9b522250418cce0b6c9262bd37148b2355a006171256898feda0b74e43fd2cbc | Triage™

Login
Reports

Overview

overview

7

Static

static

5

Xfer Recor...en.exe

windows10-2004-x64

7

Xfer Recor...en.exe

windows11-ltsc_2024-x64

7

$TEMP/BASSMOD.dll

windows10-2004-x64

3

$TEMP/BASSMOD.dll

windows11-ltsc_2024-x64

3

$TEMP/R2RXEFKG.dll

windows10-2004-x64

3

$TEMP/R2RXEFKG.dll

windows11-ltsc_2024-x64

3

$TEMP/keygen.exe

windows10-2004-x64

5

$TEMP/keygen.exe

windows11-ltsc_2024-x64

5

Xfer Recor...64.dll

windows10-2004-x64

1

Xfer Recor...64.dll

windows11-ltsc_2024-x64

1

Xfer Recor...64.dll

windows10-2004-x64

1

Xfer Recor...64.dll

windows11-ltsc_2024-x64

1

Xfer Recor...um.dll

windows10-2004-x64

3

Xfer Recor...um.dll

windows11-ltsc_2024-x64

3

Xfer Recor...FX.dll

windows10-2004-x64

3

Xfer Recor...FX.dll

windows11-ltsc_2024-x64

3

Xfer Recor...b2.exe

windows10-2004-x64

7

Xfer Recor...b2.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$_12_/Serum_x64.dll

windows10-2004-x64

1

$_12_/Serum_x64.dll

windows11-ltsc_2024-x64

1

C:/Program...um.dll

windows10-2004-x64

3

C:/Program...um.dll

windows11-ltsc_2024-x64

3

C:/Program...um.dll

windows10-2004-x64

3

C:/Program...um.dll

windows11-ltsc_2024-x64

3

Serum.dll

windows10-2004-x64

3

Serum.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Xfer Records - Serum v1.272 + SerumFX v1.272.zip
Size 203.9MB
Sample260802-ent9tsszct
SHA256 9b522250418cce0b6c9262bd37148b2355a006171256898feda0b74e43fd2cbc
MD5 5b06ddbf0df24662a0530f2495cd98f8
SHA1 40b7b918a28a76fb908a93be11748900f57e6434
SHA512 6d9dba09f01a9e68868198453db4896a28460272fcc1e69d2d8a7c072ff11293b0ed6ebb300245721e06626c06a5a9ec993209776764186a43d2c54e6cea76d3
SSDEEP 3145728:i+I3nliXmJWD6r+XzEbKD548h+YGOaOMjU5a2S5c6eTnxEW2eBi8QYbBVIUUDN1:ixhJWODbe450aO/5nS5c6cpTVIF1
TLSH
T179A8330CF3593648BFCE827F50AF8F6542C575B7AFB6B5788416A3AA05133D06E4290B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery installer link pdf upx

Static task

static1

7 signatures

pdf link installer upx

Behavioral task

behavioral1

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/KeyGen/Xfer KeyGen.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/KeyGen/Xfer KeyGen.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

Behavioral task

behavioral3

Sample

$TEMP/BASSMOD.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$TEMP/BASSMOD.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

$TEMP/R2RXEFKG.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$TEMP/R2RXEFKG.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$TEMP/keygen.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$TEMP/keygen.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x64/SerumFX_x64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x64/SerumFX_x64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x64/Serum_x64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x64/Serum_x64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x86/Serum.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x86/Serum.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x86/SerumFX.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x86/SerumFX.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Serum Update/Install_Xfer_Serum_Update_127b2.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

Xfer Records - Serum v1.272 + SerumFX v1.272/Serum Update/Install_Xfer_Serum_Update_127b2.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral19

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/advsplash.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/advsplash.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

$_12_/Serum_x64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

$_12_/Serum_x64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

C:/Program Files/Common Files/Avid/Audio/Plug-Ins/Serum.aaxplugin/Contents/Win32/Serum.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

C:/Program Files/Common Files/Avid/Audio/Plug-Ins/Serum.aaxplugin/Contents/Win32/Serum.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

C:/Program Files/Common Files/Avid/Audio/Plug-Ins/Serum.aaxplugin/Contents/x64/Serum.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

C:/Program Files/Common Files/Avid/Audio/Plug-Ins/Serum.aaxplugin/Contents/x64/Serum.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

Serum.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

Serum.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  Xfer Records - Serum v1.272 + SerumFX v1.272/KeyGen/Xfer KeyGen.exe
- Size 571KB
- SHA256 55e2f4530885b9f49ca24f294940e5444a2531cd47a747cf46ede743a25ad775
- MD5 bcbff2e939addc13f4c7d50e58228351
- SHA1 1c728ae88f3e8ea90da57f59556e263b83a966dc
- SHA512 1f7e7506dfdb5102dfece7fdbb058736de9a4ba7c7e180e8122dac81d81cfc980e48e5031d287b9eb39af50213ea76e23566ec6acf222760000ed1eaf0f40c4f
- SSDEEP 12288:Uc9t2SllJ7MtamwOOHFgxNX1Jmu/M4p/NP/+/O/ujZd:UcLjkXOHFmhK1oYD
- TLSH
  T107C41252F99489E7DC6B073008EFCA75A73BBD3649223A0745A8BB3D79B23C24517583
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $TEMP/R2RXEFKG.dll
- Size 30KB
- SHA256 25b6bc4deddd18730cf2cf8689d47c55864cf02ff85b765e90529d9d294cf526
- MD5 5fe9774fefb94a4545750ccc082e31a6
- SHA1 673f83ff6c44d388af221c3456e76a441b155365
- SHA512 527ff10055c0b877b9aff41674d861cadab3ba87d9ee7cc655b61f06b4003f860e5c6c2b56170db90a1cf4cd3937656ffdd785cf38e61fcc83f9be881ae94d32
- SSDEEP 768:mmFhHC7UDpdvmC4I0afXZlj5spC3lEjwX7D:FFhiGdvMafXr56M0w
- TLSH
  T194D2E012E76E4A01CD1B44348ABA361FD1B27158591587AF8FCC413BECE1F276C37AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $TEMP/keygen.exe
- Size 122KB
- SHA256 76295065e1564dd06b48c9255b28071c29159caf524b28a92793de7acff496fd
- MD5 259be3cc40ca662e59bf340e6f055f3a
- SHA1 ca06f4f937a3481056ea336c8490bef6ece57382
- SHA512 8489ff682c03cf49c7d6cc1ec3f213d9f31fbd8b3ce4bbb72f699ecd0b497ee0b6f09121a723c51aa9e51e9630edacb59908a761e64fc79453d82da71f527afc
- SSDEEP 3072:VyzXIp2TKcaXyRM56vSSkdmFtRwtJK3bZDMu0JHTDRnnes6qMsRAEJWXdZ:Vyztgw3QmFzwDK14dHTDtes6j0WNZ
- TLSH
  T14EC312362C8BC97AD848047B42A8DC2DF05661601AE955817B7E1F6EFC5B71836C33EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8
- Target
  Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x64/SerumFX_x64.dll
- Size 9.3MB
- SHA256 1a4854fa649a68f28befa6f13bc6a0e7b715ad8cdef7c0900de8f7d271eee28b
- MD5 dbfa4508ebed0fa65f301783c47d9431
- SHA1 288b775e7ca6d610f3db4ec92dc5dc51f68ba51d
- SHA512 1e7efa1f6cfb9d9fcf91cb9381af70ca7e52a09ea969d8d87f88102ac7f0cb1714ded650afb0a81379a914a07f623040895e7e625bb984e898efd38581aa6c34
- SSDEEP 196608:hLrOXpXr/81oLh6DGCyb9x9SOnl2KPmQ:MXpXr/81oLh6DGCyb9x9Sy1
- TLSH
  T194A68B4B72A98189E077C17DCA8B9A4BE7B234004B319BDF1591439E1F37BE54D7A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x64/Serum_x64.dll
- Size 9.3MB
- SHA256 7fe4f8a0652ac3d37e6d53bc36c78927f355befeaed562e147adf5f221c54296
- MD5 c3094fc119ab25d24ccc03be20ba94b6
- SHA1 8a2ce3e42c6f560cac1165a27580c93f21044bb9
- SHA512 7a2d8a7229a94d898f08d9816e059b3d3709887f1672aa939db765557bad07b1a963acfec30a2184b19fef1d8aa04d7baa28f90f20eea59e58352e04adddd927
- SSDEEP 98304:tOstLDddN6KaVjtocs7ertpMWNKlGZTsmpgZH+Qhsh98h:YstLDddN6KaVjtocs7ertpTNKgo1
- TLSH
  T106A67A4B72A98189E077C17D898B9A4BE7B234008B319BDF1591439E1F37BE54D7B322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x86/Serum.dll
- Size 7.7MB
- SHA256 c1f371533b96dc60377cccaacc0fbfcf4e04c5dd40778941b0dc2d2f185e3d6a
- MD5 963c65164e8151632bc367387cc6a6c8
- SHA1 b73363a1334d328af7be1ac054d85374f90a06d5
- SHA512 f2416c86937d9b8a81ef087a6452a435c6f998f540a883211d906b06ea28adf1c6d2a6649a1729c43e11269d61e0059c3860b29001dd8fb1cce0675ddb3dafe2
- SSDEEP 98304:1jg3UVxf9rcY+zjt5atwpYdADf/Fybu/5517WFnoCv0alVTj:RxfVXkjtM6pYGRybu/55QvlTj
- TLSH
  T150868E217901C238EADC01B7D9BC7E6F455D8A650B3C42D7AA884C9A2E742D32F73797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Xfer Records - Serum v1.272 + SerumFX v1.272/Patch FiX/x86/SerumFX.dll
- Size 7.7MB
- SHA256 e3544ffabf262a8d2050135e9769ebe574374b89e194aefa28952680fa2716f2
- MD5 247f10720d6c85f9730f746073982530
- SHA1 fd103fae89bb09d604a00af9f86313f4524e4a07
- SHA512 dd4ed32d778c75347153a04911843486f30fbf8f8d92f45b27ed27c010df95fbbd4fcc76c1f88ba72efa36165503c340c88cdd622246b1c3db30ee2fc0c72499
- SSDEEP 98304:06yqB+PAFDqNqBnIyAbXBOs1MgL8mPGHyhHe2mM/lS:0SfFDqVyAbxOsybmPGHyf
- TLSH
  T176868D217941C234EAD901B6DABC7E6B555D8A740B3C12D7AA8C4C9E5E382C32F73793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Xfer Records - Serum v1.272 + SerumFX v1.272/Serum Update/Install_Xfer_Serum_Update_127b2.exe
- Size 24.7MB
- SHA256 6442d25c5246cac926aa14eb5c5525f5c2775afdbb906478a8daf839b167faf0
- MD5 f06d48aadb049eeddc3169a900a49edb
- SHA1 064f72f761b07554aadfc029d26a7f6bdfedc417
- SHA512 6fc61be7071344a691f352bd5866d317e4dc0a8eafb85838b078e7100a33b066b02be10c462d26ee0f81be143422172e1f2ea6079d4c958786d6493f202ad0db
- SSDEEP 786432:UbKS7m8kw4z+r+jVHbzIZ3PRKJYVI8lLF7jzad71:e9wor+zIZ3Pgyn57id71
- TLSH
  T16C47336F7326F788D6484472821B8B382680E8BB0FF9558F496BD4192A213F54DDF79C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery defense_evasion
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral17 behavioral18
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 a0cac4cf4852895619bc7743ebeb89f9e4927ccdb9e66b1bcd92a4136d0f9c77
- MD5 b0c77267f13b2f87c084fd86ef51ccfc
- SHA1 f7543f9e9b4f04386dfbf33c38cbed1bf205afb3
- SHA512 f2b57a2eea00f52a3c7080f4b5f2bb85a7a9b9f16d12da8f8ff673824556c62a0f742b72be0fd82a2612a4b6dbd7e0fdc27065212da703c2f7e28d199696f66e
- SSDEEP 192:4PtkiQJr7jHYT87RfwXQ6YSYtOuVDi7IsFW14Ll8CO:H78TQIgGCDp14LGC
- TLSH
  T162324A1503904AF3F996C13C14263ABF7F792A218BF14E939FA39481BE2D5D96D39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/advsplash.dll
- Size 5KB
- SHA256 12a4ea944895e42a8119e7fca3b9e73e881faf774e39b9c9d4d9efb4a19ffb00
- MD5 74fcb6435b746349a712dd9213975ffd
- SHA1 0cd54fcd81488ba6d39ee0d832117c4f3dfa80dc
- SHA512 2ab77aef5e758a7b3018d5c45e60b6154faca92384609902bb2445234a9e8bc526f8a70961a1d8c2acebd68a9bf8b8b6fe7d4a4542a9cf0e53930aa9b30ade80
- SSDEEP 96:mqNXqwK188CgAtXvZBkjDf0yf9ysrtWpwwol:mAqrg1XvZB6kYtWpw
- TLSH
  T16BC1B73673C165F3D32645F26C1536A3C7EA9432236259150AA3DFCE79A2C6BDC20703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 062c75ad650548750564ffd7aef8cd553773b5c26cae7f25a5749b13165194e3
- MD5 eac1c3707970fe7c71b2d760c34763fa
- SHA1 f275e659ad7798994361f6ccb1481050aba30ff8
- SHA512 3415bd555cf47407c0ae62be0dbcba7173d2b33a371bf083ce908fc901811adb888b7787d11eb9d99a1a739cbd9d1c66e565db6cd678bdadaf753fbda14ffd09
- SSDEEP 96:oXHqZ4zC5RH3cXX1LlYlRowycxM2DjDf3GEst+Nt+jvDYx4AqndYHnxss:oXHq+CP3uKrpyREs06YxcdGn
- TLSH
  T108121A635A4455F3D5D7223A216A2F2FD77C9324A062BC0287779E462BF431A7E3A341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $_12_/Serum_x64.dll
- Size 9.3MB
- SHA256 51d30d18369f63642ca1e2bf562601b5c77a41f34a3594f25dfc992baf04face
- MD5 7e02f1f873c40448c7267328c798ede2
- SHA1 ef74cb1b8a0ed39fcfd1ed5916e989ada3e182a2
- SHA512 00264228884935f70704b3dbea97d976536bb770e57c6c9b3389fc67bce17f9e439684cc6a6783ab383be9621fa44024f2e8d82111e5554ad33d6f23ce683054
- SSDEEP 98304:tOstLDddN6KaVjtocs7ertpMWNKlVZTsmpgZH+Qhsh98h:YstLDddN6KaVjtocs7ertpTNKxo1
- TLSH
  T1CCA67A4B72A98189E077C17D898B9A4BE7B234008B319BDF1591439E1F37BE54D7B322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  C:/Program Files/Common Files/Avid/Audio/Plug-Ins/Serum.aaxplugin/Contents/Win32/Serum.aaxplugin
- Size 3.4MB
- SHA256 fc76e81edec6725d71ac8d671ba5c7b431d6b42fdb4260b9d767490ff6d72cb2
- MD5 e0b90f8d96548feee3c1bfd17926f215
- SHA1 ffa01906e7e194ddc87aeefb8f694b2a6d56ea06
- SHA512 b67128ec2ec273cdea2c8656a9468d91e9daa710ff7f2b2b95c436ece856ea0c8e367ad4db487bdd3ac2fdda74d2d2b16d4d71cc7201a4a1d0d910259a32b137
- SSDEEP 49152:a95DqXj9gizYn+gDV0TV/JxTrBnCditaGfpKh8l1rTsTbD26yjJBhBlm2PhE:i1qPzYn+gDc/jpECvxKh8lGeBlmR
- TLSH
  T1DAF5BD12B182C075C49401B1B6BEBBAF59BC2A69073C00EBABD06D5D6D781D22FB7357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  C:/Program Files/Common Files/Avid/Audio/Plug-Ins/Serum.aaxplugin/Contents/x64/Serum.aaxplugin
- Size 4.0MB
- SHA256 ce71b55541feab3c4ff8fe9cafc00837fb8488c812c20b8f2f6408bb08af9ee0
- MD5 b7f138af57e120c6c85d52be640e330a
- SHA1 efb93df790e9bb225882c664be2ca95aae21daea
- SHA512 f935152a5daacb361f22bf04e14f01503f652c41656aa9a8e2b6a50adebc354237799882e395b8009f2a10d1a890b18908e101ebada9dafee27cc596e784265b
- SSDEEP 49152:PlOhf5NOQwohxmYSbOnw6NY+FmYXFo1ZTX1HPUMEeytyZbqgzrKYx/HGx6yxrhQP:wjFi461fyt6VA6G6THVgKhB0/fN0z
- TLSH
  T16C168D46B7A840E9C17BC03C85ABA207E7B2341557309BDB47E0475A6F67BE05EBB321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  Serum.dll
- Size 7.7MB
- SHA256 81f3731789a45b4e80c0a3c8c87cd1eaf1bb2955656510b0fd8c89b9c53aaea3
- MD5 84a9a1d400a20e14f764cbfefe273684
- SHA1 ef418fdd431a39d828827ab21becfdc6b61a6854
- SHA512 501203e0ec75d2e4d1698999230f7593f0e283877c0c4abb6ea39fd338adcac68cd0bd2b7108cf5ae4b70bcd33aeadd61a8b5ef329257f46c4e82e2e628dad73
- SSDEEP 98304:1jg3UVxf9rcY+zjt5aMwpYdADf/Fybu/5517WFnoCv0alVTj:RxfVXkjtMZpYGRybu/55QvlTj
- TLSH
  T1E4868E217901C238EADC01B7D9BC7E6F455D8A650B3C42D7AA884C9A2E742D32F73797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pdflinkinstallerupx

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

defense_evasiondiscovery

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy