91cefe9a1c30c0dbb6f7177747e7a17b4129e77a8f1aa20ff4ac7bd877e01dc5

Sharing

Copy URL Twitter E-mail

General

Target
EqualizerAPO-x64-1.4.2-with-VST3-support-V2.0.4.exe
Size 205.3MB
Sample260821-xxdbsabl3v
SHA256 91cefe9a1c30c0dbb6f7177747e7a17b4129e77a8f1aa20ff4ac7bd877e01dc5
MD5 f381acae46756a399d8229857d2215b3
SHA1 5210e8191a6ec062c4883e044ef1a3912d0998db
SHA512 c15ae915499191a304083e8abb1ee955f42a0001ff01117aef1df692bcde3ec8ae98951768204cd7a6aff812e0dcc31d84b6107e335eeadfb27c402a662848c3
SSDEEP 6291456:723luaeheqF8NVBqNIEUomzVFkZhmVvMu:CcRrF8NPboKR
TLSH
T123A833697F13C00EE5549E752BA6DF1AC99CE48AFE02C94D520F112E8D1EB386136FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  EqualizerAPO-x64-1.4.2-with-VST3-support-V2.0.4.exe
- Size 205.3MB
- SHA256 91cefe9a1c30c0dbb6f7177747e7a17b4129e77a8f1aa20ff4ac7bd877e01dc5
- MD5 f381acae46756a399d8229857d2215b3
- SHA1 5210e8191a6ec062c4883e044ef1a3912d0998db
- SHA512 c15ae915499191a304083e8abb1ee955f42a0001ff01117aef1df692bcde3ec8ae98951768204cd7a6aff812e0dcc31d84b6107e335eeadfb27c402a662848c3
- SSDEEP 6291456:723luaeheqF8NVBqNIEUomzVFkZhmVvMu:CcRrF8NPboKR
- TLSH
  T123A833697F13C00EE5549E752BA6DF1AC99CE48AFE02C94D520F112E8D1EB386136FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence privilege_escalation ransomware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  Qt6Svg.dll
- Size 613KB
- SHA256 b472d01159a858c5b9dfe8032b9994201ecc9ab967b4173379f0b05554766196
- MD5 44dc68157513bc1024fbe64c9b734f5d
- SHA1 828c2cf7e888ba12a2eecdbe91810f39d761d275
- SHA512 c87e1990b04e7ac4a5767b7fbff4f94a1d15d30ba8257d759270776cc22adab859656a51ace6cc73110a35bba435e6b315d39aff83df5aac4f2bf91eab83c4dd
- SSDEEP 6144:HThcgEouE5YUKhjEIevKtOdIroDZABL5SRkBCAQS6ToBcTFh2BKmeXMx4Yj7nBLE:zuHouEWUtvGQD2L8QC6/cTMKTgmRsSp
- TLSH
  T16CD45B67B3A60785D86AD13CCB5B8422EB73304413A2D7DF41B58A552F63BE12B7D3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 6c139cf501fd4a4cf2b690520df79dd02687df061d51eb6b3c91757d503ef909
- MD5 f8fe94ce6e3b33f68a02b2168f0d329f
- SHA1 1fce468419f3b83b5640f492d3593023979b618d
- SHA512 730fe9e801f3d9705cb9f7285ad7fa379b9475b85220498a7ada7d7d6caa1c056a3d943923f5dae60c0bf6e6cab0d39513c0fbc62307cf15bba746f6ef2eb2dc
- SSDEEP 98304:s5XLmsLgex105PXU0fr/NDTdxu1hnHTKiRk:s5XLmsLgeD05PXU0fr/NDTdxuLnzVRk
- TLSH
  T1F4667B57A3EA0185C5AFD13DCB1B8A17EAB2700443229BCB0169CE552F737E16E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  UpdateChecker.exe
- Size 430KB
- SHA256 58ef268632433ec79f4bb37da6f896f79ccd474783f6fee36bc026e35f73b3b9
- MD5 bd427596e1c1a9f2e2a5e25246f4dacf
- SHA1 28d023de3206846cfa7c312c68dd8ba05d08e236
- SHA512 7d6d186679b6d432411f8f584e0368e0cc57faf3f2db499e56fb75e0ef67344ad65f64383ed8331364efcd26fb2f47e6b5a17a4a6ccc0f987085f7fdb34b6332
- SSDEEP 6144:vf1LvHgSeOkHWf0Gdj+iRvOpc8NgY1DNartNueAODyQT5Rg89aB5BRFXAmbHQbDp:l7gSeOkHWf0GURuNY1D4t9n3rVn
- TLSH
  T19C94BF9AEEB92096F161D13D83378201DB7278EC67328A4BC75DBD341C6148A6E3F785
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8
- Target
  VoicemeeterClient.exe
- Size 731KB
- SHA256 0770044fcb09fc85e63627c9ff01388cdff615be7bd08f9a452cdaebe7881e21
- MD5 a951ca11670a01cad04a9698a976fa55
- SHA1 01cf7452853074c619a657039640cc1e39fbc408
- SHA512 a4e2790f801693c18d0c742f526411cbf696eeec54f1e9b1f0a2c471992b557bea71c3a850f3c86b80a2d41efc13f947d856fe83aa65d32a888da89de60051e1
- SSDEEP 12288:KHhjLI9tjwHcP3cwicWYKPDRjiiWwsa0x:KBY9tic5icePJZWda0x
- TLSH
  T129F43997A7E802ECE0B7D27D865A8912F37778064B719BCF139042761F63AC58D3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  d3dcompiler_47.dll
- Size 4.5MB
- SHA256 a6f1a6d37c541b3ce3126523f7a3542b64831209c30b04a5081783dd6595587e
- MD5 adc5993bfae8cd09ca15c6c2c0f98892
- SHA1 c193ce1db5265a37b8c3cb949d9615dbadf6ffd6
- SHA512 9a6e20bb03a9c65818da5ab8b72770e094429a625c7179ccd3a99f76c4472db321d2d63b59265c6d808023a23630a9e913d6c7799e3c7c2db20066d52f2cc283
- SSDEEP 49152:6kg+zv1sxmRplfsA12SrFk6ekTOZOxyJ0poe6AyitHU5AjgHCbq+GjVJEMG59:6jCs8fl1fpOEQJ0me6KUcr
- TLSH
  T101267C5767E840E9C57BD238C6878717EBB1B80403349BDF4150866A9F73BE16A3E728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  fftw3.dll
- Size 1.8MB
- SHA256 7dbc8fb938bfa1c01b19750599b778665dcb4f9370d241aeea136bdb54695bd0
- MD5 09134a589f78e423e68a218be42dccb8
- SHA1 1d9317057819750eb7afd10cdc4156644cfe2268
- SHA512 8e0a081d1bc32ff42940c0cad92e2cec00de2d6ffeeedca10ee5da9a856dd80eaf6c9d70a1f15b0ae7a6ec1a11b2a236879d309392afcb75597d153946d4727a
- SSDEEP 24576:b9PhUDnKwSLOt8oOJ6AnJ7xq8oHhGy9et4HoTXZVx3cRk5dN:BPheKwSL27OJdx1r53cRk
- TLSH
  T155952962F9D00B9CC091357452FEB652F2653848A72D12FB17A34EC96F29F816DFB206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  icuuc.dll
- Size 36KB
- SHA256 9e132fc1cae204b3be8d5bc56fa1049d6eb2ae5a9701b84bb2ccd4af812e28b5
- MD5 f3c8d64720dad0bac78a94ebf465efb3
- SHA1 c25e90b5719f31af0b47415f3007197dbe59cf8c
- SHA512 2866783751cf5a3e6bdefa34cdfaae6f1940ab2ab2212bb6b6552acce80c8cc79c8a761eac131bad090c1bac8cc98ca233e4da6a63def26f2066932c3b0e8040
- SSDEEP 768:YCFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mu:J/prGPh7tm8T90
- TLSH
  T1DBF2D74DC8044F62D3A7EB3F697C392F1922099ABF69FBB8EEB4C99441D520D10B5742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  libfftw3.dll
- Size 1.8MB
- SHA256 7dbc8fb938bfa1c01b19750599b778665dcb4f9370d241aeea136bdb54695bd0
- MD5 09134a589f78e423e68a218be42dccb8
- SHA1 1d9317057819750eb7afd10cdc4156644cfe2268
- SHA512 8e0a081d1bc32ff42940c0cad92e2cec00de2d6ffeeedca10ee5da9a856dd80eaf6c9d70a1f15b0ae7a6ec1a11b2a236879d309392afcb75597d153946d4727a
- SSDEEP 24576:b9PhUDnKwSLOt8oOJ6AnJ7xq8oHhGy9et4HoTXZVx3cRk5dN:BPheKwSL27OJdx1r53cRk
- TLSH
  T155952962F9D00B9CC091357452FEB652F2653848A72D12FB17A34EC96F29F816DFB206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  libmp3lame.dll
- Size 363KB
- SHA256 6d3350557f26b24e8721da7cd482c1fbcec006242835774b1fe94e03b71fabf2
- MD5 a271f79b5a2c736bf818cbd5a5c05655
- SHA1 1c4622337a10317be9771f9af50f24ef1f669c4c
- SHA512 fb27b6bac39f1440a541fed9db6ad2402f1378973fe6615759ab9ac68eb264872ca9064c87be2b0b72bb3ebf20fb7e337e50aeb5e9e57e77c2244978fae8623a
- SSDEEP 6144:hgKEyrs8uF6dmaJPOTCzcqP5yl9qEh+uQpBXfq80xNdUVmq4aF+r:F6rqP89lUuQnOdqmkFW
- TLSH
  T123848D42B29189F9C157903981A6BA0FE37139410741EBDB6BD0572D7EB37D09ABB323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  mpg123.dll
- Size 303KB
- SHA256 474dd1100df16aeec5cb6136faf73cbba82dd7021afd0009f6d74200ef0ac714
- MD5 1d1c81b9ad16d600dbb151716dd15e47
- SHA1 83d2573cbf91cab538cd7d042fa16ee462c59a22
- SHA512 ca3731ae1433bd104ff029bac111ed89b980efe26cae3fa5cfa96887a66a43f24d6d97dffff414db17b7d487762a0937e8977ad3e8f3e205dcb16cea43510cc0
- SSDEEP 6144:DvxFXcO2mWO83RFGhhlPmErwwKqzHTOsGpIf55eF3x:DvrXcOJPuGhhFy4YA5c
- TLSH
  T17F647B46B2B79572F57B903D5216EA2FF6393C440B204BDB03A41474ABB32D21EBA357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  msvcp140.dll
- Size 562KB
- SHA256 9057d39b36b6c7d054865ee2bf9cde7a490fe3b01ec4e82514687e24f576269f
- MD5 cfdf6eaf5328fecbdec268b7f9e21f3a
- SHA1 100c8a08de6544b8554a542ad55af831f86565e7
- SHA512 a81feb56ae3e4939abb21597f4f60429b704e04e6c20fac402a0518fe7b29606bf8824347a7570d98f3c44684c15bf6b520e350321bfc2a42ec5597989215782
- SSDEEP 12288:N9W8APqgSqvJP85TAv/kLRNKjxDJN7e12QEKZm+jWodEEVx7/:NPW9ILRwjxD62QEKZm+jWodEEb7/
- TLSH
  T1ABC40823B74D05E0E195E3B8A1878306D7F1BC4A8312A3C792EAD69D2F577D1673B290
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  msvcp140_1.dll
- Size 35KB
- SHA256 a65249861238e1c18b84ae5d112617c438d83a76b67eddc170ad82dbc2338665
- MD5 6dd04c14a17caae50d068fc89d7d01f0
- SHA1 4d2d12d7a0139c8248f9f9266982562ed402b8da
- SHA512 9c04f015728d0f57e7b91e888505a0a288064529bf72dfb1f2c5fc571db40c2cc118782b8544bebc4e26b8bd189667fe65d13289a4f347b2805ff5ec5b9646ae
- SSDEEP 384:Hjh/2cARGLSxXvQ5m9/U09dSzWc15gWWjg1gSt+e3RxB+R9zPmDnzHRN7LSpR9zF:HlWRGF5mZU0PSVkg1HNRxw9z+3eD9zF
- TLSH
  T198F26C86A6288483ECA65D70C599EE833C3D73C25B5196DB5391F95C0DE33C2FA3462D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  ogg.dll
- Size 30KB
- SHA256 c3add8e644e2a04fbb22c73d5c0321845ca78682105e009f81f454588e57b33a
- MD5 04b3e8488458416ebd18fa908759f099
- SHA1 b8d666d85e47ea2863c474d0a981e8b77f9e124f
- SHA512 d488db9b752a0a2deb13a0a2a5065be16c8e95ac05eb636894b3f301c233df88f089a09076151a926ed650e2ae3be2bfe26d80d5ed0a46fadc5e21c9ba337253
- SSDEEP 384:bnro5MCL+jLjv9yiRWqkdhvzpSujFsefoR0LRRCppImMAYnQ+vp90fNHq:7kVCjVkd6ujfoGtUplYJvp90VK
- TLSH
  T1DAE28D0EAB5685EDEC34407B489FEB98B5BE784AD71363EF039083450B27BC86976314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  opus.dll
- Size 432KB
- SHA256 15f93e37ce13ce079c2ee9d2a91125ea4d89436be3c194614f30eb5476c5d953
- MD5 58df45189471faa7acb7290c278d171f
- SHA1 c2edfba1fb3e8ac88edaafd27c94a31df98a3bce
- SHA512 75345f7e0f22e2eac975529fe9a3072f7361ef00cedb9bd63ecd1abbcd379a455f5e01a8a7770f60ccce2bc9551666b0ce8f8095cc65e0f7e351fd9f4de9c208
- SSDEEP 6144:7qcoE9WxYZS746srPWKGG6Hhi1RLjNuRd80Ep5QWeeXTvYSLv0p5/I79QzzHwZyl:nlwsKHidNuRW/jx8p5LzzHwI2EvF
- TLSH
  T141948E01B1F699E8E0379038919ABA1BF9313459031056F357E0CA74AFB6BD05FBB366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  qt/generic/qtuiotouchplugin.dll
- Size 101KB
- SHA256 c06dccfd97576b6255b56df43b03b1eabee8c01f75b6bf6ad550057771ab7cf2
- MD5 b36a85ec0eb58a861e8dc01a59f55fdd
- SHA1 be23547dee8252f40a5778ffd7ac8e7483706efd
- SHA512 2e24e846faa4703cbd8a3fc092e42654b3b00017879cff72cafd7cbf1dd86fcaf058011e80d299dc9e588c61d2c92c25c452df506e579e0351d17f87820a488f
- SSDEEP 3072:EQE90V6rxM8EX8F84Df5qdd9ilQ1bgoB1KF:EnmyM8dYbgoqF
- TLSH
  T128A37D7B52A042D5D87AC279C79E8607E372B05567329FDF02A496590F33BE22E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  qt/iconengines/qsvgicon.dll
- Size 70KB
- SHA256 84f7391fb8cd5a9228d3d38ebcbf957e6c7cdc789981e7a4e6f671f6ace529ca
- MD5 ba5596b9a7deb4591082f01ba7ba55e3
- SHA1 7b56cfb9cd70f5ce592631fc8e9a17ffa097d065
- SHA512 0fed4dc8cab0c6850023711758df71f79674585f5ac276c7a4419895861181b94700c36be135d4b79c38e8d41604b4355406d0575fb31a160d8c45d346cfc1bb
- SSDEEP 1536:LAaLoiOBXBqhM+buOxhBBZg1g9hZ/4J5Iu2oKbs+T5feJgKxngy+:Ma6jmZa+hZ/44u2oKbs+T5feWKO
- TLSH
  T134637C4727A81545E86BC23DC357871BEEB2B4147752EBDF136188362F63BC12AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Loads dropped DLL

Modifies file permissions

Checks installed software on the system

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32