General

  • Target
    FL zip.zip
  • Size 745.8MB
  • Sample260809-m79gvsdr4w
  • SHA256 69fa17d4ae260bc8b06c852e4a636f68550426c5fb7768de0c5104d85c54a1fb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Plugins/deckadance_install.exe
    • Size 61.7MB
    • SHA256 e78d143416d04bbf0e2617c6c3429a6e3f8e7fa08f87c00bae94e80cfd849fd5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/UserInfo.dll
    • Size 4KB
    • SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/modern-wizard.bmp
    • Size 51KB
    • SHA256 a7b2f12e01cbea88d4f645f797f2ca6107d76ae13cd1be6dc532b759bfe0d925
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      $_14_/Image-Line/Effector/meter.tga
    • Size 41KB
    • SHA256 6c196b0f3787bbe543f89889678a541e26c895ee26b7e30f5b922c33c3db24c6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      avcodec-52.dll
    • Size 3.1MB
    • SHA256 5a0b055b6b62642d498efde0deba7d7e69f1835fd52eb7f181adf5ee1d0e180a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      mufin/aspects.asc
    • Size 7.1MB
    • SHA256 f3574d7fe9c35e81edfa7aecdf76771a05e0ff248a9f94458535fc58ddf4b100
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      script_files/casio_xwj1_v2.c
    • Size 13KB
    • SHA256 7877b59b7038c72239623166ed8fc73fb617ca1a9506420f7457a9cb8ce0d204
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      script_files/tutorial.txt
    • Size 2KB
    • SHA256 f4651c84174b7278c2ef3006d37d6b7b016a574ea7c46ebd1b9ad9793f061e22
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      system/internet.ico
    • Size 9KB
    • SHA256 c0381b4c5918470cae3686993410e327e173471ea4ff4dc3cdb36d28d062fd62
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      system/internet/about/Create your own DJ web site.url
    • Size 132B
    • SHA256 541d5a94eab9203d9b7765c703fe1a364bd416e93b65b34c347aebdb05288f77
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Plugins/directwavevst_install.exe
    • Size 11.8MB
    • SHA256 131ca5833313b3adf4342b45548445e4023a3f53d6929c9339578c191924b935
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Target
      $PLUGINSDIR/UserInfo.dll
    • Size 4KB
    • SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      $TEMP/DirectWave VSTi.dll
    • Size 1.0MB
    • SHA256 ad2136184655183e9f2baa2a541cee2c262e9ecf923414ccfacf267c064b0b79
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $TEMP/ildownloader_install.exe
    • Size 3.1MB
    • SHA256 29af8873ab20591d8a9d44075b1d1b2077c71c6d7360f551a1f84f99bd41c6ee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Target
      $0/Fonts/OFL.txt
    • Size 4KB
    • SHA256 4de8b3f9675df2a341b04ae94732edbe943c379cb85a8ae5c33638ba08184a9e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Downloads/Legacy.txt
    • Size 305B
    • SHA256 2328f42dd3e338247137d39e411cbc943a4ae6d80d87224eff9b006c5261ad50
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdflinkinstaller
Score
4/10

behavioral1

discoveryinstaller
Score
7/10

behavioral2

discoveryinstaller
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

ransomware
Score
1/10

behavioral16

ransomware
Score
1/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

discovery
Score
7/10

behavioral22

discovery
Score
7/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
7/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

ransomware
Score
1/10

behavioral32

ransomware
Score
1/10