6a64094788e70896a3076b81eef17414337b2472c755b08b92e26561c2e693cf

General

Target
PlayPcSpeaker101.zip
Size 1.5MB
Sample260723-erwbaswsgs
SHA256 6a64094788e70896a3076b81eef17414337b2472c755b08b92e26561c2e693cf
MD5 6aefabfc7a823cb10388512eb933c303
SHA1 8954beb7be15fb9ceccda2254f5e03575cb374b7
SHA512 980bdba0da9775a749249f1761985af4326536ef071d87e606a909b28ea15a6eedcb93e61dd268d56aa3ac1162e5fd3a90047f96437b4ad34aac8bc963888189
SSDEEP 24576:DSNuqGiAXJhExj/M7wzg2tZbVcbPf6EFFKUYaVv221HVIlaLxww5tlc/9DXIzN4O:DMfkJSBEog2trcb6EFFK3yva0Cw5byA
TLSH
T1D47533F804C75752DE8AE41C03FE23699BB15BDC04B14AFE576A877E312A066D6CD8C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery upx

Malware Config

Targets

- Target
  InstallDriver.exe
- Size 48KB
- SHA256 2f6cef951a937f898ff24bc6adcdffb321b55fd3d21769ca9580e0233bbeed5a
- MD5 f25a0a82ad1eefd4becd6f034c078dbc
- SHA1 75c1063c318bd528b90e8a29bfc419beb1d35654
- SHA512 5d16a06664a22d95b4a9c553608456e1e9499c72db3fa76e429e3e3da83c9af589fa76f0b66c867976d71b26c4c6d5cc67afb1d0861af3751852368e5d7c7e3b
- SSDEEP 768:zsfqbtPnPlt0RBNxamrr1A081ZadarUq3XEOgbtwg:FbFP/0D3DriT18w1etwg
- TLSH
  T13523180A3893C033E41649B586E58AC15FFF7C133AF3A06FEF84454E1AA129899797F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Drops file in Drivers directory
- Executes dropped EXE
behavioral1 behavioral2
- Target
  PlayPcSpeaker.exe
- Size 210KB
- SHA256 d19d7f55100996253d83928277a5a4fc6cc4782096c72fbe9af1e1c0266bf1e6
- MD5 8b6573379e7728822ae5b3b0ddd93f35
- SHA1 c943d523f5cc3a78c04dd566bda850d43cd30908
- SHA512 a5c94f196a9a7b1ed05351afe64802a9b9a2008b8c3e9dd1e3576b2bb3df37aa77a0ea57c49ce372d1cfe2dd2f88d68e8e8f1300711218faef7eff54a0206077
- SSDEEP 3072:JlWsZ13gbrWEoorwVKd9we/rj18fl4GKy6yTM2UgDlCqMw7cD7:ysngbCEHrw0Aew2GKaMAD/c
- TLSH
  T14724F857B2CA3E50C2B415FD710FBFB99451C923AC25E280E7BF5B43D5B8F0022A656A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery upx
- Drops file in Drivers directory
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  inpout32.dll
- Size 96KB
- SHA256 01bcec6ddb4964e1f5b69ba1bd3876221d8de7ae17cacfac66f095013434a78f
- MD5 c1ccde650bf91a3b1d07dc5494d4276f
- SHA1 8062e3a853769d4c8235d30b30ca97cb200b1479
- SHA512 83c3ad41ab7b35e7116208dbda9fc65ad6203f5922c3ec5e840b0c54c5d2c47127564c0ec88b3445d5563fa39cca0ac62a6ca5603118e317523ae822d06e897c
- SSDEEP 1536:o/Y+Lhxv0hDuC0+5/CH8KM3xtGQI0jqSG0jVf:ozL7E/fhtGQwSR
- TLSH
  T11BA37D527650C0B6E896463650AAC713AA7BFD402FE9C0C73BA6068D5E513F17B3E30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Drops file in Drivers directory
- Executes dropped EXE
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Executes dropped EXE

Drops file in Drivers directory

Executes dropped EXE

UPX packed file

Drops file in Drivers directory

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6