Overview
overview
7Static
static
4Plugins/de...ll.exe
windows10-2004-x64
7Plugins/de...ll.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...rd.bmp
windows10-2004-x64
1$PLUGINSDI...rd.bmp
windows11-ltsc_2024-x64
1$_14_/Imag...er.tga
windows10-2004-x64
3$_14_/Imag...er.tga
windows11-ltsc_2024-x64
3avcodec-52.dll
windows10-2004-x64
3avcodec-52.dll
windows11-ltsc_2024-x64
3mufin/aspects.asc
windows10-2004-x64
3mufin/aspects.asc
windows11-ltsc_2024-x64
3script_fil...1_v2.c
windows10-2004-x64
3script_fil...1_v2.c
windows11-ltsc_2024-x64
3script_fil...al.txt
windows10-2004-x64
1script_fil...al.txt
windows11-ltsc_2024-x64
1system/internet.ico
windows10-2004-x64
3system/internet.ico
windows11-ltsc_2024-x64
3system/int...te.url
windows10-2004-x64
1system/int...te.url
windows11-ltsc_2024-x64
1Plugins/di...ll.exe
windows10-2004-x64
7Plugins/di...ll.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$TEMP/Dire...Ti.dll
windows10-2004-x64
3$TEMP/Dire...Ti.dll
windows11-ltsc_2024-x64
3$TEMP/ildo...ll.exe
windows10-2004-x64
7$TEMP/ildo...ll.exe
windows11-ltsc_2024-x64
7$0/Fonts/OFL.txt
windows10-2004-x64
1$0/Fonts/OFL.txt
windows11-ltsc_2024-x64
1Downloads/Legacy.txt
windows10-2004-x64
1Downloads/Legacy.txt
windows11-ltsc_2024-x64
1General
- Target FL zip.zip
- Size 745.8MB
- Sample260809-m79gvsdr4w
- SHA256 69fa17d4ae260bc8b06c852e4a636f68550426c5fb7768de0c5104d85c54a1fb
- MD5 1b64ba025e4553a5b65d033f4988818a
- SHA1 5b770944d6a59090065163c0f881526a5ace0a59
- SHA512 65f6ad830ec813bf99d224c70f02a4388f6f642a8db061166bb1d137e9be44731bf2ed7c509eeee994b5a5decac901ad5bc76586e614f5e2f049e480bdb2b012
- SSDEEP 12582912:ps12Qad2qbs2tdiINGK/s203tINJxGI/+uNk/zpBpotL+8yN92f+wcL:S12QJ2BTzOIN+Hxz3QKW+tL
- TLSH T1F68933F9A1337E74A456605DBE728C504E0E34EB87486FFD70C6E79C996A118908EE0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Plugins/deckadance_install.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Plugins/deckadance_install.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$_14_/Image-Line/Effector/meter.tga
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$_14_/Image-Line/Effector/meter.tga
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
avcodec-52.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
avcodec-52.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
mufin/aspects.asc
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
mufin/aspects.asc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
script_files/casio_xwj1_v2.c
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
script_files/casio_xwj1_v2.c
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
script_files/tutorial.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
script_files/tutorial.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
system/internet.ico
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
system/internet.ico
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
system/internet/about/Create your own DJ web site.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
system/internet/about/Create your own DJ web site.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Plugins/directwavevst_install.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Plugins/directwavevst_install.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
$TEMP/DirectWave VSTi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
$TEMP/DirectWave VSTi.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
$TEMP/ildownloader_install.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
$TEMP/ildownloader_install.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
$0/Fonts/OFL.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
$0/Fonts/OFL.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Downloads/Legacy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Downloads/Legacy.txt
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Plugins/deckadance_install.exe
- Size 61.7MB
- SHA256 e78d143416d04bbf0e2617c6c3429a6e3f8e7fa08f87c00bae94e80cfd849fd5
- MD5 7e9723fd49942c8956c05570822dac20
- SHA1 986850ffa7197077dcf9544476c9259a7e62cc2e
- SHA512 a89c0f670d56c9ac3f9ef688ae6a93306ee587796a2ed60cd7c64fa9c65a0fdc53e7bbf5b7cd10f38b83a56602e94dc0ace32f9593192668a580e54fd2eda6f3
- SSDEEP 1572864:uxw1qYlgU9QzYc4XrV2siCePWZ4rUGtutOaiX6+V:t1qTU9QcT5a4s4a
- TLSH T1D9E7331CC1B9D1E5F058463D5C65C5228E0AA8AEEF3BA03FF7E664AFA47CD312D06542
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- TLSH T1E181857B92E50DF3D0A447BB00D71CE70226DC701769411E89472A8924E572BFE2EB06
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/modern-wizard.bmp
- Size 51KB
- SHA256 a7b2f12e01cbea88d4f645f797f2ca6107d76ae13cd1be6dc532b759bfe0d925
- MD5 9e4cd80a60db6947642677bf31a10906
- SHA1 feedc432df18b13ffba2b7478347d885861701fa
- SHA512 a02ae76b7a5df03a149a0b9c9efd314b8646b829b930233d0cea8b619b21720b383f92be95838310e7f1c4183d256823a96e48866b65ac7d2141ed4254ae471a
- SSDEEP 384:0b5ZBhNII36iwq7VzVpaHsA2vxM+5GVTfoeydiszl:2XR360JzVpaHsAI75GRfovcs5
- TLSH T1EA33E9F46824BC2D936CCC29C115EF8896D910B2FF9040B7703EA6954ADD2A91897FDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $_14_/Image-Line/Effector/meter.tga
- Size 41KB
- SHA256 6c196b0f3787bbe543f89889678a541e26c895ee26b7e30f5b922c33c3db24c6
- MD5 df9d10cc8aa5580035fb53e90db78204
- SHA1 89e6e3c98e9bc5ccd15993bebac51b4ef51abe3f
- SHA512 c9e56cfd577662bf24ea75fd513b1d65046ad960d0ebcd4bf5d4a465c9e27210b76286e5d50c092cb623dcca941e67f17cb08d63b06856129a7fe026081d827d
- SSDEEP 96:dFFFFFFFFFFFFFOC8l8l8l8l8l8l8l8l8l8l8l8l8lCFFFFFFFFFFFFFOmFFFFFN:R
- TLSH T1291303D44680D9B86980B43BE20717F382BA8F13ED10E1EB4448BEDF7970C1AC8A7312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target avcodec-52.dll
- Size 3.1MB
- SHA256 5a0b055b6b62642d498efde0deba7d7e69f1835fd52eb7f181adf5ee1d0e180a
- MD5 cc7be989d923f5e06b2c005a5326f42b
- SHA1 a5701bc42a8b1c61246fa5dac05073b3cef2f18b
- SHA512 5a92ae8eba42af7bed487672b4a71b1bc6f6e9afa875387044dc3d3defcf4e3a2fca3b9b62fba4b28f960c96f587c6c259abed8d15edb1e9b13902c48c434c32
- SSDEEP 98304:3z84D7HIffAnyJ3De79wvpyxZFVILcFJJppP4zPdh:jFyJoiRLcFJJppPEP
- TLSH T1F0E57D81F6E749F6D4430D71407AEA3B9B34570D9A20C775FFC06E9AF8A3752492228B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mufin/aspects.asc
- Size 7.1MB
- SHA256 f3574d7fe9c35e81edfa7aecdf76771a05e0ff248a9f94458535fc58ddf4b100
- MD5 8a5d509c5231ca25153589746ca512ad
- SHA1 f64e2173704555d2006c424e753f86f1f0078c25
- SHA512 8d5a6b382cc293343f37318a682d0b1ea665a5f0a96f67d82160657dab557162c6ef8c800573c1becbad87de9f5a22399fefdabaa264ad6b9fe0b07f515b7d4c
- SSDEEP 49152:e81a9PkUU8sA4HuGLsjO5UHlX8NJSjzKz8ztn+aryJ0XGC/:j1aZUbA4LLpUHV8NezKgpn+Ic0XGC/
- TLSH T129768B824B973CD6EA69233120B35F196E28E585A93582F3E3713C3D5EFAB413821775
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target script_files/casio_xwj1_v2.c
- Size 13KB
- SHA256 7877b59b7038c72239623166ed8fc73fb617ca1a9506420f7457a9cb8ce0d204
- MD5 dc732f2124ca625bd067818ab1be5f96
- SHA1 47043f453d044ee5968d86850d51dd0281b22e72
- SHA512 3113b9a2605fe27d701aef8f6d39944e132a4e1b9e72187af1f782cf6814fa62a62ecddedfc2cd06a3ec842da3688b69b6ab380262d824f54b4a1227f130ea1f
- SSDEEP 96:2OJGr7e2PDmZw6Yh+jVW6MUZJCYL5RVjRyK5X7/h2DAOCh3c3Ce9jLvMNGcgRkoX:2OQq26i6y+BW6VmYL5f1yMDU3VRqx9F2
- TLSH T12F52AE28EE8E5F0C04635A217402B0F55F95410F06A355DAFC28B6CAAE5C7E1DC79EF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target script_files/tutorial.txt
- Size 2KB
- SHA256 f4651c84174b7278c2ef3006d37d6b7b016a574ea7c46ebd1b9ad9793f061e22
- MD5 de80b79cdba9f7db1db56a972babedbf
- SHA1 c5161a28976a9b017a4b2168c4b6c37681cf0f76
- SHA512 c5d279c32c9e130b7a6cb4041f956137beb4db168a5dd26e09f330dbee22c81846fd0f6db478cf5a36ecc5f1c6133669cf27d53f69dbe433be03bdcfd8470c69
- TLSH T19C4184062ECBA3391B03CEC1741DB7AADB20D068B723B6A47C99074443125E1CAFD9EC
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target system/internet.ico
- Size 9KB
- SHA256 c0381b4c5918470cae3686993410e327e173471ea4ff4dc3cdb36d28d062fd62
- MD5 75f0444f425321b1fe5cd36960552963
- SHA1 fbf5df7dca121534b873cc1aa97e024ffc0dbf4d
- SHA512 c57c626eaa2e9477e5e9def5469a7b872fbb1778620e766013cd8ffda4ca2b6576bb5516756d240f114f253d3382167d2b7de74442c191081f3b0779e4b4c088
- SSDEEP 192:V1/5nvZslPmL0QSaBvJh90Ha6quYI6ZlR0qVsBF:V1/reP2v509F6ZvVsv
- TLSH T1CD225C143B7A9889C4164A30C4DF4B0825399CF19CA5E95B99F4F9AF2CB3506A63357C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target system/internet/about/Create your own DJ web site.url
- Size 132B
- SHA256 541d5a94eab9203d9b7765c703fe1a364bd416e93b65b34c347aebdb05288f77
- MD5 42cfb9c9d1428abb13178127926700ea
- SHA1 6ee976491678afa2452acff0d85ffc3e037f817e
- SHA512 5aef1a9031f29bb59570437b5bc98eba75855017044f6bc1dfad8c1caa70a6678dbbf4c3e430354b0753927f0e89235915710d0eff7f1ce2483c0bcecdda93a3
- TLSH T1F6C09B5C524DC099D141990570F1F558540E75B094D3D4DC6154DD4E3D05181D545779
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Plugins/directwavevst_install.exe
- Size 11.8MB
- SHA256 131ca5833313b3adf4342b45548445e4023a3f53d6929c9339578c191924b935
- MD5 e08d7a16680a7254ae4e82dae6acec9f
- SHA1 df58e774fc28b7524c12e23562ec5f3b2f74e6c2
- SHA512 fa5ba63e5122ef50f6c644f03096f10c854ff1ea00ba5715b5a94ea9f3227a4679cc7f2ffa7a669ff234487eb5d08445f9b7aba9df82823f579ddc5c8428cdaa
- SSDEEP 196608:Je3rjIoq10fPLJDck5kKa8dp6arGUy12c5KiwjHWaBik18l3N0CszLkXSTx7Zy:zlahg8bJq1cGrwbWaJ18xN3soeg
- TLSH T19EC633A391610A8DFF2502B3F3907B058773F6BFD85DAC5652B27EB608D614227CA21D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- TLSH T1E181857B92E50DF3D0A447BB00D71CE70226DC701769411E89472A8924E572BFE2EB06
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $TEMP/DirectWave VSTi.dll
- Size 1.0MB
- SHA256 ad2136184655183e9f2baa2a541cee2c262e9ecf923414ccfacf267c064b0b79
- MD5 4c0d93d3e81ce0d2850aba9d0a128a72
- SHA1 3e61ffe0220371e106276d287afd1cf238e843ae
- SHA512 652e5f28991bfe9f3a8b8ee6481e0217ca63410505e6fe627e12017f5cd6968e2516f41027b160c1d2bd22fa83bedfb7001d9c7718802462b31f364d84cbefec
- SSDEEP 24576:mSBsXl9+ZrBVHVI4PmHlAO98aPV2TMJUsDfE:ulIPHW4+F92TSUsDfE
- TLSH T19D25CF00BA42D0BAC4EA01B01079B72BD53D667E073C6CF3ABD059F96CB4EE16D75296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/ildownloader_install.exe
- Size 3.1MB
- SHA256 29af8873ab20591d8a9d44075b1d1b2077c71c6d7360f551a1f84f99bd41c6ee
- MD5 46ed8d0110beac02c720436c487f4302
- SHA1 6f408dcc9bbe2433b7fc3bb26b1558573c7079a5
- SHA512 141c8b3f1899f32f9112a84ad31c65cc1f12f0adb1d9620eab4d1b3c62e37cb82d09e03627ea92daa401fc278df62c9a9a43e70617c46e61a4884918ab64c48a
- SSDEEP 49152:YPQ/7T2qfCMKPg7Z+gwiaOttLQRwned8me6XEEsEvTsTcqWw3nnCVIzdcltK:YM7TkMKYZLwiV86eOm2PZTcKn7zdcDK
- TLSH T14DE5333163F21352EA3487389B5504B74E3A5F06909FB997C3492E878DB01CD7BBAB46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $0/Fonts/OFL.txt
- Size 4KB
- SHA256 4de8b3f9675df2a341b04ae94732edbe943c379cb85a8ae5c33638ba08184a9e
- MD5 50763bab9cf5470e16879153d862f988
- SHA1 02fca5941d1cae7bb4f3c7c8916b538e738eef79
- SHA512 1a25c97b540671a82b7c9ab2136f2a1ae56259911a73453199ee03006aa660a5a3aed2e4feae92d5be3c71bcec8d685d57e32c4cb857eb7739f1a433117783a7
- SSDEEP 96:PUW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:P0zl7hqyvaQ1+3zCdyQHZV
- TLSH T17091B81A7F4523B109C0D241F776E9DEF21A416D37AB69C5705AC16C23B6C6803FE2A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Downloads/Legacy.txt
- Size 305B
- SHA256 2328f42dd3e338247137d39e411cbc943a4ae6d80d87224eff9b006c5261ad50
- MD5 d6dece5ccbc5759b0f96baa7a6b1b198
- SHA1 5605c3797ce35c5c4b896421bd7202c9e03eed9a
- SHA512 b986461511252874f51c721ff6e689bc6f8ad9db8e2f53d9057c0d70c37589ab900385a2d502bd6ed46c58677984dc90cf3e39df44f590f13024fcdc57bb653f
- TLSH T19BE0CD7C036E01D4908766F192815C6E4D8D953C417B44F4BE7D86147609760B4A95DC
- MD5 SHA1 SHA512 TLSH
Score1/10