c09aaeeae94ab385395d4d26daab74758167b931d6ed279c4ae183a047dd1ad9

Sharing

Copy URL Twitter E-mail

General

Target
LiveCoachAI-Cloud-Lite-20260822-r3.zip
Size 10.3MB
Sample260822-k53v7axtbz
SHA256 c09aaeeae94ab385395d4d26daab74758167b931d6ed279c4ae183a047dd1ad9
MD5 c0c97cdca7c532c70fe6ac400a0123c7
SHA1 0045908033b18a2b9ad89e2872d2ad4e879e3b4b
SHA512 93c232515b4df6e403bd096415493293328255943e471f8751a22b32f3b4d6c4584f13b981460ffff8c070e55f7423b64eeab1ae91edecb67d0241f58dcc3b49
SSDEEP 196608:MT4RUfK/RCUFbjXV3wTTrqH8Y61EEIm5hByqyIAnxnBd:Q4mfgCUjwucV120L7onn
TLSH
T1FBB633EAF0A1CFF4CD0A09BB33871255936A21C9CD5A15B87B79F9E3E12A75C0D0512B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  AiVirtualMixer.Core.dll
- Size 51KB
- SHA256 7fa62b4c2419673d8be7936e3c8c94ea6c8ba854868ee3df4f9098d011d54e27
- MD5 24231df28fca70894a90608e9a5ed838
- SHA1 9c2ed01a3c372eae3debae333d1690daef406076
- SHA512 71ba23e761f504e0112ea23ecd61c56cfab45426cb5317dbf8a7fee876891be2834c3d81eb8680b22792c403aef091675d26b4387f8f7942e508830d2016d589
- SSDEEP 768:GbN1s0iOBu2UO7mCfJ6auKH/kNIdoJkldLOuGKHLA6E1rIZkDhv+R7jd:+1wZoRLuKHCWl2wZkDhvIjd
- TLSH
  T1563309203F7C8727D7BD0ABDA071058442B9A22AB242E3FE8D44B5E72A1774654D1BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  LiveCoachAnchorClient.Wpf.dll
- Size 989KB
- SHA256 0d0c9631685319585ae6fcdf0c7ea3a407ce87ccb324f32ec60305509cc8fc44
- MD5 a3de0c056bc003655630447f03576758
- SHA1 1ae64e69fced6558bd4d56cab44e602382a928a5
- SHA512 c01cd1a8a5b8bc2e3de916ded91d94626d8c4e5ee851dddb02b3ebe9cbba56d8d6976e07694e7280c3ede60b5dcfd353b881c01987372ba18b07058b18739f86
- SSDEEP 12288:0fUxphV9OqQeKGcJaMiPAarzpjeOslO1Qo3i7rcg0Xi5eit7WpYWVmdCpJ:zkNFarcDYxlp
- TLSH
  T15925294137F80928E1BFD731A43A095B87B6F543F6B4D79E89E8949E1DE2B01D844B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Microsoft.Web.WebView2.Core.dll
- Size 681KB
- SHA256 3c6831b6178b299d951017c3d7bf323b57cab1b7039af277526b88e3116259b2
- MD5 e716aaf11102568bb78c8dd61e4c8926
- SHA1 24cd53f5fb474fe2e6bdaced8c2feab113e64082
- SHA512 52b433579c4d0bdc9d3e2a916857c8b0c066caa36ecedea59151302230d9bb65b601b736ad657e628613594a35e9054f6d72e113ad39c74200d55f153d50813c
- SSDEEP 12288:pJ4dCXzRKX4EcJupbSRi461R1VarP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNI+:pJ4dCXzRKX4EcJAD1RbQg
- TLSH
  T1EDE4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Microsoft.Web.WebView2.WinForms.dll
- Size 38KB
- SHA256 4626015b119eb769a566996d40d079058a28f0dc2738ab221efb200ee7300957
- MD5 a0032e365c0491501c8d258f2393f7f6
- SHA1 c16b7482a920ec445465fe722d75cb2383eabe5f
- SHA512 fad27c0b26202ae69ad53ea4bdf9432611c1b217b8d9ae59ec46c827333efb32024ece5859acd244acbb8f6c01411a34aad4449d26a4a54d1a32a89ca24c8e96
- SSDEEP 768:2caNb2/itGt3JrbYbSQzZDgcEST3p4Jjrjh2je+SG2au8vxJKia5/Zi/wGQSxKFy:Eb2/D8GQzZDgcEST3p4Jjrjae+SG2auO
- TLSH
  T1D7034C4083ECC527E6EB6E78A974866107BABEC33D61DB9D0DC5F0990C737D056113AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Microsoft.Web.WebView2.Wpf.dll
- Size 82KB
- SHA256 b2346b39331a95a645b868c64f8d978fcf23779c661da01e0088e8be576196ab
- MD5 cd96d35717835fc2b0595ce2a9249518
- SHA1 a0d56b7c542117e794e85b6af4ffd28b2c5fe0f9
- SHA512 b2bef2cf2285eb9a2f6bb478296b564faa927ad75d2447c321bb4d673f32ddb3969db4e1aa3534bb9edfdce154abd92311359e63c64e6322b113792612686bce
- SSDEEP 1536:Rh6tArbn5ZTtWQZZHIPL2/GCLhJ8KYYUDHfy7yEW30bfc4JAyr4YeUqTHhvU0sdN:Rh6irbnxWwZqj2J8aUDHfyy30bfc4JAe
- TLSH
  T163836CB457FC8C23CAFE4ABC697041940FBDEBC36A52D78F2189B5D9189338125523A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  WebView2Loader.dll
- Size 159KB
- SHA256 12f7708910e1aac5cc9ac43603d122f1d2e770ae2651830a07ef8b3117f28c55
- MD5 e08c7255be2fe5b2c0991b3161589181
- SHA1 6bbfea42b7fbe29fbd830f09e754f027f69f2a50
- SHA512 65b620065c0fcd6ed51066d18b40129b26c90d7908ffc6d579ae72204573ca49ca39ab0cf4d1205e85de35988f055cd4be3c9270159b8dc4907be366df49bf7d
- SSDEEP 3072:VT3DhbXErY+deJmnFA5fYFvfBBY11U9yTT3nkFEtJYDUWycML:jUrNOWFCYFvfBuFncEtJNWM
- TLSH
  T15EF34B4773E500BBE177C27889674A46E776B8111B60AAEF03A443791F23BD0AE3D761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  analysis\LiveCoachAI.dll
- Size 2.7MB
- SHA256 b3500118d2f42d30db6646a19fea1e4ba4c666e9f68133a1e82a7d0c4b56b673
- MD5 ea847245ed020bf3823cd583a90eb039
- SHA1 84492c0f7d5de5723a012d1cc032330f0587369d
- SHA512 6899728ce3a02edffc15d9ff5ca3b6ea6038976ef69ee8c307753a1eaa5458d2328c57f5219dc9b4e5e517d554c63848eec475d278abd2f34bc483c45e9e4a0d
- SSDEEP 49152:IWj6ICLIsNoIMR7J/gx82Ct9c+/LgwdDqD2hxfDF:I21CLIbIMR7J//2Ct++Rq
- TLSH
  T15FD528A1E3E44E5DE2FF4A35B036901893BAF8653E2CEB5F4205696A1DEB7004E04777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  analysis\LiveCoachAI.exe
- Size 148KB
- SHA256 e2a4bcd5e42989ca028c3f5fdee20a24de4687da6cf1242d8bf7a31e0ef53c9e
- MD5 56f0879bf83a4104ffc71ced2901fe16
- SHA1 a8db99a24d4de94a3323f8865320c16799f43d34
- SHA512 823030b1f4950b63b0295297bcebaedeee3b78550bff2dc8ff720395d827b68d23221282bff8931ee50025a027fd476a8be80f8f099128279bc69a8c9116da53
- SSDEEP 3072:cqeXA/4yIg9vkNPNu6H6xCYOiVUE265sJr:cvgvkNFNaxmNEMJ
- TLSH
  T1FFE33B07A2A851BDE1B7D679CD924D41FB7378598B71A6CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral14 behavioral15
- Target
  analysis\Microsoft.Web.WebView2.Core.dll
- Size 681KB
- SHA256 3c6831b6178b299d951017c3d7bf323b57cab1b7039af277526b88e3116259b2
- MD5 e716aaf11102568bb78c8dd61e4c8926
- SHA1 24cd53f5fb474fe2e6bdaced8c2feab113e64082
- SHA512 52b433579c4d0bdc9d3e2a916857c8b0c066caa36ecedea59151302230d9bb65b601b736ad657e628613594a35e9054f6d72e113ad39c74200d55f153d50813c
- SSDEEP 12288:pJ4dCXzRKX4EcJupbSRi461R1VarP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNI+:pJ4dCXzRKX4EcJAD1RbQg
- TLSH
  T1EDE4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  analysis\Microsoft.Web.WebView2.WinForms.dll
- Size 38KB
- SHA256 4626015b119eb769a566996d40d079058a28f0dc2738ab221efb200ee7300957
- MD5 a0032e365c0491501c8d258f2393f7f6
- SHA1 c16b7482a920ec445465fe722d75cb2383eabe5f
- SHA512 fad27c0b26202ae69ad53ea4bdf9432611c1b217b8d9ae59ec46c827333efb32024ece5859acd244acbb8f6c01411a34aad4449d26a4a54d1a32a89ca24c8e96
- SSDEEP 768:2caNb2/itGt3JrbYbSQzZDgcEST3p4Jjrjh2je+SG2au8vxJKia5/Zi/wGQSxKFy:Eb2/D8GQzZDgcEST3p4Jjrjae+SG2auO
- TLSH
  T1D7034C4083ECC527E6EB6E78A974866107BABEC33D61DB9D0DC5F0990C737D056113AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  analysis\NAudio.Asio.dll
- Size 34KB
- SHA256 035c653468ac70370f51fb5bb2001b4cf868e479846ccc8c7a09789aa22e2606
- MD5 ecc97e0779537d8b9069be2515d11fbd
- SHA1 b80f567d786caf8bbd3c48c1ab959a9ad1dc346f
- SHA512 8cc55f96ed44313d00a96e8f5f6c8ad81d8aa0e92cae6fb036471614f618f144f497c543681ad32383b66c3915f64f8d2b31e51bf9b1f879ddf1bf741f3f1a96
- SSDEEP 768:7bmAzhPO8oDBf5hKhaJbLeeicKEturvBbf:fzhP/oDBf5whaJbLvuAurZbf
- TLSH
  T188F23BB4E7E44627C67D1BBDA4F701060BBDF181D923E70F5E48A09A6EE731486A1363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  analysis\NAudio.Core.dll
- Size 183KB
- SHA256 4f8d8c4140146674b103c8a3c46fbc4c768a86c0012a167168e3f7da2b3e5c09
- MD5 4e4302ce791e48f985a3a221a19a272b
- SHA1 d2b0fd622daf57a012c3cf5bdf4b187f27d5d080
- SHA512 1685a17be6d64c222ec606488e3f8e9707a8b7709054e9e99cb53c7b438f5b993820e2e9773e02455525ee06e18aa65ae150420224311f6c69d795c3d129e312
- SSDEEP 3072:6lnWpdQWUY6GwfIGsnlLieRT0TWsPtt3RBntgqK2QlVEOPkk6uSYsM+S70I:FpdQJY6GwfIGOLi7tt3RBntgn2QlVEEO
- TLSH
  T151045B2563E48266E66F9BB5F0F204178BF0F4463437DB4E5E806AE92A07B01C592F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  analysis\NAudio.Midi.dll
- Size 45KB
- SHA256 7796a9ec97a1ff29e682855839845da9fe26b6ddcc34addbb514cd73e7a9f02a
- MD5 f6940019dad6c782bcb645c2f7d52db5
- SHA1 1bbe492757bf99840d923fdd44c6a3f34b336cf7
- SHA512 1da566cd9f7b0a81f9d858b48306111b0791991f867e77d24f87f26badf93ca6e6414b12669d83b4d3f0b96959c48172f4a77119dbd12e6d8b9e0d0b48caa006
- SSDEEP 768:xwuDUaOqgwjYpA2knmsbS+O/RXgQPODHM0Mx7hlEmmyFyaetiWvmYRMUQ6LUOu5r:xwuDU7fwT2kmsbRMZgQP6HM0Mx7DP3eT
- TLSH
  T15C232A15A3F8861AE2BF3779FC7056110BB2B9867A32D74F0AD468AD1D237844C61773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  analysis\NAudio.Wasapi.dll
- Size 176KB
- SHA256 a05e371abf96195770ac4f84653d987d63731fed528e98c7fe0d10ce66e37d7e
- MD5 bb660a4efbf5c0fdaeeddd4cc9ab9600
- SHA1 6dbd30a9216590d012a7feb802831f538345756e
- SHA512 7452a8e8c7b3183fcdf2d8546a3d154ce1ae0b7756281bcf5b454b10292356615f70593a73be36095e9eec7f78cf8ec46f14aa52d2b3ed7aa9a59505fd2ca725
- SSDEEP 3072:6S40MR31DisfSmJyuhrkf3Pr/duoSIlKjaBIWbiFyryvpwAk:6SWZiUBhrkf31bIgQvp
- TLSH
  T16D047B223AAC9D76C5AF43B9F8F30D03CBB1D4463A17AF495AC15B255D13B924808B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  analysis\NAudio.WinForms.dll
- Size 34KB
- SHA256 7029d547c9da7fad6d32b6fc4fb9120a52f596f6a1c86485ae050a2e971ae4b0
- MD5 bc833a66485ac36dc35c94f05530283f
- SHA1 1faa4ad6a60e2c3891ad77a0b840488e92732800
- SHA512 c37ebb92c90c99a3e68e004b2a9a82a3e816c228823b17807d9415a6b4ec7addc1718f282734e8a02e6f35ef99467683c0f6461b6c3a055b521fe7065ece27a1
- SSDEEP 768:XGRcd/kDtaVj9ugB/0p4wCPREb4DmHBR9QeX:4aVj9ugQhMOb4DmJ1
- TLSH
  T1B7F22919639CC36BC67F0FBA40A521431336E681F542EBEDAD8831E99E937510761AE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  analysis\NAudio.WinMM.dll
- Size 57KB
- SHA256 80807335ee64d5bb26a9de0d1f966a902b5adf32c53b853c8b871937d12b437b
- MD5 1b1d3322ddce5eb32c59486910602068
- SHA1 247bf1750eaff673d4eb3930a6703a2cf62ed4ab
- SHA512 b41c1ae1dfa276362028a0c0b8e91e92b40b6c046866df4d983a02b63464e112f3714df4258d29c1d84123eaaae6eac51624e0dfd6c37fdf863ba940560166a3
- SSDEEP 1536:0WVGj/N4HIhMBYN1nRfEfEs8Ve56qMDrg:0+Gj/+HINvbVKP
- TLSH
  T163433B016BD8427BD6BE1B3EB0B60A130B74B9E2766BF74F549CB2DA885279004417B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  analysis\NAudio.dll
- Size 7KB
- SHA256 99f690cf6cdc829f815c06c27fcda9bd18f85b475a8b1b00898fb669fe39f98c
- MD5 701249dcdc4d0bbb0f0297d30644b511
- SHA1 587b0cd3e106028345cf3c46604a1ab3450c4f30
- SHA512 b2ab3ec44416b88acf6be92a60f646a1ec89eb2f97bfec93d04ac04c5c64827f3152bfd0bd676a07bb89f0031df2bf67b38d491d3b5a4ff8da5d496352f31e27
- SSDEEP 192:dKHBYhRQzpGaAIaShUMW2Son1MRlLGQXStY:dKHC4zpG/rShUx2KQQit
- TLSH
  T1C6F1D735AB98C633CAA60F79EC1707D41774FB40E943CF2E0D8CA09AA9533495B627D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32