aafd22a90bb162f42ffa6bc785d6979a2f57de6f937ded83e0fb7bd5067a6536

Sharing

Copy URL Twitter E-mail

General

Target
VoicemeeterFancyOsd-x64-1.2.2.2.zip
Size 957KB
Sample260903-1zjhcss1hs
SHA256 aafd22a90bb162f42ffa6bc785d6979a2f57de6f937ded83e0fb7bd5067a6536
MD5 2c5bb1a7b4a8c040c2cf7cdb237a1f98
SHA1 f30c5d31e9c901f29aa1f0acf642724246a09c2d
SHA512 734fb114005db3eb233c1ff8b5b535befa8ea7a7bf80e792d4dffa128c9f688651693a6cf0246e2b48abb2941c103568f25138302c61e3617f888066f6637f4b
SSDEEP 24576:3y432WC6Kc6DDEzk0GYsxxyMpA0vb01h8TLhSBTNgXSf14t:3y4mLZjDEFQUMpAAbgh8hTifc
TLSH
T1FB2533CF625BA855D02DF53B95A00149BB0751AF35A232F739946BF01EA1AFE322081F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  VoicemeeterFancyOsd/DXGI.dll
- Size 136KB
- SHA256 2cd6efbc8d935748128475e30f22c6fc528821ff44832ee88d24542578083ee5
- MD5 429f3167abb71ab6913dce57df5033b1
- SHA1 293d745d53fe12ba16a8d8c9e7d90f0be5b69883
- SHA512 fd8b56e17d37194ec4ceaed7b606243deed1640fc7dbd6df73db3764d12d97fd6145a678d12296dd9ee09f8bfe63b990f6d8655af2439657330c137b3cc82eae
- SSDEEP 3072:84SyKZINLWIpIpNWwEimpoOV1eBEkagQ/NiHKIC:9KiNCdrExoOMC
- TLSH
  T128D3171BB3B600BBD1BBC27985938615FBB2785147616BEF076046661F237E0AC3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  VoicemeeterFancyOsd/Hardcodet.NotifyIcon.Wpf.dll
- Size 200KB
- SHA256 14d5b545584f2b9fdf06a083c3e0196f416f07513508bae6305f9221cd731c45
- MD5 22e2b3866731ba31ff0f2e341f8bf7a5
- SHA1 6c165a36f3243c29e71936d40d04689ec668f68b
- SHA512 98c4244eba389cb7653315838abf5c6e359b23935c0ba0c40bcd31ec50e996b02aff8a728e6a65c8416672537a9bddb3a9cdb611d57cbebf293dc6db01a61508
- SSDEEP 3072:z34M8U1Tnc3mXKMNd0zX/oWAgKzYqymzbKknp3Hc2MwncmuiU299M:zx8Uwm6MLk/TEWUAKnFj79
- TLSH
  T10E148D4A33980A17F7BF667CC1A36261E37395912322C6CB08A5C5185F53BC5BE722DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  VoicemeeterFancyOsd/INIFileParser.dll
- Size 80KB
- SHA256 07c07b360caa8146bcbc1653542a51614c47963bb96091976b687587f01eb940
- MD5 642e7169f34fe5042d9718a3c2ae637e
- SHA1 ec19dc03b49dd5a257d8a1267dc58cc044d108ed
- SHA512 691efe8ff35659f128a6b7f04beb0e191b585dc35da8a91f72b3e5262a1c85d7ec392257ba9243262d4ffc6df526b3ea5739b98f77f12f25e47b15154e556d1b
- SSDEEP 1536:waEnObGeo7RGJietaYV5kGoANfOHu8TR3qMpA5MO0HMaSm9v:DEnOItWieoukGoANfOHu8Txm6VH7v
- TLSH
  T19483181533D88625DBBE467DE4A34901D1F0F4935312C9CF1E58AA893F83BD29AB221B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  VoicemeeterFancyOsd/Interop.IWshRuntimeLibrary.dll
- Size 36KB
- SHA256 c03d60277eaef63dca5804ddeefba1f1491496c070544c0c7ec58e0b8b2f0da0
- MD5 c0f9d529d0540865ff4b6358c059ac82
- SHA1 a70df2e0dc5d253c09c1f4d2acba7bb1cd0d22f0
- SHA512 9f7bd9e637342ab5cc56e3e8ea90f272e2410d15a3dc5bd58a6066c1dcecc70baadbdcab8021ee5310af701370cd92460fd5a41b511b28c2e594f8b69120e7fc
- SSDEEP 768:5DZfmTXoKYfUkPnBkZlBQQ/SMfzdztuo2z9IkCBoptcNt:5YHYfvStbfBko2z9IDoot
- TLSH
  T1FBF2A673B774A265DC6227B548B32FA02371D60687A3EFDB847C936A4F072848D91736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  VoicemeeterFancyOsd/UnmanagedLibWrap.dll
- Size 24KB
- SHA256 38402ab82560b443b872c5f9607a930138435650cef6fbeefe9363e232a2685f
- MD5 a089618cb4dc77183fc109748fed5e3b
- SHA1 7942b5d42eb60de0e14700795b8294078cfe700d
- SHA512 7b63ce686c405298ca7fb1725140a182f726daf2ea676a01ce1644d056d601002bf0407950432e54f7c3bbd24a0f9f9e73853f781566f28299c399d1a11d5134
- SSDEEP 192:A7G63e948DIJHMEAD7GirUwkNXgq4GtWGV+T5u:A7G6w488p8D7zJ6gq4M7MI
- TLSH
  T1ACB2C71AA3A81B16EDAF033AAD932E44E930FE1417A39BDF0041966C2F177D14A35763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  VoicemeeterFancyOsd/VmrapiDynWrap.dll
- Size 44KB
- SHA256 b51d4748962f3857b93c1d197d357ecb112ef808343b79118a5bad7ac1e6ad6b
- MD5 63d2c6d8a083984ef1136caa300e57d7
- SHA1 763a30b4e04d89bb0a4338789bb744b4951f47da
- SHA512 a68ac6a872b32e785b3e17f536008b309d54978a4a1b9498f30abc19ac8ab9b2fe24245543ac0eea25a88c2b2996ba5deea5034a265a63d806b7b892d9fe1d66
- SSDEEP 768:HoBSauH05x+i8Mxz+DgUOiidszMxxecCO:HsLuH05x+i8MxCD4HszMXejO
- TLSH
  T14913E62963E05A74D67E87F8A86209118A74F5DEA313E7CF008C419A6F53BE5727339C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  VoicemeeterFancyOsd/VmrapiDynWrapExt.dll
- Size 36KB
- SHA256 26c4b9c359ca686cc303760ad4960a96f92f14c468293dbd0b894f5c8c822c4b
- MD5 69136aae38835838129ac5e6145941f0
- SHA1 2317b5738125cc5ac043cf1e5fd14249bfbeb0a4
- SHA512 6a65420d3168ee5cfbec6624105d3e10f6b70907d020d616654abbd0bc4cac9c810ae8df5190756112a741b3e21a1bd702666d0a16088b2303e91870f56e2cb0
- SSDEEP 384:5EGbZaxvDNRm6aSFlE4sLLQu1osLBlEVEGchV+nwbnViDuc7VDnkwlwOGkb8X:5EGbZ27O6dFlZszHdlkEvV+nwbyCGmX
- TLSH
  T1B8F24AE0DBACC228CD59E67A5A6B0A0CE561B808871397CF158CDD6ADD973C05B31D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  VoicemeeterFancyOsd/VoicemeeterFancyOsd.dll
- Size 1.4MB
- SHA256 42a063dea359282aa93f0895803b3b08b817162b88191d242fd56113cc69f35b
- MD5 6324ff2d191fd9874b11152420dcbe99
- SHA1 157afe2d6555e00b131e27c4ebfceafee302ec46
- SHA512 0944ed56f55da16fbc1728904b3a9b2532612f7e21e9a06da9733107e17785232254d385f47aa06a80c9c28d7caf8e6a9efa164af183b7d60a6fe460c82d9dbc
- SSDEEP 24576:xIA9vhlRRBp1VvhlRRBjaVeHFKdKd40J:VhF1hhvWmFK
- TLSH
  T1EE655B0227DCCF31EE9A4576CF1A4F0CA12254A27A70DDEA14C52F6FDA76AE146B1133
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  VoicemeeterFancyOsd/VoicemeeterFancyOsd.exe
- Size 309KB
- SHA256 ef35f3f015acc51078b682c212c60d21ade58b4983aeddac203d54f25c0825ba
- MD5 799efdc3ac54a363060d5f08d98a73c5
- SHA1 73ff920b56c57369e647c025c17cbce7ee9f7854
- SHA512 e3422143157044d5b2fc1e7a5ab173c9b0ee21076e3cde35de3fcf313ee2a16053ab70b9d4e26ccda880f3001df46d0f269b492d403a2c09c75b5e3bb6a4d357
- SSDEEP 3072:oXwANETcQt1Onb5RHrfqDQXFn4dPPYseJwmZ82jT6SbhyDFGcera7D8b:mlxnlRLfyQXN42D7Xq7v8
- TLSH
  T11864B21363DCC0B9FFE29536CE5A4E09B62368B76671D9EA12802F7DCA355F09935203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral17 behavioral18
- Target
  VoicemeeterFancyOsd/VoicemeeterFancyOsdHost.exe
- Size 71KB
- SHA256 010a39f2c33b3df513c599e951b61afc8299c85b60c86e957e9da17c1cd5655a
- MD5 f04ada7af26797029fa84fe969e7d215
- SHA1 cb91407f81d32e05d97ab017789406d0d14b7c13
- SHA512 b77c62e27ef23891b74a09533e7345a2070af4276e430a5b504673e9c6b3b51556fc542762de182705a121d8e80bf65008796bbc047b9a4a9376570fede16977
- SSDEEP 1536:os+HzHJpQeNvtTxmH3rZfOo93zxg+dzv3URRpo/pPz:CHTJlvnU2mzxg+dzvSR4b
- TLSH
  T15C636C9A675840EAE17B913CD6A2C506F6F1F995132217CF1364838E1FA7BE05E3D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  VoicemeeterFancyOsd/WpfScreenHelper.dll
- Size 32KB
- SHA256 f6747d0ba21990ad241d9246131019c9c466bfd025841c867821c5527d4f58d6
- MD5 7e4e2c0a722ab01ae6268eeeac519796
- SHA1 28e4e289b01a8b3e43ea10c74462ade7bd72850b
- SHA512 c33d0bde696b640c181ce8343f57e473cf47fc6ad7918e30240f680d522b0a4380f6ad1a60ec5814165531d4d37a13c99016fe387a079d9bbde93c40458b6a45
- SSDEEP 384:FWJzQD9VG0d9xNecTacPZjK3YsjSQyeZKfoAhp5:QUHGGrT+4ZjKJa
- TLSH
  T127E2292457A48726DAB9863CC9630B0B8B35F5819B42FFCF01DCA55D6D63BC4A2732B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  VoicemeeterFancyOsd/hostfxr.dll
- Size 356KB
- SHA256 9e9af18a6da89cdb81b8bae473ad9796bb5e1c4cca9baab738b76c34778c93c4
- MD5 b1f78b2c299b2b9fbb7c93d03503a021
- SHA1 117b9768c3c2e18c21fc81992620b21e7ac99bec
- SHA512 0425c38611ef88982af9b9b0878cbf3bcea81baf04dab949a236cc47e36d44f411102ad63faa07be11ea805c1b73cd9ea5d3108428bbdeba6322fd514116edbd
- SSDEEP 6144:vZTYhlQOm7B+dPvIWOVid6QSZEA7URL78h:hMhKOm7cdPvI664v
- TLSH
  T136741816E2AD056CF1BBE2389AB79901E6763C4A4770D6CF0390416A2F77BD0DE79321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23