cfce4dc2345f33fb7681d557cd9f4b1538b922a7c4c8b9e48ae8585aa667d1b5

Resubmissions

16/08/2026, 21:02

260816-zvg83axvbw3

16/08/2026, 19:59

260816-yqfzrswwat6

Sharing

Copy URL Twitter E-mail

General

Target
serum.tar.gz
Size 563.3MB
Sample260816-zvg83axvbw
SHA256 cfce4dc2345f33fb7681d557cd9f4b1538b922a7c4c8b9e48ae8585aa667d1b5
MD5 7360be308561b64e73a49a22cffa52e0
SHA1 2086cd4cfd9f115dc407ee2fd076797529d36ce0
SHA512 67bb65bdb47cd0b148f07a2071594abf0b6b7ef1dd9be8d7ec14d25f27fed2c837f46a6c2501322a9c496cec662fd8970650ca3c57113dc067477570060d235a
SSDEEP 12582912:at7JFOOUyeM6o/mRyulm1pvCpKRonRjKr4G3UhROG1pKGne:a5bMo/PyCkKoxkNG1pRe
TLSH
T1CE593382A1D2BC1D93AD42B7E6180D1EA2C7197CD9F13E5A0E9E09B47F25634FC4162F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  serum/$COMMONFILES64/Avid/Audio/Plug-Ins/Serum2.aaxplugin/Contents/x64/Serum2.aaxplugin
- Size 1.2MB
- SHA256 afe4de46d949d0e5b4c6112d91ac30272fe39aa39e3e611d0cf0d6b415cea30c
- MD5 bfb3f1d5a8990906d6bad2c3cc0397c0
- SHA1 316162169c84c868a194bed9abd290503f04bf47
- SHA512 1913346e1299fc9495b1f431b0eec967f4675e1bbaed1df91db412e1a40dae368c93929f12503e994a3850581205e1658f89801bb7cfecf7b3912c3c11a34309
- SSDEEP 12288:bCXHQRaDhYtil9/QXBHvVxFUgncF+FcTvRBaXQ6sxYYrgkjulfAs7To+026OT/VG:+3Q+Y69wncFXTVxLrxulfAuoqp4nn
- TLSH
  T17C559E1A767801A4D066D138CA6B994AD7B278450325DBDF63E04B6E1F27BF05EBF320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  serum/$COMMONFILES64/VST3/Serum2.vst3/Contents/x86_64-win/Serum2.vst3
- Size 12.0MB
- SHA256 59b0c987cde9bf39708d5365eda76a82bc1c5e1a8473e056de65972e2cdaf8ef
- MD5 6dc64ecba28e659f47849dbc3f55a4ef
- SHA1 b2b3e782e4cce75da06baccf7d72c6853eedc8a3
- SHA512 1b738dd94b27422684895c2b0055e8fea6ba75ac8607bb0ead14e6c1cea0f7ad580f1fc5b0d19f9a186a7430dda0d2e8b9996b1914735ad5b2b6268a9dd33196
- SSDEEP 98304:ih+psVQHlv3mSlzbsL/uLDLbB0CuB47RUqSCB5BxG4GMsOuPwC0na1RqtNOqrVP/:2+psVQR2obnBJTB5BxGR35oSEtJmJw
- TLSH
  T129C64907B65664BDD59AC0B4938BA8365E2434CF17346CFF0784C6352F9ABF02B3AA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  serum/$PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  serum/$PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  serum/Multisamples/Factory/Plucked/Gtr Ac 12 String Samples/XFEG 12STRV 02 E1.flac
- Size 166KB
- SHA256 3f475b2f119ab0935862b2b2fba9d129758d6afa8c24e56f7472884e6b01b58a
- MD5 70f88d1db4ee1262c2dc2a94c3d3cccd
- SHA1 8d8453d1a140aedca9695ad0f7e9cf614c1fe990
- SHA512 ce3d3eed4eda20028422627268e21523119178ed82672c48cc491304eaa27610d0d9173fc6cd738d46665cddbb352e73829e608caaaaa8a929a8941dc618c41a
- SSDEEP 3072:EBQi9eR/1lt3T3d+Tp1Dx30InrAV7OI6qbzsJFjcok3csM2jSbkhmAYnZ2thlt:Ti9o1D3d+/CKjIFzsPjcok3cs+bKmby5
- TLSH
  T1EDF312B2E2C36BC6FB1D043F7A97A791656A4BE397C3C8730B0DD0524B176AD412EA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  serum/Multisamples/Factory/Strings/Double Bass Samples/XFDbleBassLong 01 C1.flac
- Size 120KB
- SHA256 c5ffd29d38b14791a087ba2570557260a5d50609f34162a89fe633cb0dcad3a1
- MD5 d042354e2b2bd9e23f05b2e81d555783
- SHA1 6ad4a2773d304439697f2ec5972b7cb1f71e2994
- SHA512 a9d5faa7f1244264bd154122dcdce11f516534f0a95c6233686793b495f96a700697c27a79514ab7e125943f5771343b56f7d846222156efb154f077c98aa19c
- SSDEEP 3072:O2NKsneghAS6+MHa1bpMBz/AA2mMGuKupbJzaQ2J5Rvs:OCNeg6S6eMB0A2ouKAJ+3U
- TLSH
  T1DAC312D9823878B7D50F29BE1E11BBAEC591FC13E022C4E4269744B66A1E1A6CF5CC17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  serum/Multisamples/Factory/Synth/Alpha2Chrs Samples/Chrs JNO E4.flac
- Size 202KB
- SHA256 e422119307158158a97aaad0ca271f0ea97f103de65b9899927d3eca1be9f8e8
- MD5 f9f9bb544f54fb2cc77ffbf431a36972
- SHA1 917cdb8d235086031ee380057d5acccd98af6862
- SHA512 8eae676a8e8627fe736c8bc0bc1d4d47fa6cd3cbcc15306a511b849470e59580eb97d309a2befa588beb1a17418f9f97bd3713f3dc23d82d0618e488b210ac18
- SSDEEP 6144:+dvTo1Hc3gDoaWwkeheLiM2ucKGvRq6FxaEN8W:QLo18wcjjeZuGvRqObh
- TLSH
  T13514230B83D352ABDC4D547DE0305A4A472E2AF5397EF897CC37992EE418C6E4B1E092
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  serum/Samples/Factory Non-Tonal/Noises/Analog/SH1 Noise.wav
- Size 173KB
- SHA256 885e5fef9d416c91d48f75fadd24dbd19691f9bbaa94b5715b32357303a8dfe6
- MD5 01a37b794c736e890ad36ed5b05fb6f3
- SHA1 081adcee86070d921d228b44ef4818dff579c0d6
- SHA512 c4973c333d193e498061ea979b99583ad085b612e9b393a5ae4325582012cd8d9011a10f003dbad22d877080dbae12aaf009745aa9280ea4ba65260a6e7a6494
- SSDEEP 3072:S/mWOgcQBhHM5RBpCOzUl9ynZWu/Nj4HqMXB74076UCXicsGKHcEhr:S/mHgThHMbCOwfYZWENEKMXB007+ts5V
- TLSH
  T1A8041311D2BE0E38DA5E46794A7B6F0147E669522040D845B41C614BCF3EE9B0FAFDB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  serum/Skins/Default/1x/panel_mixer.png
- Size 67KB
- SHA256 8effc6add7972781958acd10135a3cfe63a5c679e238bb18e91b6ea4983f6ecf
- MD5 1e2c20a2c44a98094206dade72bb78fc
- SHA1 67f2312ca228d896e86e95fc61e7132c38d0c948
- SHA512 ac9190e84ab7bbee5133aacdb68f5d9184561cf572ea321bde34aa6e0638e6d96240faf1d4ca5f38b8f9bff293f0cd2dc53ec68ef9aced6878392518d9696f5e
- SSDEEP 1536:eqYxVCQiWuJyTp9YKVefQiScuHexZ3qW1jfgcYEVw:ZQt9YOefQ/A5qW1DYEm
- TLSH
  T14F630146AD6C3838ACBFDFB72D64C74DBB5B792A6C558A0E0943E66F67810C590F100B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  serum/Skins/Default/2x/control_osc_warp_secondary.png
- Size 34KB
- SHA256 6c1b82da58d9c170da809a4b713bd4b398a00e1bd188e252a203d262c1bfd353
- MD5 44fc2ef364e843884694553e6d3492ff
- SHA1 a124012d15b6ef7d060aa3a29daab3a74718b58d
- SHA512 ed0a62ea6a59b67cf53706fe6520976e29e71a669975ebac7ee1caaffa72c72d2614cb07e21867233274576962b1eb0273bc30fc31a7a8c69b12f8f63f8ae4e9
- SSDEEP 768:ZVaWiAnIVdkfLUnJOpT3qg9Enu/tLqttbGCEU5Dsbdo5:MmO28OpjEnuAtbGCHDsI
- TLSH
  T189F202446B96DC64ED8529284F46708B8A0734615F74B504BB9E77818C4FF3B8E613F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  serum/Skins/Default/2x/overlay_filter_disabled.png
- Size 53KB
- SHA256 fbaacdd00172095f7196f79cd904ef498afb5bab58fd39244aea6cf46414798f
- MD5 743e2738e3be2f47625fcaab8819a6cb
- SHA1 c461d5c1508a83bea00ea3fd101e609493d2987d
- SHA512 092597d571cf2f6f1b38d0b1d054c870cd30f89b8ca0faf7ff1685c6b2f1c72d7886fffbad049b068b87758ad3f3b16ed170203c2bc443bc9d83bea8e84b3ac7
- SSDEEP 1536:bG2HPTl5mcCFCiPaXw1B3TYULsfFSHjXBtf5:a2vHm/UiyXwnLwFsjXx
- TLSH
  T1A433F1C808539CBDBD4B72968F0AF4D1C585B4A162681AA47BE7CB9E54394EC147B32C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  serum/Skins/Default/2x/overlay_mixer_filter_disabled.png
- Size 46KB
- SHA256 8ccf37b1999cdd2ef8b51942586de10fcbdd2c7552d7e161db38a927a2124741
- MD5 b390fdcdc36f2140dc87a96acea16783
- SHA1 d9d5392e921e6748385ba40232e0009aef8bdc17
- SHA512 5e983c59cdf629413efa3105c95e6c3f02373e4ec0062e578c999f593d216cce512828d9f73fb44bbe0e8ac9b4ac3d9a74bea9b628e122aef66832cb33093ccf
- SSDEEP 768:LyYpXXYDWBayBT7QpQlUPyO1wrigpyoHK9Wico0AWMDMgrYzXJXzBYgUiz/WLB/v:LyAX6WkDMtnI0wD6ZjKio3WK5WXQ
- TLSH
  T14823F16AD4C5164F77EA4CFB8E8AFAC28CF01FC69F1C32BE18A1466125C50912141BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  serum/Skins/Default/2x/overlay_mixer_osc_disabled.png
- Size 47KB
- SHA256 235ce5ef73942d2af09f19dc46b9b09b9548c2ba91bf9a14615430215951a0dd
- MD5 5082cc23d41b9e8cbe6786f3112379da
- SHA1 ddae6ddd2a576849e127cbde00b13536903790c6
- SHA512 2903407f99f65b8177187442cf52cb2654996365272b30bf1a3a848629e27713c7eeadf46eaf56f10fe9f4951e6b92cef5acc99956e9f1d72597bec4f3cf2612
- SSDEEP 768:9ELRZylUnTYLMUTBTj7+6gJp5DXzDT2/h8a/VZVD2WeZ8ltoVqTkCx3RWTXrjCme:2LRZylUnTYAUNn7+6glXzG37VD2WeKtJ
- TLSH
  T1992302F8E44A59FD730A72B7DE643C858B2E872642BC43283125CF52B4C62D8E6477C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  serum/Skins/Default/2x/overlay_osc_multisample_env_disabled.png
- Size 47KB
- SHA256 848debd7e9e276f7de79187e22118f53af78ba5de536e7665d16d0e1f297e263
- MD5 3c450fad823950fc865274ab17f88ff7
- SHA1 c6598298c87e43ddf103135eee8fd53cc5224327
- SHA512 7fb1c55bcb36ffbb50030555161a2ddfe02509f58c5eeb38e944d6f98017f42f3b705040ee5f79f496d6a93319d69a22202cc26ea988c002203d48f50433fc16
- SSDEEP 768:/Ly41yxuXX6B0RRnGG9AuocgoMN7EzYxeJNyOlUlMv9cU7PG33vOb7BNAQeoO:F1yxuXRRXp0oMmYJXyz7+33vOZiQDO
- TLSH
  T18E23F1131D651C3C288F8CA64EB774102F5679E77A18353C333AAA78394E5B33362B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  serum/Skins/Default/2x/panel_mini_header.png
- Size 39KB
- SHA256 d47a1b68c3064dd3c9d31f07974d610d5097e577979e39b4c3dd3346e4145e1e
- MD5 18c3b03a76da9065993fbbae92402272
- SHA1 f46f35f1dc98db1315ab2554c70af3d2bf43144c
- SHA512 37562b9196799256a89a66053203c3abe39bdcede89fc5b1efb0e0e32790e995d2584bee24f94c766cfe8b09c08eb2c96934f906458b9b7987b2de735dce101c
- SSDEEP 768:34e3DkKq+TCglJoidJdTwfHvjHeMJJ2tCm8WfUu37Qei/ZBTZhOO7GOw/C:3FDthGgHouJiHj+M6tCmPbcei/ZfhOwf
- TLSH
  T1DD03F178ED22C82658DC0D966F047E04ABE9BDFB909EC98744D528D8F60B75D984B384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30