General
- Target FlStudio25.torrent
- Size 34KB
- Sample260802-rnaxeavcnd
- SHA256 76f9efe4a0ddee663d02fe4f3a15e1f27769b4af1d697bf5ec91807f73579649
- MD5 724c87febd0e5751e0c612a07d96c811
- SHA1 00e1f5e966b42b84b1f605dce0db48a2b448f936
- SHA512 e56a1b5f961ff96865df7988baca2a1f847c962c58ccba7ee143790d903fe906f7b6611e0d9d57f75e89bba23ab8d14e4b9ac86772ccf9a5355de930373b6f04
- SSDEEP 384:bb8RUJiZSx56ZiEEtgHQDEWOSoC5ICGM5wmSNraUcqr4Et7Z4kFTUgiZbs9dNIBz:3JICEmShcqrZ4cMbsDNIB6H+NTsCv
- TLSH T10EF2A5572A349325AB3EAE9306AB51D02B7EFBFA1C21E475C86BCF0D5C817C055F2612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
FlStudio25.torrent
Resource
win10v2004-20260513-en
30 signatures
150 seconds
Behavioral task
behavioral2
Sample
FlStudio25.torrent
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target FlStudio25.torrent
- Size 34KB
- SHA256 76f9efe4a0ddee663d02fe4f3a15e1f27769b4af1d697bf5ec91807f73579649
- MD5 724c87febd0e5751e0c612a07d96c811
- SHA1 00e1f5e966b42b84b1f605dce0db48a2b448f936
- SHA512 e56a1b5f961ff96865df7988baca2a1f847c962c58ccba7ee143790d903fe906f7b6611e0d9d57f75e89bba23ab8d14e4b9ac86772ccf9a5355de930373b6f04
- SSDEEP 384:bb8RUJiZSx56ZiEEtgHQDEWOSoC5ICGM5wmSNraUcqr4Et7Z4kFTUgiZbs9dNIBz:3JICEmShcqrZ4cMbsDNIB6H+NTsCv
- TLSH T10EF2A5572A349325AB3EAE9306AB51D02B7EFBFA1C21E475C86BCF0D5C817C055F2612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Contacts a large (618) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)