General

  • Target
    FL zip.zip
  • Size 745.8MB
  • Sample260809-m79gvsdr4w
  • SHA256 69fa17d4ae260bc8b06c852e4a636f68550426c5fb7768de0c5104d85c54a1fb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 83 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 19 IoCs

    Codesigned file was signed by an untrusted entity.

  • NSIS installer 58 IoCs

File Explorer

  • FL zip.zip
    .zip 745.8MB
  • ChingLiu.Install.Notes.nfo
    2KB
  • How To Open Nfo Files.txt
    289B
  • Plugins/deckadance_install.exe
    .exe 61.7MB
  • $0/ASIO4ALL.exe
    .exe 409KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/System.dll
    .dll 10KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • ASIO4ALL Web Site.url
    .url 95B
  • ASIO4ALL v2 Instruction Manual.pdf
    .pdf 247KB
  • a4apanel.exe
    .exe 6KB
  • a4apanel64.exe
    .exe 6KB
  • asio4all.dll
    .dll 113KB
  • asio4all64.dll
    .dll 138KB
  • uninstall.exe
    .exe 43KB
  • $PLUGINSDIR/System.dll
    .dll 10KB
  • $0/shareddlls_install.exe
    .exe 9.4MB
  • $PLUGINSDIR/AccessControl.dll
    .dll 10KB
  • $PLUGINSDIR/ILInstallUtil.dll
    .dll 343KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/ioA.ini
    199B
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • Artwork/Fonts/Cuprum.ttf
    190KB
  • Artwork/Fonts/Cuprum/OFL.txt
    4KB
  • Artwork/Fonts/Francois One/OFL.txt
    4KB
  • Artwork/Fonts/FrancoisOne.ttf
    110KB
  • Artwork/Fonts/ILGlyphs.ttf
    3KB
  • Artwork/Fonts/PT Sans/OFL.txt
    4KB
  • Artwork/Fonts/PT_Sans-Narrow-Web-Regular.ttf
    349KB
  • Artwork/Fonts/Revalia-Regular.ttf
    61KB
  • Artwork/Fonts/Revalia/OFL.txt
    4KB
  • Artwork/Fonts/Share-Regular.ttf
    89KB
  • Artwork/Fonts/Share/OFL.txt
    4KB
  • DelZip190.dll
    .dll 308KB
  • DelZip64.dll
    .dll 351KB
  • Elastique.dll
    .dll 652KB
  • LAMEenc.dll
    .dll 356KB
  • LAMEenc_x64.dll
    .dll 398KB
  • QuickFontCache.dll
    .dll 497KB
  • QuickFontCache_x64.dll
    .dll 784KB
  • REX Shared Library.dll
    .dll 269KB
  • REX Shared Library_x64.dll
    .dll 311KB
  • Reverb.dll
    .dll 68KB
  • Reverb_x64.dll
    .dll 71KB
  • SG.dll
    .dll 2.3MB
  • SG_x64.dll
    .dll 3.5MB
  • Uninstall.exe.nsis
    303KB
  • dsp_ipp.dll
    .dll 17.9MB
  • dsp_ipp_x64.dll
    .dll 18.8MB
  • elastique_x64.dll
    .dll 1.3MB
  • freetype.dll
    .dll 472KB
  • freetype_x64.dll
    .dll 589KB
  • oggio.dll
    .dll 1.2MB
  • oggio_x64.dll
    .dll 1.3MB
  • wavpackdll.dll
    .dll 220KB
  • wavpackdll_x64.dll
    .dll 262KB
  • $PLUGINSDIR/AccessControl.dll
    .dll 10KB
  • $PLUGINSDIR/ILInstallUtil.dll
    .dll 343KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/ioA.ini
    360B
  • $PLUGINSDIR/ioDirQuestion.ini
    808B
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    9KB
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • $_14_/Image-Line/Effector/Effector.dll
    .dll 472KB
  • $_14_/Image-Line/Effector/bg.tga
    702KB
  • $_14_/Image-Line/Effector/btn enable.tga
    8KB
  • $_14_/Image-Line/Effector/btn fx.tga
    314KB
  • $_14_/Image-Line/Effector/btn shape.tga
    11KB
  • $_14_/Image-Line/Effector/btn sync.tga
    37KB
  • $_14_/Image-Line/Effector/bypass.tga
    8KB
  • $_14_/Image-Line/Effector/knob blue.tga
    806KB
  • $_14_/Image-Line/Effector/knob gain.tga
    516KB
  • $_14_/Image-Line/Effector/knob yel.tga
    806KB
  • $_14_/Image-Line/Effector/meter.tga
    41KB
  • AudioGenSDK.dll
    .dll 3.6MB
  • Deckadance.chm
    .chm 5.3MB
  • IL-plugin-scanner32.exe
    .exe 2.5MB
  • Uninstall.exe.nsis
    306KB
  • adec.dll
    .dll 3.9MB
  • audio/Headstrong - Symphony of Soul.mp3
    13.9MB
  • audio/Toby Emerson - Can you feel the music.mp3
    14.1MB
  • avcodec-52.dll
    .dll 3.1MB
  • avformat-52.dll
    .dll 445KB
  • avutil-50.dll
    .dll 69KB
  • changelog.txt
    44KB
  • deckadance2.dll
    .dll 14.7MB
  • deckadance2.exe
    .exe 15.2MB
  • mufin/aspects.asc
    7.1MB
  • mufin/cfg_classification.esc
    66KB
  • mufin/cfg_extraction_2002.esc
    26KB
  • mufin/cfg_session_2002.esc
    136KB
  • script_files/behringer_cmd_micro.c
    3KB
  • script_files/casio_xwj1_v2.c
    13KB
  • script_files/dd_commands.h
    17KB
  • script_files/numark_mixtrack_pro_ii.c
    15KB
  • script_files/tutorial.txt
    2KB
  • script_files/vestax_spin.c
    13KB
  • setup/default_midi_mapping.xml
    .xml 27KB
  • system/internet.ico
    9KB
  • system/internet/about/Create your own DJ web site.url
    132B
  • system/internet/about/Deckadance DJ Mixer.url
    51B
  • system/internet/about/Diagnostic Tool.url
    60B
  • system/internet/about/FL Studio - Virtual Music Studio.url
    47B
  • system/internet/about/Image-Line.url
    115B
  • system/internet/about/Sytrus synthesizer homepage.url
    45B
  • xerces-c_3_0.dll
    .dll 2.2MB
  • Plugins/directwavevst_install.exe
    .exe 11.8MB
  • $0/minihost_install.exe
    .exe 4.0MB
  • $PLUGINSDIR/AccessControl.dll
    .dll 10KB
  • $PLUGINSDIR/ILInstallUtil.dll
    .dll 343KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/ioA.ini
    199B
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • MiniHostModular.exe
    .exe 5.9MB
  • Uninstall.exe.nsis
    302KB
  • scanner32.exe
    .exe 2.5MB
  • $PLUGINSDIR/AccessControl.dll
    .dll 10KB
  • $PLUGINSDIR/ILInstallUtil.dll
    .dll 343KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/ioA.ini
    552B
  • $PLUGINSDIR/ioGotoWebPage.ini
    906B
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • $TEMP/DirectWave VSTi.dll
    .dll 1.0MB
  • $TEMP/ildownloader_install.exe
    .exe 3.1MB
  • $0/Downloads/Drumaxx.txt
    21KB
  • $0/Downloads/FL Mobile Samples.txt
    338KB
  • $0/Downloads/Harmor.txt
    13KB
  • $0/Downloads/Legacy.txt
    305B
  • $0/Downloads/Loops.txt
    1.7MB
  • $0/Downloads/Synthmaker.txt
    7KB
  • $0/Downloads/bassdrum.txt
    238B
  • $0/Downloads/directwave.txt
    87KB
  • $0/Downloads/fpc.txt
    7KB
  • $0/Downloads/gms.txt
    244B
  • $0/Downloads/morphine.txt
    11KB
  • $0/Downloads/ogun.txt
    5KB
  • $0/Downloads/poizone.txt
    32KB
  • $0/Downloads/sakura.txt
    16KB
  • $0/Downloads/sawer.txt
    24KB
  • $0/Downloads/toxic biohazard.txt
    42KB
  • $0/FLDownload.dll
    .dll 2.1MB
  • $0/Fonts/CL-Font1-Regular.ttf
    32KB
  • $0/Fonts/CL-Font2-Regular.ttf
    167KB
  • $0/Fonts/OFL.txt
    4KB
  • $0/ILDownloadManager.exe
    .exe 2.0MB
  • $0/Stub/FLDownload.dll
    .dll 420KB
  • $0/Update/Updater.exe
    .exe 700KB
  • $PLUGINSDIR/AccessControl.dll
    .dll 10KB
  • $PLUGINSDIR/ILExtra.dll
    .dll 899KB
  • $PLUGINSDIR/ILInstallUtil.dll
    .dll 343KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/ioA.ini
    206B
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    9KB
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • $TEMP/FLDownload.dll
    .dll 2.1MB
  • Downloads/Drumaxx.txt
    21KB
  • Downloads/FL Mobile Samples.txt
    338KB
  • Downloads/Harmor.txt
    13KB
  • Downloads/Legacy.txt
    305B
  • Downloads/Loops.txt
    1.7MB
  • Downloads/Synthmaker.txt
    7KB
  • Downloads/bassdrum.txt
    238B
  • Downloads/directwave.txt
    87KB
  • Downloads/fpc.txt
    7KB
  • Downloads/gms.txt
    244B
  • Downloads/morphine.txt
    11KB
  • Downloads/ogun.txt
    5KB
  • Downloads/poizone.txt
    32KB
  • Downloads/sakura.txt
    16KB
  • Downloads/sawer.txt
    24KB
  • Downloads/toxic biohazard.txt
    42KB
  • FLDownload.dll
    .dll 2.1MB
  • Fonts/CL-Font1-Regular.ttf
    32KB
  • Fonts/CL-Font2-Regular.ttf
    167KB
  • Fonts/OFL.txt
    4KB
  • ILDownloadManager.exe
    .exe 2.0MB
  • Stub/FLDownload.dll
    .dll 420KB
  • Update/Updater.exe
    .exe 700KB
  • $_3_/$_3_/Uninstall.exe.nsis
    302KB
  • $_3_/Artwork/Back.bmp
    3.0MB
  • $_3_/Artwork/Controls.bmp
    4.5MB
  • $_3_/Artwork/KNB Black.png
    .png 258KB
  • $_3_/Artwork/KNB Silver.png
    .png 335KB
  • $_3_/DirectWave VSTi.dll
    .dll 1.0MB
  • $_3_/DirectWaveCtEngine.bin
    .dll 2.0MB
  • $_3_/DirectWave_Info.rtf
    .rtf 217B
  • $_3_/Help/DirectWave.chm
    .chm 1.8MB
  • $_3_/REX Shared Library.dll
    .dll 228KB
  • Plugins/drumaxx_install.exe
    .exe 4.8MB
  • Plugins/drumsynthlive_install.exe
    .exe 15.7MB
  • Plugins/dx-10_install.exe
    .exe 6.8MB
  • Plugins/edison_install.exe
    .exe 33.8MB
  • Plugins/groovemachine_install.exe
    .exe 29.9MB
  • Plugins/grossbeat_install.exe
    .exe 17.1MB
  • Plugins/hardcore_install.exe
    .exe 2.6MB
  • Plugins/harmless_install.exe
    .exe 22.2MB
  • Plugins/harmor_install.exe
    .exe 27.0MB
  • Plugins/juicepack_install.exe
    .exe 24.0MB
  • Plugins/maximus_install.exe
    .exe 17.2MB
  • Plugins/morphine_install.exe
    .exe 53.5MB
  • Plugins/ogun_install.exe
    .exe 23.0MB
  • Plugins/poizone_install.exe
    .exe 3.4MB
  • Plugins/sakura_install.exe
    .exe 4.4MB
  • Plugins/sawer_install.exe
    .exe 4.9MB
  • Plugins/simsynth_install.exe
    .exe 6.9MB
  • Plugins/slicex_install.exe
    .exe 24.0MB
  • Plugins/sytrus_install.exe
    .exe 22.8MB
  • Plugins/toxicbiohazard_install.exe
    .exe 5.7MB
  • Plugins/vocodex_install.exe
    .exe 22.9MB
  • Reg R2R/FLRegKey.reg
    3KB
  • flstudio_11.0.4.exe
    .exe 300.2MB

FL zip.zip

  • SHA256 69fa17d4ae260bc8b06c852e4a636f68550426c5fb7768de0c5104d85c54a1fb
  • MD5 SHA1 SHA512 SSDEEP TLSH