Overview
overview
8Static
static
8Voicemod_P...up.exe
windows10-2004-x64
7Voicemod_P...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3SteupX.exe
windows10-2004-x64
6SteupX.exe
windows11-ltsc_2024-x64
6VC_redist.x64.exe
windows10-2004-x64
4VC_redist.x64.exe
windows11-ltsc_2024-x64
4setup.exe
windows10-2004-x64
7setup.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3riskguard-pro.exe
windows10-2004-x64
6riskguard-pro.exe
windows11-ltsc_2024-x64
6General
- Target Voicemod_Pro_setup.exe
- Size 28.1MB
- Sample260804-bbndzaej8t
- SHA256 fb2f4bc078c9a87b4a85bdca339a4019410c811777b480f6c357094eec5b483b
- MD5 2428f87e2be4c9c09b5a23edc039e21c
- SHA1 5341e4328a7d884f597455a91007b78e9e6aa632
- SHA512 f7ca263ad4d74d521263569f10fba8c365c73391c9a3186638bae280fe0a85d1d19d690057d529d0a8ed85899159ee1723472bee065a67a1563f06892ab77bec
- SSDEEP 786432:nmw5oSyduo4PCO1P1GCjYbtmt+E6RTQa/Ik:nrqGKO1ovb2nWMa/h
- TLSH T19657330293B7E0EBDCD1FF3B1B7AA41C95D05CC842C7A1E0A5E34F98BF25B1A55061A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Voicemod_Pro_setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Voicemod_Pro_setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
SteupX.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
SteupX.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
VC_redist.x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
VC_redist.x64.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
riskguard-pro.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
riskguard-pro.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Voicemod_Pro_setup.exe
- Size 28.1MB
- SHA256 fb2f4bc078c9a87b4a85bdca339a4019410c811777b480f6c357094eec5b483b
- MD5 2428f87e2be4c9c09b5a23edc039e21c
- SHA1 5341e4328a7d884f597455a91007b78e9e6aa632
- SHA512 f7ca263ad4d74d521263569f10fba8c365c73391c9a3186638bae280fe0a85d1d19d690057d529d0a8ed85899159ee1723472bee065a67a1563f06892ab77bec
- SSDEEP 786432:nmw5oSyduo4PCO1P1GCjYbtmt+E6RTQa/Ik:nrqGKO1ovb2nWMa/h
- TLSH T19657330293B7E0EBDCD1FF3B1B7AA41C95D05CC842C7A1E0A5E34F98BF25B1A55061A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 419485a096bc7d95f872ed1b9b7b5c537231183d710363beee4d235bb79dbe04
- MD5 ee68463fed225c5c98d800bdbd205598
- SHA1 306364af624de3028e2078c4d8c234fa497bd723
- SHA512 b14fb74cb76b8f4e80fdd75b44adac3605883e2dcdb06b870811759d82fa2ec732cd63301f20a2168d7ad74510f62572818f90038f5116fe19c899eba68a5107
- SSDEEP 384:7py18oahashajPmIYInUJggBOZgAHhUKijb:7py18oafmeggBOCAHpij
- TLSH T175622D45AA2084F1DBA2167034D73A7A67F18E752A2449C347F35D4EEE16307B33A986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7
- MD5 d070f3275df715bf3708beff2c6c307d
- SHA1 93d3725801e07303e9727c4369e19fd139e69023
- SHA512 fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d
- SSDEEP 96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI
- TLSH T1CCF1C7B6F3D10673F9AB427428232F221B1AF5215765C1AB450316CE7661CE3FD34B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 29KB
- SHA256 5ef1f010f9a8be4ffe0913616f6c54acf403ee0b83d994821ae4b6716ec1d266
- MD5 c5bd51b72a0de24a183585da36a160c7
- SHA1 f99a50209a345185a84d34d0e5f66d04c75ff52f
- SHA512 1349027b08c7f82e17f572e035f224a46f33f0a410526cf471b22a74b7904b54d1befb5ea7f23c90079605d4663f1207b8c81a45e218801533d48b6602a93dbc
- SSDEEP 768:jnvg/4R1C7063G5I1CabuqcFKpnq0jdhK7W+q:jvu4RM2WCqYMX/
- TLSH T139D23818FDC83EBAD6DF1172281C4A6E559FC8080754CEABD3B15E62D4A63722EE510F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SteupX.exe
- Size 9.6MB
- SHA256 6698bc6495e96b8a6654e96369d6ab54a64b3da5d7bfde56f164c10c2afca24d
- MD5 7a64a333a55e69890cf627d4391df36d
- SHA1 8e66eeaa6b472e8a0fb75bce7e1a67112021bd6c
- SHA512 9eacc9b4d88bbd95bf318ebfec6518f1a460678da0769b9939a21ce461c328f7ebec0eb366a88bd77c7ca959d796a05a5df032369c6308f9b3981753db0752fd
- SSDEEP 98304:17mM6rFGPKI/kC88D6BS0W/32wo+GPp+kc5AZP/wuBm6:1KbFK5x8hBhnh4AV/wuU6
- TLSH T19DA62920BB5A99ADC45AC47083464A726E3170CB0B35B9FF45D486792FBAAF41F3C358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
- Target VC_redist.x64.exe
- Size 24.2MB
- SHA256 5d9999036f2b3a930f83b7fe3e2186b12e79ae7c007d538f52e3582e986a37c3
- MD5 810499fc266b73d33d71a8d1e3291ad3
- SHA1 91a09963703189274e995ded25b94e165545f126
- SHA512 bcf5975977941e30d9e157645ae07b9a0861fbdd98386a0ccecc633100e8e2760366f9c7fb54192b252108dfef708f6cbaa11e812d5036f44466d9d37cf14acd
- SSDEEP 393216:HyxUp3vyODNkHm6IYf+jbG8+qkfgaJxaw1pJWpw3PQlXp1lBrKOLllRmR0j9:HyWp3tZkHm6IYfpXh1a+3Pkp1ltlR9B
- TLSH T164473363A564803BD7A20437E926EA147D7CB224235189FBE6CCEC5D3B390C353BB665
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target setup.exe
- Size 2.7MB
- SHA256 e02289b832c8e696864258d297748a13b719a4a87459f555dbd362cb53f898fe
- MD5 e1fcae5e0b020c1f205c5f2348f9395a
- SHA1 cf1a69b970a5d719518566248d1bf4fe9d00eb9c
- SHA512 6a05050d996c80ca4aeb09217836134c16c2c038be9154fa673f581f8c43d6f641589ec748aade6330711f23fc4213e9d89cd1f2f40309defa62cb49a161f763
- SSDEEP 49152:HVlT4xA/kfz/5gA5Isr9Kcj39WT/wxsHT/UASIBJzG+f4D0DJ:H/T5/mWAO49Kcj3sw1Aj/40l
- TLSH T114D533545EE8E0E3DD244732FE15BA207B8BAE761858560B1325E9E41E332F58B3F6C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 32KB
- SHA256 f3e9b0d43b66fa6b05d2fa4de4547517a3ec0bc0b14de3c349d817465bbf7ab4
- MD5 6ebdde247cad8468575f1f2a4d7ae2a2
- SHA1 d0c502f45df55c0465c9406088ff016c2e7e6817
- SHA512 0b9edf145badd750c115597cb7a11d8f60768396444cb3d449a45afad7c930ea37f31b3aaa37b2fe4902f1ef6679756f3364f37ebe13d1a7e9b5d0340bac5c5a
- SSDEEP 768:6vVnRZHrPT4n4d/CryKDuIcrFKpnp0jdhK7R+qV:6vV3Hrc4EJBcZtXIV
- TLSH T1C9E2394CFDC52EBAE2DF05390409557F466FC8081B14DAABD3712E92D5E23326EE522E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target riskguard-pro.exe
- Size 11.1MB
- SHA256 3697ad4d5a887a81f825ccdf9e3dbe3c55a58c62802a31c894f7baad1a020ec3
- MD5 d77d0ad3ad0eb56afa5dd2b8fdca9a72
- SHA1 8267b9f760c1483ec33d5a2f2f492db7c364fec3
- SHA512 0e6caed09ca89ed9ae3f89ddf2c9baac3d8240b2846fb2f597cf3aea0ae7fabccc4c4a2d7bb9a330d7282ac627826b56728cf8dda9a819beb6437cfde9138887
- SSDEEP 98304:XSHJ1IrGY4jlzlG1FKr1+n3GeN1JvsNN94BIWjJ6nRMFjzsvG:JGYWlzsQ06WBzMG
- TLSH T130C619217B5A99ACD05BC4748257467A6D7130CB0B35B9FF08A462782F6ABF41F3831B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled