General
- Target Audio_Modeling_SWAM_VariFlute_1.0.1.exe
- Size 27.0MB
- Sample260821-v1c43svamd
- SHA256 9d1c5f6a43f479c0e811a51acc1995cc3854a28aa64e6c93ee4a3fdd87d23625
- MD5 a1922896aaa246d1754ac9b939b140e4
- SHA1 4746a67e321dc3f23b257de539ea58d4ec14da28
- SHA512 d150706bf9a01366c75a2c0dd5f8631110bde35f179bfc782beef22a8ad9eef8f8e734fe33517899093ae804475565721f49cd5de1bcdf525f8647374dc76823
- SSDEEP 393216:aDjNU/WK4tk96LmVYHPFnih2QDk/li7ZnjF7XXmwAwP5FcCEphbrNabeRKfZ3Zx5:OO/WK4tk966YBiJwtiNZLd0/pZEhady
- TLSH T1C5573323B24E273FE079963549379A04453FAF20551F8CB38AE44E4CEE695A41E6FE43
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Audio_Modeling_SWAM_VariFlute_1.0.1.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Audio_Modeling_SWAM_VariFlute_1.0.1.exe
- Size 27.0MB
- SHA256 9d1c5f6a43f479c0e811a51acc1995cc3854a28aa64e6c93ee4a3fdd87d23625
- MD5 a1922896aaa246d1754ac9b939b140e4
- SHA1 4746a67e321dc3f23b257de539ea58d4ec14da28
- SHA512 d150706bf9a01366c75a2c0dd5f8631110bde35f179bfc782beef22a8ad9eef8f8e734fe33517899093ae804475565721f49cd5de1bcdf525f8647374dc76823
- SSDEEP 393216:aDjNU/WK4tk96LmVYHPFnih2QDk/li7ZnjF7XXmwAwP5FcCEphbrNabeRKfZ3Zx5:OO/WK4tk966YBiJwtiNZLd0/pZEhady
- TLSH T1C5573323B24E273FE079963549379A04453FAF20551F8CB38AE44E4CEE695A41E6FE43
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.