04c77eb01543f76d4d317504347d3ae9aa14b1c6029fec715505cd7e5c3455ed

General

Target
Voicemod.Pro.v1.2.6.7.Cracked.zip
Size 43.4MB
Sample260807-fgxxtaxerc
SHA256 04c77eb01543f76d4d317504347d3ae9aa14b1c6029fec715505cd7e5c3455ed
MD5 a8b23375cfb91cfa535616d735466d5b
SHA1 144a43364215b7b92cbbeaad19c29d881ebe85d2
SHA512 8eca96367b61c05c66fcd916d53aa2538dd038ba913ab170e1ac2a5872f98f184cf7e62936840008d9d2159f2c519c39fa98188bd327439d184f00c80c0b8a88
SSDEEP 786432:BhzSK40gJ1HaS9Selfz1mnTv6j/gX2+r1G3PPBxTfuekBIqKVEM72c:BhBj216kz1qmIlrw3PZxTwyqKVZ7x
TLSH
T1D5A7330DCA1C6D8D989F3686B042DAF1DCDDF29039A5CF766E7223069A078C533D299D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Voicemod.Pro.v1.2.6.7.Cracked/Voicemod.Pro.v1.2.6.7.Cracked/VoicemodDesktop.exe
- Size 2.3MB
- SHA256 b523b5c8e00d17dcccf9361de60b55a94b82b7c3f99e7a1bc8f360dfbf0085d3
- MD5 a7a9f1e62af46756fa9a398273bd532d
- SHA1 70336382aa5b56b7056b5595f43045d336656072
- SHA512 bd9e1c0cd2f8f5019c5e51ddd27d022a383f28897fc771af85d0f38c8ee1e72ea334e4f50b395d084a5bf2e0d1bf835d82209ef153da8f493f2ddbf9cca2ad5b
- SSDEEP 24576:IGLjWwo2aKdZqMx6v1UpexYxxNFscBh66afIaYYXpviEwromNzWF60O8wr+i:IgDq0GAlF7LafIXYXpdwBPew
- TLSH
  T1B8B58C513BA0C809D47A6E359D30C5EC97327C06EE66E60F78D63B5F29BA7924E11323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
behavioral1 behavioral2
- Target
  Voicemod.Pro.v1.2.6.7.Cracked/Voicemod.Pro.v1.2.6.7.Cracked/lib/VoicemodSDKDotNET.dll
- Size 22.4MB
- SHA256 4137a819837426bf0e622fad7971fb55eb1188c261edbc797c95bcf9070d8d9e
- MD5 51cba436d8c50c18b310048f805ef150
- SHA1 e0568aa31e005848d60ecc156ddb35af426b6461
- SHA512 112c632623bb9df2f9ee0efcc707fa65969087830f38c2196a1d568eaf29eeb038181c201335d5937eb5044e28fa05b4e35cd1eecd895c535c7d9884ed682740
- SSDEEP 393216:9k/6+7v/nOmhOM88xlLJApEC5L9Ln57Svnesezx5I+W0Y65NTBjAcs:9wv/Ome8xdCS2L9j5753KL095Nm
- TLSH
  T1B8372253F5849CAAD1A1507040E71E71BAB078AD833393D7C7A8567BAD337A00EB93B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Voicemod.Pro.v1.2.6.7.Cracked/VoicemodSetup.exe
- Size 22.1MB
- SHA256 fd42e86b11b5eefb40c1579d7dcd5cab8e556761592f3fb1310fa552be6cb2cb
- MD5 39f44629415940ebd39d6e266e37c17b
- SHA1 e879b845926888a4b622a494a2fb4b5a8ba87387
- SHA512 93a924a02d92740e0a90e23c4f82e6072cf4ed0b69f2a9b1eb5e3518aff88c9c31b4229d61e912239d32bf6112d5c5e9535c2a2c63c8c8fefb050ab0c81ed159
- SSDEEP 393216:YItVzTKI9bKxrrO/m3FkTii12c5hNVT5xHHek99tYeGbC40tOyB8pfOJcz5fee4O:DDuf6m3FSXDZVVr98eGb0AylkGDQL
- TLSH
  T16237332DD3994479D85E7E34D041D1F08E7A7534B8F18A392D39E64E1F382C62AB7BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
behavioral5 behavioral6