5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b

Sharing

Copy URL Twitter E-mail

General

Target
lmms-1.2.2-win64.exe
Size 35.1MB
Sample260805-fwslmsyend
SHA256 5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b
MD5 8a5e80d496c3052a2057098dcbb1293f
SHA1 f26b1be68206eaa0b36f1ee057bda45b45070a30
SHA512 e99d92bec376c548c0b3f8569fa43414efe9fa3f24d43a23c281a526a5a4c94642ddd0103a369b5feebe0b63f00c2633925be7a22ed3ccd70ef7c599fb424351
SSDEEP 786432:fJNH9O9cqiO3Z3QBH9OiJJTtDUv2P2YG+O9aXNTqtuHkwloovV/6+:Rd9OT3Z3Qx9OoUvNY/O9eNT5EhMV/n
TLSH
T169873386A2E850A2C1BCDF76109F00E798561F1FCE73C28AD8D9B6791836D350E9BF54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  lmms-1.2.2-win64.exe
- Size 35.1MB
- SHA256 5f20af1d782468507417d0785826b1f064fadba88ed1691e2def269922ace56b
- MD5 8a5e80d496c3052a2057098dcbb1293f
- SHA1 f26b1be68206eaa0b36f1ee057bda45b45070a30
- SHA512 e99d92bec376c548c0b3f8569fa43414efe9fa3f24d43a23c281a526a5a4c94642ddd0103a369b5feebe0b63f00c2633925be7a22ed3ccd70ef7c599fb424351
- SSDEEP 786432:fJNH9O9cqiO3Z3QBH9OiJJTtDUv2P2YG+O9aXNTqtuHkwloovV/6+:Rd9OT3Z3Qx9OoUvNY/O9eNT5EhMV/n
- TLSH
  T169873386A2E850A2C1BCDF76109F00E798561F1FCE73C28AD8D9B6791836D350E9BF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 18KB
- SHA256 dbd0068d46077ee1ace4eaafc3312389c29af22d306c5757a1a29a93146604a9
- MD5 adec63bd08a185bffe6fda335d29df87
- SHA1 23f37d31f3b1c07547ad4fa2747305a04ac09b54
- SHA512 44bb32fa41b0c2b41d637f15dd2cab84ad6f9dae39febb263923eeee19d1c80d65ba3939ab87d34fbb28af6a6f867c21daab5810d289e309451c67ef6f65a88c
- SSDEEP 384:LPs/sv/Qji4uGGAjc6GKv3WRg0DXRpLJXCYAkF3cuzFNS:LPdEipAmbhX1cu
- TLSH
  T19782E746FF461CF3CC8509344176F32F5A58C474AC268E10CB89AE69DDA7D72D19E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 9KB
- SHA256 e5ef538f9ada994299a0860c26f68ae0649495f68d388b910a05cba00d3ee365
- MD5 000ca2d1e21f4b461b2c8b888b098a4a
- SHA1 42fafc505d2fe16657fa5ebbd5ccd89c3b386637
- SHA512 ba0b2960c95fff4428999adc02f82c88b59aef464f2057be0b8d93c523293e84a9b8edd73d9a8dcfac96d9340a7d09815c8ebd5cfb317bca81e07855d08e0fbc
- SSDEEP 192:+QLDyzpK69sLG87l1Eu3VA9XJLYKFaZc75BDuqz:+QL+zU6AGjuwJLJAc75By
- TLSH
  T14B12B5C9FA0678B1ED0508354243F67F56AC20208C53CC46E5501E6DEDBBCF58E097A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 23KB
- SHA256 2e1b11ee20e5061ea86dc6b01e3efc659e887540afcab7317cdfd6a8eff87ec3
- MD5 125aebb055446fb52aa5956cf99e8a9a
- SHA1 6b58fd08a8ff2763219cc6b0dcdb875f9970f850
- SHA512 5f85e48bd3ae2fd2be0595b93cbf74674e0281210688dcc73691178b295a702e8d43898afb6e5d8b7e82de98b4ee28194c9838ddf8279cde85f7fe48d34dc8b7
- SSDEEP 384:7AQ5GjarYFU76ffyEIPb9p206QrHwIl8ToknCLJy4k9KyFkKCKWin/aY+:72XixPbPD6gQikUywWkKx/aY+
- TLSH
  T1F1B23ADCFA4391F3E8D284F5215A7F3E95B28650C83B9A81EF54C950FA73AE46208717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 6KB
- SHA256 9931a2f8bb44b92ff26062b99cbb6e41ed1cfad65079dec5d6d9c006223bd121
- MD5 7f780de67db61a924bebc0cafaded3ad
- SHA1 3ac359dce08ceff16e4214fe45d83fdc8e3f2e1a
- SHA512 8378f04b6f5085e887ed46874414e5681f0ecb6889dbaa25eb78f75112d4be603aef8dec6a2a81857a19978f6ccf07d65d566ff3f0943da809de22599ffdd8f2
- SSDEEP 48:6qX08pwehWTmk61T+8tH1GNO/icjsgnFp8hKAYKFaLDzzDz/xRe2v1e:GkwehWn6086+sgnchKAYKFafzf60
- TLSH
  T1CEC1D6AFB30140B2D94318B416B7BC2F36F789004E071C2ED6D278671896A353816A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Qt5Core.dll
- Size 5.1MB
- SHA256 64d345fe6b73c2f249164c6494074c0393d7ee45388c562d57aef9708a1f3c26
- MD5 b1f30ccbb0d01071d9af4ec6eb85a3b3
- SHA1 691146c9430c96d789fd2955a2c65b820a9202f9
- SHA512 61388eb4253b3b04ccea2b57062936c0b17fb83122639435c40f03458beec7ab652486e1f0e402c405b867505d6f8928a83ab848e1d2ce3e1708e9d88881fb3a
- SSDEEP 98304:+v/RNsL12fxXz+NIVnB2H0SorJsv6tWKFdu9CpllQ:gWI4mncOrJsv6tWKFdu9Cp/
- TLSH
  T132365B43F3A351ADD96BC13446ABA332B931B8594131AE6F1638EB712D31F606B1E71C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Qt5Gui.dll
- Size 4.5MB
- SHA256 b8e72ec747f1f056f07536446934ee0606525f0eccdcae78966e6097e4d577e5
- MD5 23439958cd89baa6970c1aac9060af2b
- SHA1 522bad44bd28149e62ff7ec45b38bb8cfca8c0e5
- SHA512 3d909214e74f7ed718688b0e2b7f86319bfbe20a902c4f127f2f3a7e25b2bd781a62afd30eaa07bbbcd87d9ff03f05b053a6e63c007bbc89790cfcd97dac5638
- SSDEEP 49152:qR7gxfIqqH22A9pcoNHWh2EZf2KucPtchYTesGY2XtHM0r8+YtjY1hCKyO3la40r:qdoNoDucPKmTmY+Qy3la4m/tGc
- TLSH
  T173264A97F2A360DCC52BC13442A7A632F4317C650175BDAF1674CB762E21F606B6BB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Qt5Widgets.dll
- Size 5.7MB
- SHA256 7e5754119941a4d996b00fe5731c005044f21e51bcf8315dbdccad9a21077c21
- MD5 9364bbf7fc86cd2f0a9d258803ee4105
- SHA1 0d0cadd5181df2a1f9540d0017daf7cfffe41157
- SHA512 2687d25b60f6ba3e352ebcde651449f6fbced20ebc33359873ccf3626b5b87af865a2d471d2288d4e5212d06a497f76a82362f2d2dfe6de7c9f8f1068453dcff
- SSDEEP 49152:RvIi8GdnZAUzjfz5Z+9f3VpM2W8LVaHGf/Kdj+sHHL2DY7FmEexkVskzbIyo8QuN:Rn7zc3McAMO1xFQ+cBKhf9
- TLSH
  T1C5565B47F29354DDC96BC138479AA3B2B5317C580635BDAF2620CB362F51EB0EB1A718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Qt5Xml.dll
- Size 361KB
- SHA256 3864e3649485fb23d12f01e968a19f7ce0eff987c02e74e602c0b5527f92912d
- MD5 790afb9ad63350fe327cbe409c08f01a
- SHA1 652b7d29dcbd633282de7c2a6d39a0e718a4bb1c
- SHA512 084f44583fc16c00126ed4ae340fa041b9ebaccb4e041dce73da66c6ccfc4be726cde486f199c056e3e3342db87314407af392f33d9efdd29adb15974b2c785a
- SSDEEP 6144:5rPIKhCmvlwVuZa+hrctIWFXKxpFE0CqwHGYkC/S6C+/0UPiCTmRsU:5rAKhpvlwVuZa+hrctIWFXKxfCqwYC/L
- TLSH
  T1B3742927F69269AED21BC17889F7A333B572785D03317C6F5174CB321E20DA4276A62C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  SDL.dll
- Size 1.8MB
- SHA256 2e3065bbdeea3b954b409d96a24b925ab7984f2f15a67cd34b5e774d675e4462
- MD5 6acfa9b50ed9448d025d811b5f78d948
- SHA1 f2999079a34803a7b99f10f8d9cc180da3e1259a
- SHA512 8567ca9aae3e7acdf2b811ddbcd67f6834f7129cf3bdc78a49b38a46f9407e7ad8ebc48a97e3c1eda9c4fcbf997f6344c6adba8777fbbd157850e3e3e4f1a62d
- SSDEEP 24576:j4dVmGBgLXw2PvPdCi80yvPvo61FQtlD0pskBbzRTiNpo:OlBgDw2Pv1mvPWlD0PBbzRTiNpo
- TLSH
  T187957DCBF796CE5FD91603350CEB47213378E18423C7EB1B2A1896B42D273956F85A4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Uninstall.exe
- Size 525KB
- SHA256 0325caae308d73fc6f7b3e3a3de21fcdc4ffd18e76230ae8ee8928a56999b6ca
- MD5 65d89fc8960a5d095097c849a93a5efe
- SHA1 c3a35b02acc9922f4a26b52fb46221c2e1e4aa3a
- SHA512 57f0a192b7ade1e33ce0ff33948aa99a6fb4d9b5b25caea0d82d67b2e6d2c620d8c96cc69f7b9699f5f95ecd893138529556685953ff0a70777d874688697bd0
- SSDEEP 6144:xmR3kSaZW678d2aYd/RnEysweS9tvy7ETDzeFgR:xI3zIPpptfvzeu
- TLSH
  T131B48B96A2E45082D53CEE7250AA10E794561F2FCDBBC2DBD9ED76762032D781F0BE40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral21 behavioral22
- Target
  libFLAC-8.dll
- Size 850KB
- SHA256 b710b87ca63ad96c4a4d3201807624c266c757037fa61622b113030324b8e10a
- MD5 43c541620fb71d46644ab29d4daf2355
- SHA1 f24b28154f838cebfb461f671d58237f88a5c47c
- SHA512 b6d0f798608b0a887c572ec8054f28fb98aabdee32c3bfaa93c7d4fabae42cdbe317ff8e8cc1b5f22601e0612f199137dd69f781fe1afd2e810f120dbde4c63e
- SSDEEP 12288:hQ37b4h4brSbNuJJWvYGn9knheKZDD1Nn3MI8DpfhwReMKgAc4n:hvNBubIYTnkKzx8DdhwcgAc4n
- TLSH
  T16C058C9DF7D29D9EEA26427149AB83237735F544274ACF670A10EA302D13FC03FA6A51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  libfftw3f-3.dll
- Size 2.1MB
- SHA256 af27aac8163c106b8549d29b4895eda5cb243a2a2b83404d407c810bee18e695
- MD5 36efd33b3860007282a83f4eeaf9c4ff
- SHA1 4c58e592ab37ec054eace43b297632e16d93cdc2
- SHA512 af915d7cc953deff55d94b370975fe803b1db03b2b72b8d4eff408ac4dc4c197214b341be1d7a2d38271a77d664357f461fc8ecd9af56e1690b794a8a75778e8
- SSDEEP 49152:AMNi+stG6CCqwCy2D9+mtDfubpG3GTrx4JCbu:Vso629+6zCb
- TLSH
  T12EA53B42F6ECC9DAE13F6C3162EDFA2BB61134014D14099BA3F0899C5F667C42F9691B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  libfltk.dll
- Size 2.6MB
- SHA256 33515e361558bbcb098c34a9c1887f53b1c32e393c73aacfee576caab2c0f786
- MD5 e1bc70e49a20034b7b152b3fbac4d901
- SHA1 fd8d5f3b122f7633d5988fe506a18a37483e9c47
- SHA512 13522f1470606982fd3a04efcce107b2cb8780c867c2dd7f108955bff3b8891650831fcd24887b7537dfd06fe1349061524b4b9477d886e3fdf74c10ce483807
- SSDEEP 49152:lMkiuxzNB3WuNEHvIG4hg7CMJ/lVBppitwWo7Vb5EgtggL3xMe25CB07ktEE3k4v:vNEsQppRJhukkaXMjE1
- TLSH
  T14BD53A62ABE59C5BC96642349AD3D331B3F8FD425332D78B4640C2313E57AE07F86686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  libfluidsynth.dll
- Size 2.0MB
- SHA256 c1af844d0341256ae1647d4ac34e421c923101c82d9cc7dcf01423e99d627a52
- MD5 df3753f35250ebac4a926854895558bb
- SHA1 04f644ebf092d989aefe7389bf9e8f430c916fcd
- SHA512 19690eaec2a81b094d0caf938645c770ef25a933f62ef66bd8d0fc33fac7ba30340099117967dffb765ab10b5cf547da095643bd58568da1bbda290f5314de7a
- SSDEEP 49152:r0SkR7rATHjind6BPnBr6EBLwAn4jdwznJ9LPp+:gl0nbyjdw/Pp+
- TLSH
  T13E95594EA786CA9ECA5102314FA74728233EF5546773EF331EE852783C67B01EE52985
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  libgig-6.dll
- Size 801KB
- SHA256 3200b9740378b60df71076341af06d67d4ca3086219dea6c3a9d08b8d30d8620
- MD5 2a7e2c316655fcbbbe3d51f2cced6ef9
- SHA1 60bdff72a5029f9743f9fc1e8be95ccc4b41f89f
- SHA512 106c8c79bd833ddd8c5c55eeea8142e67ae26347c1b3c280371f8512fe65e473eb71f0b0dc040899c5ecc79e219b3f60b5c46c5fc68e859909825346d328fdf9
- SSDEEP 12288:Qc+GVNYzEJek9LRa/GTW+bBWGzdx8UmF96Lzc5y4xPs:1VIyekW/GTW+bBrdC796nc5y4xPs
- TLSH
  T101054A17F7A349BCC56BC13583D39772BA30B8194234BA2E1AD4DB222F25D605B2F764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32