359af26e7881316282d35f6c1950ea92f76a5f6f0e77479288a25b1939e5494e

General

Target
Voicemod Pro v1.2.6.8 (x64).rar
Size 42.5MB
Sample260822-p7jmjsfb25
SHA256 359af26e7881316282d35f6c1950ea92f76a5f6f0e77479288a25b1939e5494e
MD5 b32c28196bd458eddcb80bb7221783d1
SHA1 1e0752640d3fce888a8fed0c4a25734b125e334b
SHA512 82d17503ed0e186ace21765dd125bd9cf60430e0f03a21306a26786d253814276f41af7cd92f62872b2f4503190d5da6beb7b4cc957b62a71a14901426e65ddb
SSDEEP 786432:Tlhh1IjVS8rlPsboIx8wWYWYF9EGHP+wzUQ40yyCB+flQBsXwry8G/MApQ:x/1kRPDIx8wWYWK9EQRUQZyem28yMApQ
TLSH
T1CFA733C8306B1F1693F53E3A0AF8106DB64C1DCE69E7AE6BE54C07344D6CB25849978E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Voicemod Pro v1.2.6.8 (x64)/Crack/VoicemodDesktop.exe
- Size 2.7MB
- SHA256 2a4176466f2a9cb6edfb74f04ecc737672363876b7df6b06fe5132533eaf0d05
- MD5 237551f6b806666f9c0c3f5669380195
- SHA1 5a7aa3c8460e1be4e4cd3d244a59b285a8dcdda6
- SHA512 87eaa33d93513f217d754acde0191ae0c7b73a9443602e8cbb44da09e66a33a19bcbb8a503fce7a08ed15174afe5f1dc708896fb415fca174a721b22bf969f69
- SSDEEP 49152:/3bKUlADq0GArjFFLqIHaLafIXYXpdwbSC:eUToFFL5HHfWwpdweC
- TLSH
  T188D5AD0137A0C908E46A1E768D30C5EC5332BC0AEF65E64F75DA3B6F2ABA7814D11767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
behavioral1 behavioral2
- Target
  Voicemod Pro v1.2.6.8 (x64)/Crack/lib/VoicemodSDKDotNET.dll
- Size 22.4MB
- SHA256 7e936df694ae0dcddf6ba8a154f88ec6b9c44a782322757112d594df2ebb3962
- MD5 387497039e5dd83a0d599df223b3a4f7
- SHA1 b3e42f1aa6eb776eeb42e398797e6ef7cdff257f
- SHA512 69604fe4ce014aaeefa310111b7cd7d424cf11537b080cfb6733ff43a53c66b32e662a4b73218d05b6e364900363a7145cea7f2bf1db4a7202a28e01ff781e21
- SSDEEP 393216:8m8S+7v/NOmhOM88xlLJApEC5L9Ln57Svnesezx5I+W0Y65NTBjAcs:8vv/Yme8xdCS2L9j5753KL095Nm
- TLSH
  T1F8372257F5849CAAD0A1507040E72E71BAB078AD833393D7C7A8567A7D337A00EB93B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Voicemod Pro v1.2.6.8 (x64)/VoicemodSetup.exe
- Size 22.2MB
- SHA256 afd7452c34570e409fc0c2bc8a22fb7429a3cc8f48e85fe6a154656ec020330d
- MD5 2c74a59f3a312c9003e3bdf2f458c87f
- SHA1 97b1ede9c186ea36a74bceb1bf5e5689aad99086
- SHA512 b5e8810733694aa773c4c3b8a4063e5fddd962b64d2ad697223ddeb7337f09e8c21fc1efdb2c13c854f2e6884940fac217338e0839fd21d2b4db3c2da031a392
- SSDEEP 393216:D2MvvQScyvXuaXVTwkBgoEMNBrDXLuzLYzCdcv8p5UPxaMQlBf4PrE:SMvVcysoEcLuzLig5p5UPxtyAP4
- TLSH
  T13037339EAD1202F1ED31F6384C4866A61B7BB2ED3B2C5C12A57D47E19B34C736487638
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution installer persistence spyware trojan
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
- Drops file in System32 directory
behavioral5 behavioral6