Overview

overview

7

Static

static

3

TheChoicerVoicer.zip

windows10-2004-x64

1

TheChoicerVoicer.zip

windows11-ltsc_2024-x64

1

The Choice...er.exe

windows10-2004-x64

7

The Choice...er.exe

windows11-ltsc_2024-x64

6

sdk/audio/...zer.gd

windows10-2004-x64

3

sdk/audio/...zer.gd

windows11-ltsc_2024-x64

3

sdk/bin/na...x64.so

windows10-2004-x64

3

sdk/bin/na...x64.so

windows11-ltsc_2024-x64

3

sdk/bin/na...64.dll

windows10-2004-x64

1

sdk/bin/na...64.dll

windows11-ltsc_2024-x64

1

sdk/cache/...es.dat

windows10-2004-x64

3

sdk/cache/...es.dat

windows11-ltsc_2024-x64

3

sdk/core/sdk_core.gd

windows10-2004-x64

3

sdk/core/sdk_core.gd

windows11-ltsc_2024-x64

3

sdk/tools/...tor.gd

windows10-2004-x64

3

sdk/tools/...tor.gd

windows11-ltsc_2024-x64

3

shaders/de...shader

windows10-2004-x64

3

shaders/de...shader

windows11-ltsc_2024-x64

3

src/native...sp.cpp

windows10-2004-x64

3

src/native...sp.cpp

windows11-ltsc_2024-x64

3

src/native..._dsp.h

windows10-2004-x64

3

src/native..._dsp.h

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    TheChoicerVoicer.zip
  • Size 116.3MB
  • Sample260817-rtp9aas1dv
  • SHA256 853e1bc6b7031d7e126a2a306da998c9e3a8d30cae2f21b8a700594eb47dbe61
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecution

Malware Config

Targets

    • Target
      TheChoicerVoicer.zip
    • Size 116.3MB
    • SHA256 853e1bc6b7031d7e126a2a306da998c9e3a8d30cae2f21b8a700594eb47dbe61
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      The Choicer Voicer.exe
    • Size 93.3MB
    • SHA256 67f76b2c8e4c2e4d0e9a5efe30d3d9518412cfb5189d9414746c36b85e8f3b5f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral3behavioral4
    • Target
      sdk/audio/mic_analyzer.gd
    • Size 260B
    • SHA256 15d9a44a901f4d24cadb99343ecf9027bdc8769172fb014db31756cec950c990
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      sdk/bin/native_audio_linux64.so
    • Size 8.0MB
    • SHA256 b35aa7fe2d795f36b5bee1451d34e9010d9847008149340cb8d8f95b47cbc5ae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      sdk/bin/native_audio_win64.dll
    • Size 12.0MB
    • SHA256 027b520418a747112f54bc5438ce11d9d7d96db852fd575756fc95c9f5d19b5c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      sdk/cache/audio_profiles.dat
    • Size 3.0MB
    • SHA256 140ddcb5ebe70a0cf35014a2f70e3142e2c93ff8ff25cf967afa31e0bf7fc02a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      sdk/core/sdk_core.gd
    • Size 491B
    • SHA256 3097bf92a99210ce52315f4234eae51ec1d9420bbdfac987972b39a3dfa64743
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      sdk/tools/pack_inspector.gd
    • Size 412B
    • SHA256 56abd41b7740f5588d439746e0d67622f8bac5538c2b1da262d22732974e138b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      shaders/debug_studio.gdshader
    • Size 170B
    • SHA256 4bb18880e3e0f2fb44574837303d916509f4a8c62500b80d3c156f8ec47de3ca
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      src/native_audio_ext/audio_dsp.cpp
    • Size 611B
    • SHA256 b9e0daec2b756d5b518657bc0f6b62798e20d7442cb4f0d43b365e07fba87bc1
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral19behavioral20
    • Target
      src/native_audio_ext/audio_dsp.h
    • Size 381B
    • SHA256 ebf114bd6e13ba817992790f48cc5e2126effcee8aa50ff498d71d48ea7d77d5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral21behavioral22

MITRE ATT&CK Enterprise v16

Tasks