b09d07efd575beab67694fe52b2f9d1ccd102b61fa8b9a68ebb82f30b539ca6f

Sharing

Copy URL Twitter E-mail

General

Target
FL Studio v25.1.6 Build 4997 Rev1 - satvrn.7z
Size 283.0MB
Sample260730-3t6rtazbla
SHA256 b09d07efd575beab67694fe52b2f9d1ccd102b61fa8b9a68ebb82f30b539ca6f
MD5 1bb241016de508a47f7db61433efdc09
SHA1 3050f741e197cb8b992a5f77d5f88fdd58c2d703
SHA512 4efb6d94d1d2db56d0ed907596c3528c60b7021f3a8a903b1a9e3af5ad518183eba24696f73af6d717f6b924c3e5ef2a5b9af8ea501d2242110e96bb60415efe
SSDEEP 6291456:0FLF6lwMSoWX9K3NmCfYNYaWWN+Veu/uwrl2YhnEo+rPavzO:8LESNX9K3NmskYlV9/77h3+rPN
TLSH
T1D9E833913C1BD8EBA34C053604DBD3AC33C97C9E199E0B9D2B95C859DE29DC2EB059B1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/FLEX/engine_x64.dll
- Size 6.6MB
- SHA256 536926cea7910a4b3e7f34918ffd3f060f0abb9a2fa032fd2aaf6b9a857cf400
- MD5 7e55910c5071509d1530ac66797df274
- SHA1 6650a8e737958282f14d59df6bbae086f49c1277
- SHA512 7edb69749e90fe9e751cdda6e2c7c1dba6b337bc1cb7b407ad011df5a84540b23d98fb5e25ae0ade8c0ba51a5f6afd7b720bb91146492ef2bb8acf65c355fdc0
- SSDEEP 49152:Jc+c5cXcWLlPtyQwo2jN1pnVhg8txAxqjdwpDhDARD3Z5Ib8y4+OxiQLVFsT0Xav:Jc+c5cXcGay7FRxNGeUX0yZNm7n
- TLSH
  T1D3668D86B19E14DED266C139819B750FF973380547201AFB12E1E6A81F3BBD09F7B225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/libiompstubs5md.dll
- Size 40KB
- SHA256 5deddfc8611d49ac01c42dd5e8b857df0fe8d9e71306e3784e3a5da24ac2d6be
- MD5 839bc90b28a4630d456bee7cfcd3904e
- SHA1 bf0ccf0fb3f2409734907c80c82a45a76700b237
- SHA512 2b9e757bca0f5add08de685226640eed1a8df2a29c7547e3e62f7294734dabc1524989f50fff706e87d39711dae7bf3d62f4c17834064563318ce43845794b63
- SSDEEP 384:4xh6H7rUn7hvBMquzw3j2RPfHt56k8pVNjMAp2rGntjXjpwKHpmhls4+mGmGovyK:4y4nTMqyE2RPvCLPxsKF+hi4ZyiRv
- TLSH
  T1DA134C7D3F38A585F84B4B71E9530F338872F531AA96463B8BB041280E6B74B6B1E517
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/msvcp140.dll
- Size 557KB
- SHA256 72fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
- MD5 7db24201efea565d930b7ec3306f4308
- SHA1 880c8034b1655597d0eebe056719a6f79b60e03c
- SHA512 bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
- SSDEEP 12288:Rsjw3shF+jss1I8CgEWTe5+YMCMGz2MMY5U489wiyaf+QEKZm+jWodEEVksLd:Rs/5U4RBaf+QEKZm+jWodEECsL
- TLSH
  T176C40927B74902A0E196A3B8A1C34306D7F17C4A8312A3C792FBD66D2F577D56B3B190
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/pytorch_jni.dll
- Size 186KB
- SHA256 f9b0fbc8336d4014d6f8e9ed3597d76b314a78e8e9e6a0712c6eb39c7614bff1
- MD5 efec35ac0c28b01c3dd2486cd3de34d1
- SHA1 fe2246f0380aab6b69dfa4d47955f82baba754d2
- SHA512 6058d33550a323347013dc24dc4016deb65114282fef60a32daede780971cb0ffbcc2c04051c75fa18c8df65510c7f553ad8207feddb9493b5e5f1ee2223724f
- SSDEEP 3072:Av8Q0dJ2wS7O9VoDN4ibeQjwyT3h0x8aKVzptVAVyAsOcknR9t5x:AvUiwS7O0N4sm2R0xeVlABncER9t5
- TLSH
  T192144A2B739900EAD0B7E17D858B1913F272B415432197CF0793867A1F77AD97A3EA80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/speech-declipper-2.mod
- Size 9.2MB
- SHA256 fd0a6d718d2e427e9e1ff02043dce6999c3fc09f13adc030d9e10662743d6ba5
- MD5 4e547561ae31f170f61c353e6a46c37e
- SHA1 32e6c06a36109cbfddcaaca101daee41968982e3
- SHA512 f5796b65ae49838d4caaff2e7e155f7d1b1d9941285a38b75b4c8e8e9a1fd68a1460d53a613b20554b642c93e96fdd1f0d4f2e3b7f5ecb3cab43e5d0cfba8d29
- SSDEEP 196608:zKK6WKxu8uCw/nWAxWVli0HGaYWQ73y19muTZ3jpcHWbXqiN22T:TKNYnWJvGalQry19zFjpcHjiNb
- TLSH
  T13AA633F417C6765B532B38225524D73860AAD2BCDDF32D54C88928E2A9DFD7C2052CEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/torch.dll
- Size 9KB
- SHA256 5cff998ae73f0e27816631a15a6acc475c20e61392d0c63eb25d8e6ab58279e7
- MD5 e87747562af7d38a0cde4989008f2798
- SHA1 156fad37b797202254fd4b3c6575c4ce9c3b3420
- SHA512 2195a1839f77a5445a84fd6db16685ba997550fd5d3141e93459dcf3ec4841cc16789cd56effaf4b6e0343af65b626af8437a2a48f3d65755883ae8946625cf0
- SSDEEP 96:X3GGCQxS15+XiNEZs15oGqYFaTJgoqFsP4ewM7k9XCDnCt:jS1My+Zsbci9+Z7kyD2
- TLSH
  T11C12F989FE6589D9E22541F4C5A34E8DA0BAF7125350638F23B0522E1D5778F35377C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/torch_cpu.dll
- Size 244.0MB
- SHA256 958d8f8897181ec5b410f506705885a0cc2cf45117fb644313f8c399d5da2462
- MD5 0aca1f263298e7c1e293943c63af8d67
- SHA1 2b23c19cf573b394730d3d044823fddf3b2e8fd4
- SHA512 7c85e9b0389ed48f3fc1b023370ce8a4eb833a20f45f35fc019f30196707ccfe145224a84628f1dbe7d3fc30e7a2531964e0bbb22c9fa75ee095c493f1057c32
- SSDEEP 1572864:AGLKXmZmzeyX7E3RW6ATY5Cl7A3tF2EJitSYXZ:3KW07E3RzAsbbY1X
- TLSH
  T1DCC88D97F1E901E9C17BD07486ABB513EB71344A93285AF703E389612F27B907E3A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/torch_global_deps.dll
- Size 9KB
- SHA256 ecc0abaac90ed04bf6d5440caec584a09b29e74a4022d902b3cb3ce166a96cfc
- MD5 ca619e63e6f9f27abeec918e50292f5a
- SHA1 efaed13e5c6b5b1a10af8204efa369f9cc7ec64d
- SHA512 ce765f44cf0ade84a55adfc9ea1d18ec61b26eeec089fe3c4f1c4e6a2959cf220baaa3c263a82b3dd8021fa54a67c2b412cb78f80007df36374e0d9e6ef0c527
- SSDEEP 96:Kb6QxQlmTOxcU41BZ0THJZWcsPoqd9aSZktkw8P0aSek9XCDNkHCt:cQYixcU4SyZbVktk906kyDNT
- TLSH
  T1BD1208C9FE508AEAE91581F0C5A34D8DA5BAF312536143CF13A0562A1E6B78F307B7C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/uv.dll
- Size 190KB
- SHA256 d6e517084425092066d4b26678320eb60edf2c79ade855bd67b829113f999da6
- MD5 439b81888f985276d79d512cf93fe52b
- SHA1 042588aca07f18ccd0382af86525aa6e4e90aca9
- SHA512 daa66e52c35a126389402c2c1fd3c5f98f7d98fd76080e002348b4ed373c089a2c5191f7ad843b9510e6f8627437b6aae89341c8f00479512c966390c0eb1b28
- SSDEEP 3072:2dSWBTFJlDS13iqm9WY/6cx0tI91GmsZK9NCher7duMJwKTsvOzUrzUQwpl+:2drxJlDoi39Wgx0tI9MU9NChechK4vOK
- TLSH
  T18A146C8A73A450F9E967903CCA939A17E3B3B4350B2467CF06B087B91B23AD6753D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/vcruntime140.dll
- Size 96KB
- SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
- MD5 f12681a472b9dd04a812e16096514974
- SHA1 6fd102eb3e0b0e6eef08118d71f28702d1a9067c
- SHA512 7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
- SSDEEP 1536:BxhUQePlHhR46rXHHGI+mAAD4AeDuXMycecb8i10DWZz:Bvk4wHH+mZD4ADAecb8G1
- TLSH
  T1E0A37D4A77A542BBC06ED274C1A39906F7B0B840877063CF07B5466A5F23BE19E3E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Edison Declipper Windows/vcruntime140_1.dll
- Size 37KB
- SHA256 1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
- MD5 75e78e4bf561031d39f86143753400ff
- SHA1 324c2a99e39f8992459495182677e91656a05206
- SHA512 ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
- SSDEEP 768:Xhh4pTUUtmUwqiu8oSRjez6SD7GkxZYj/9zLUr:xJ9x70GkxuZz2
- TLSH
  T1C9034B9463B88085E1AB82B0C4935F17BE7DF9654B50538F0BA1C15D2F63BD0BA3D32A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/FL Cloud mastering v2 Windows/CloudMastering.dll
- Size 151.1MB
- SHA256 700e19f8a19654b52eb5428def76931580f21d19088fbe0c955ae120e9e9da4a
- MD5 bbf2014e3f89c8f1ba1718ae7c1a3eff
- SHA1 26d6c7cab343eee5fff362e13a604a2bd9aa838f
- SHA512 5a664ade07ba144ad2b870086760741d30dd3f49a736d32ed00862d7f1d6e2e083aa10a0fed5a162dee1cf2483982cf62013bff4b8ab34b7fb59adfa91c0170f
- SSDEEP 786432:EBpMnAnAeP9pGJ+hPl6juwFh3ITbStd6CcrRyQQ+GabP41kXKAW15afoK7KS2C5x:EBpMmAelpGUhPl091K72CT
- TLSH
  T1EA787C5776B601E9C17BE078CA2BA923E6B2344D53306AFF05E045953F17BE0AA7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Stem extractor Windows/asmjit.dll
- Size 350KB
- SHA256 a79babdb251316280701a8997e20bffe2ad462ea8778484e0194b7de5435c686
- MD5 1dd621220d8d51b502b6e3045fd6bf12
- SHA1 14f02a323a8fc39c2dbb8348e2e07779d9ab4c19
- SHA512 ba8194c7721153cb0d0b8d2d80e1324445eb6430e52fbc61165c4cb09f69b2f91bc15722b9cd367742c243277b439207277e45b2139bf56d795dd8ebd6b4b9f5
- SSDEEP 6144:hy3/UY3FoitqKJe/HVl11iVCRzw8lpEpuvQZFcgE1/Et6:hy3/UYVoiZk/HVbcVCRz1l2
- TLSH
  T1CE74AE45F6E515D4D4A3C178C6A7C3A6E776B46A4307ABCB29F842667E23BD0263F300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Stem extractor Windows/c10.dll
- Size 796KB
- SHA256 75196f9e7ec25790376db119fbbb3811373c706dec0b175d6a45b98cc3c7b224
- MD5 41035548d25687396c9a63196cedc5af
- SHA1 267b44655bf63b225fe127825e7e0d5185cfc0f1
- SHA512 8d41b2aecce869968a3c2fb6ffd398edda39d652965ae54cd1d7fc3d1572d28777f460d8c4ae13682f4c500ad51aefba9ee8ceedcfcd9fc559060066baf27314
- SSDEEP 12288:aRj51hKeH6fiQ4sTEpsCNhXppUK1RQ4IO5:aRj5fKA6fiYTEpscX+K1RQY
- TLSH
  T170054A5A735901ADC17BE27E998F4521F6B3B91103619BCB02A74A252F2B7E43B3F740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Stem extractor Windows/fbgemm.dll
- Size 4.7MB
- SHA256 0cb1070c51fa9a987bd7c547d361f131963901b821921737e3045912c1c58cf5
- MD5 ed5ae9db115c46cb25d1b22f41f6f396
- SHA1 d36b0fbfacbb255dd0b593b894ed9e644eac4c87
- SHA512 4ed4b65b81124dd640cc0bc566221914c35493fa9092393d1471d6d921cbddcfe768a291b378de0e27172660f3e8bc149253386c7602afa1adac74058255f976
- SSDEEP 98304:ttjteKHGQB8887n2iUpWmagQ8+fIGUdut3p4dqDfEmtbm+bafeIBx4FUN1TePiy7:tt
- TLSH
  T152362A71B1D642C8C43BC038E64BA913A634784E433CA6F75E958FA16F65EB0ED3E611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  FL Studio v25.1.6 Build 4997 Rev1 - satvrn/Files/Optional Features/Stem extractor Windows/fbjni.dll
- Size 336KB
- SHA256 86396bd47df287fc0e98ca6d2c41ab3c9a4548bb02deaa827ac6a968e98b0f22
- MD5 b1a32628e427c8c5b236a1ba44b89c25
- SHA1 f1d9bfecc1522e0fda4b093241de1b403294375e
- SHA512 e87a898c6461ca26d0a33e9cae835c99b9cfad010318e08fcfbf785fdd24cd688d99fd7184ffd2ee643360209e22d315eda0880561eb2f25302077388c9d9bcf
- SSDEEP 3072:6xM4EsbmytDZbyMdfrPId466up36UWCduD:8EsbmmDZOMdfr6/36UWC
- TLSH
  T135742E1B760BC7EACE75F27888CB5047AD217C21131B57C786C286283D666C967FE386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32