb91c5875c425a00f67cba83f1d0bc601a3e3
- SSDEEP 3072:YN2YYE6yqki92M43MBawRJn+rygY/q3Fh:QYE6yq0MBBfJrq3F
- TLSH
  T1F0B37B4B73E530F9F07B8278C8910A05D776B8321B619BAF07A4469A1F636D18D3EF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  PsfRuntime32.dll
- Size 358KB
- SHA256 19baeae6dfa703b5eddc5400fccc7d74a022f3d2a65798112f29333fe125d4d4
- MD5 6fcaeada90327a71cfe8b049a8bf26f0
- SHA1 0c48c158f0e93fac3f7aa7fcb9e24081fb9c9776
- SHA512 89eb3bd4339d6d578f4f5fe35c84db60fb6f385e11f63ccf451160933e9b166610294d5c5484c6046dc7a8358ddbb6cde5086563379604ccbf2e36ee91d4a63b
- SSDEEP 6144:fqvPCeYH3VzvOeTe8eKHaInVdo/IOwMr18PAOlglxcV:fqvPyVzvOeTeN6LrMJ4XgkV
- TLSH
  T187747E11F682C132D5BD01302978EBB645BDA9244F6585DBA7D81D7E9E302C26F32E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  PsfRuntime64.dll
- Size 495KB
- SHA256 0c67cec2b062c24e73ad83e9be1ae441775b40c39c32da3a78271fda1a9aa842
- MD5 29deaaeea36541c2bf3b7385a7ee9632
- SHA1 2b276aca5c33ab87cd47a500202ae289af9b87d4
- SHA512 bbc9c8fce695c0f0b252eee02862901d35db59f85bcb78e24007a19fdf7fef9afc449cb31101e2d02abc712063357100b96defbede89d3a1798c8235c51bf9e7
- SSDEEP 6144:VBO64VbMmfsYNrY+dNrG1d+oKiQ6bYrmofhAy9fAsohGiTsfIfbqA:VBX4VbMGsYNrRid+XubkfGmfFoAiTF
- TLSH
  T18AB48E0AA7A902BDE477C13C8A578902F676780A0770D7DF03D096756F67BE09E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  StartingScriptWrapper.ps1
- Size 504B
- SHA256 21c5dc3c1cec1b1f49dc4d12f7f5defd8134d2dddd4daf345da3561970cf4846
- MD5 3c64e0411cc8ae84d28fa50f3903e24a
- SHA1 8c51e6ae9078ae6c22da566aa5cace73236e0e8c
- SHA512 f78f1aa945eb5f4b5eeb91ccb2f68aa07335fee3aae449bf45e922d410b48c069265742b658048c155b81ef87a91aaa3ffc7265a3b19f0460c1a7ffcc4e5428d
- TLSH
  T1FEF05962AE01E2B312B71A1766FBE98A121E40213435A821E8AC806143A6FB55F03AD9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  VFS/Common%20Desktop/Advanced%20IP%20Scanner.lnk
- Size 1KB
- SHA256 4e922b49c250f0f46ef7131523724716d11bdd7072767c167473469654eed47d
- MD5 c6e74b74341c9231722a5ba56d966791
- SHA1 3bb6bae5e4aba8ed87e6e7fdad8e76836e269fc8
- SHA512 eb0bb8ce410445089f0d773a4049f88af697fd11a348957d1d44e33d41e0a4b4a6613eb8fbdb1992eab7ac78089fc3bb0db72d48b10fdb928023d1a46f9281c5
- TLSH
  T17D11EB032BC60A78F17B9B3A5A722204CB67BD40F29C3B1F42894009A865F048DECF39
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  VFS/Common%20Programs/Advanced%20IP%20Scanner%20v2/Advanced%20IP%20Scanner%20Manual.lnk
- Size 1KB
- SHA256 40775b810465e1c30d1b40e0a984fdc7b76f227885e9dfb1bc5eaeb80ccca674
- MD5 abc56fd09976e2dfa947da867ceb8888
- SHA1 40b839397b1f6333c3ee54755c1762f393efc627
- SHA512 4bcf0319c3a5eee108180f5bd3bdea215379ab85d2a7d18af0dc395e7174194fbddd9d9c140b7cb3bf93524ad90f2091412aae7fe26ef3c4dbdaf122f05a5f9a
- TLSH
  T1C8212851B6D81557F7B317B8BFB64186FCA5FC6174028E6F450210458520A04AC6AF3E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution
behavioral19 behavioral20
- Target
  VFS/Common%20Programs/Advanced%20IP%20Scanner%20v2/Advanced%20IP%20Scanner.lnk
- Size 1KB
- SHA256 27f961fe1ede1dd7d5d6860893a7d80da163328bc4e6152faee132b36c623146
- MD5 3b65172a8155069b208722a83bc452b2
- SHA1 57c2f6128cdf035711f016d866ec998885d4a605
- SHA512 3b11cf8dc5f61823f040d97b41b0f179ef41ed9c127f642b5679e57fb9125936a34197a0696905e75335bbfca285d03d56e1abc684743bdbf4235fbbeae47de4
- TLSH
  T19311EF032BC65B78F2779B3A597112159B67BD40F2AC3B1F41494005A865F018DECF35
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  VFS/Common%20Programs/Advanced%20IP%20Scanner%20v2/Uninstall%20Advanced%20IP%20Scanner.lnk
- Size 978B
- SHA256 e5d1218c699da54ca56a04259e15ac9577016d2aa352c11b28b529a38887b753
- MD5 2571463ad39d5114a1dced0f52fcb0df
- SHA1 5c5b357c79fb8a023a937a28161ad942efd222da
- SHA512 0d2f06850022c4c7a6aa1298e842ef62fc029649aeb4bfbac1b424618d0b0f86c1ca3ecbb28d01ebd7803c80babc3909a1c450bd3759607d0ea64e5e9533367b
- TLSH
  T1B711F10155CB1733C371093665B61328A373FD03F89A4F7B410607D21C29B525E6CEAE
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  VFS/ProgramFilesX86/Advanced%20IP%20Scanner/Qt5Core.dll
- Size 5.7MB
- SHA256 193814d47e0b7917c3373011f64cd3ac649a16d1d0515c9d409fa1794c5bffb1
- MD5 c2bb94b2c229ece69d865b1898c71324
- SHA1 afac1a2fede68ad129bb48b01ed8b80997f75d2f
- SHA512 2cb31eb8fd866510268553b77d2bb4ddffb4d48f22c35b8679933cb48ac7b90de1aefcf6132dbcef007f6f622869c931be13a5d41234e49e0c7db3f8c5cf8b0a
- SSDEEP 98304:I9HgaLmICbZhV8cBfAVG4F40zkpEJsv6tWKFdu9CcDo+fN4A:I9Hgaq5b7OcBfAVG4FiEJsv6tWKFdu9V
- TLSH
  T1E0566B22E341A22AFCF381B6D9BE551E5038AF30570144DFA2CC2E5E9BB95E1BE31517
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  VFS/ProgramFilesX86/Advanced%20IP%20Scanner/Qt5Gui.dll
- Size 6.4MB
- SHA256 f201494b5ebe609ff2ca7d36275b19ab645c81153417b5ff4852ad8e164e144d
- MD5 1fbe59e9be0f445bb14be02c0ee69d6f
- SHA1 98f62a873ca78e9be7760de0fddedc56fae2505d
- SHA512 00a61eb5b7b412cff8bb92157dd2330fc7729c23e82a6c9648c067581ddf91e0743ec5cf4b3d4d59ea49c7edcda63dbf39350a173a354ec465e3f5a5d087f24f
- SSDEEP 98304:YMm4f0AN5rHUQ+P2DkVNYVBcE7hxc5Rar3v:Yb4fzN5rHUj+D5VBckhkRGv
- TLSH
  T1D6664B41A100B127EDF341FBCBDF216E60B5AE71C30491D395A85A994A79BF63F36A03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  VFS/ProgramFilesX86/Advanced%20IP%20Scanner/Qt5Network.dll
- Size 1.1MB
- SHA256 9aff2ccbd77806d7828ce99481104515fa34859499c0a17ffe4785de44e0a2f9
- MD5 ed04dab88e70661e4980a284b0df6a0c
- SHA1 c1499360a68fdc12013a6cbb35c05a3098e95f41
- SHA512 e2b41a7a80216ecc9adde467e9da84c39a4c593c0d3928442c0ac079f8d854a3605df9e93a1408c0042f5c4d2a41cbba281bbbb3524f5be8f4e5dafea048e87a
- SSDEEP 24576:Ql4zuvU31UisunBgeZaGKYbmYccwy9v5nOUhqJEe:Ql4q8lUd2z3mYVBb8H
- TLSH
  T1F7352A13A6019036FCF354B2D5FB621D5268A360534E10F776C89E6E9B766E37E3802B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  VFS/ProgramFilesX86/Advanced%20IP%20Scanner/Qt5PrintSupport.dll
- Size 319KB
- SHA256 725dd45cf413d669d22fd38baffb5296bd2fec4c0379a1fa3aba4cc12c41768a
- MD5 72b2e7a9af236e5ca0c27107e8c5690c
- SHA1 6ac273911118c7caa71818c55e22d27b4c36b843
- SHA512 c4d217eb21501e1a26afa5a6cb5b53152f6330a96a58b83709be2c615594e1d640dd65e5353ad8cd2e7e3b4eabbb8e3aff0f5d13d5577a1ccc05b590cc9803b6
- SSDEEP 6144:zqg47yYJkKxQ8WVauJIg9FzQGRPvhUhcD3I95HIbPSRyuoboXHcJ2ZWa3Imr1y6a:LgTxQ3UuJIg9FzQGRPvlf
- TLSH
  T1E7646E83A6255235DCFB5176DDEF121E412D92E003AAC1CF928CED1B9A322F67E35247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32