a7c83778eada046598078b29b688f8cc4e005a3c1e3d8e70df051c4cddaa4da5

Sharing

Copy URL Twitter E-mail

General

Target
Leppsoft.SoundPad.v4.0.30.x86.x64.Multilingual.rar
Size 12.7MB
Sample260904-31cgjsbp2v
SHA256 a7c83778eada046598078b29b688f8cc4e005a3c1e3d8e70df051c4cddaa4da5
MD5 af160739e04002ea9ecea4c96add2dbe
SHA1 8be1538d2393a7d6b71ace30e1154456facc6ce9
SHA512 d02534310cd11462bec399d44e07fae07fe3fb4089f51abca5b2651705c2b4fd02489b552c98235c2d189cd70c7162860eeaf33bdc73e746900f95a42a95db51
SSDEEP 196608:6prvL4RRhFcRmUpoMQEuWeQB0FpuhlrLR5izSZN6chRTkVcEuQTASeh:2rv+cR17uxQcgnrLR5izSZceZIoh
TLSH
T168D61209B9C4C91BFA25033D4AF247936739DC58D76B43E69085720FEDB1A85F22B1CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Leppsoft.SoundPad.v4.0.30.x86.x64.Multilingual/Install.txt
- Size 655B
- SHA256 742b1e6d1b41a4073e1d5d26d7d8b937066a7c8aaf659965e678d82c1cf766bd
- MD5 d9d0fbcfd2e0a2b186855258bee55a91
- SHA1 5d0ef5d6be6e4a065fa1e9b03e0612fc6e84d2ed
- SHA512 93bc87ba40a232dad6c823c5d8c4a2dfe76e8baf9b98b493faf6f713116108737629663a3d8d11166c85bb5a8cdd5e220f8b4a13b615828f6704a79ddee377c5
- TLSH
  T1D6F0CBAA8B8183E370129A611B1D9864EB09C4ACF188D66E0E49C00F7352F54647E298
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral1 behavioral2
- Target
  Leppsoft.SoundPad.v4.0.30.x86.x64.Multilingual/KG & PATCHER.rar
- Size 44KB
- SHA256 e8c1dda820d5c46fb425ae91cd3cacf13825d22b62c320eca9b2359c2d1db22b
- MD5 3aa8cedb95ad4b378e1f822dc1ef0ca7
- SHA1 8564596487d38efe9a6c22426633a9f4b337818f
- SHA512 ad1da7081eae37203de2969d4d430e35937296e8a7a7e202a4e04efe51caed2b98ad33394dc3371fe0fc079327cdc5a766bf0373e4d5472196a1d365a8892363
- SSDEEP 768:YwwWHcrx0emRhYbBpTfnX3aHr/yzV8iu8pI+N9TThzRCbRm:Akcr2emRhYbjX3Mrq8iu8XNNFtt
- TLSH
  T1A813F1673B288967C25544B7203EB07CBB64A467B2F15743EF28096FED751E10D061BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  KG & PATCHER/Install.txt
- Size 655B
- SHA256 742b1e6d1b41a4073e1d5d26d7d8b937066a7c8aaf659965e678d82c1cf766bd
- MD5 d9d0fbcfd2e0a2b186855258bee55a91
- SHA1 5d0ef5d6be6e4a065fa1e9b03e0612fc6e84d2ed
- SHA512 93bc87ba40a232dad6c823c5d8c4a2dfe76e8baf9b98b493faf6f713116108737629663a3d8d11166c85bb5a8cdd5e220f8b4a13b615828f6704a79ddee377c5
- TLSH
  T1D6F0CBAA8B8183E370129A611B1D9864EB09C4ACF188D66E0E49C00F7352F54647E298
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  KG & PATCHER/kg.exe
- Size 26KB
- SHA256 7f6ed86b2de4849fed3849dec197e1acb924279c0969dbe9c2cc97986804b85c
- MD5 d59589da4d49653e3f44bed8fb9ebae9
- SHA1 32cbca907070fda90ebf53039bfec8b6017e6243
- SHA512 231601d82f9e3455beb7f8d0cfe94c0dcfc66fba11fb4368215190d1fc436a023ffe1c902b814bdfd304422e347b013232050b388d978d27ee50eb5f6c3e4b6a
- SSDEEP 384:i+LqjFWOk0D5rBlnhu5H+mRhp5A+7ah9HiMk39us38oZOeUX3/C05K/ryMGYP:iwwWHcrx0emRhYbBpTfnX3aHr/
- TLSH
  T12BC2D06737294476C29594FB342A74BC9F2C5C3B76F12712BF181E1BADA02D01E4B8A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8
- Target
  out.upx
- Size 52KB
- SHA256 afc478d871be2c47578b21e35238d9b29449dde367ef268e8ef44fb60984eb34
- MD5 184991e5398374a1f9cfb9bd33e2c63a
- SHA1 35ef83c1cb1a4fc7cc375e7c3f8f8e4bf141dc39
- SHA512 c1dfc400d06d9e17f4f9801594f9781d2e547b267f6d963eabfc90517c7981b57c9a146e498b49229636b353f0e478fd776b156e44f23db5bb454d8d4ca15300
- SSDEEP 768:pjohFtCY3c4zKL+tGO1N0R71f10/jJjEQv+E9+ZRnDjSwlKWog4OPym:aAOcstG800/Fdv+E9+ZhSoKW6OPp
- TLSH
  T147330A23B906C572D55093F11C6AABEA82BFD5359B6412C3F3CC8E3B57211D26E7190E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  KG & PATCHER/patcher.exe
- Size 17KB
- SHA256 b3fb453301982641ec13d8b69e7f060456815a66f37e963406e2a687b28461ac
- MD5 c89b6a18d9b0cccc340d2b28ed4b72a6
- SHA1 d3d833bf60c7ccab4c97dcf10853be4c97a85843
- SHA512 c191b9e28ca86ba3eef02a5ef035902face60f34f63a724778b063649bf4ee08c5f6da1dbdbac11be6811e1528b9c70dc4a901aa5fbe160e6f4baf5c20cf9203
- SSDEEP 384:DN1Vpts2rHu8o+zI+NjBT6ONggz8f7AVCbLbxP:DzV8iu8pI+N9TThzRCbR
- TLSH
  T17372C0577B388E87E6190477807EF02D76A0B287D25D5787E33A04FBD9AE0B24902279
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral11 behavioral12
- Target
  out.upx
- Size 33KB
- SHA256 5e2ac4bc4fb6424883d25e5edc3ba434b0e17bcfde759c8f97daf65324ccc83b
- MD5 be0d5dd9bb63fe4b8735dbef88ec379a
- SHA1 701c3cce4ea653ac54f166db88d20f7f58dd4faf
- SHA512 f15ff68919843ed77d19772775a4796af757c99abee27dd117b18e146c547b1fd58880170c2f5341623b931e1ec8785d8dbac104d9b8899b356ca3fd9b4000c7
- SSDEEP 384:HPXXLxQzY/WylUqukcz561ErRIhbmVC+VCudol2lrsUUz7A9C/hFpT6Vi0wCGbmB:zxO/NT56KI5/l29FGiohci0w1e
- TLSH
  T15DF24D337A924123D96252B108ABCBBE867BF4B5975142C377CC4B2E5B356C1ADF3029
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Leppsoft.SoundPad.v4.0.30.x86.x64.Multilingual/Soundpad_x64-4.0.30.msi
- Size 6.5MB
- SHA256 9c5a2544da17576e761dae4c0f62d8fe72130cabab867a5964efa195151d5e85
- MD5 d112db61e981bceb867ca93745e8e4af
- SHA1 e6bc04e346f7bebd5f6eb076cff090e23a84e7a3
- SHA512 6c66165e2cdc28cbf56a32fa96af46e36bc3df995694c3bdb9503f1b2133208000de474bab89cea6e4f6823c3718c1aef40f29ea60fb13534d5336125fd5a8ad
- SSDEEP 98304:jsajJtbGmYo5vbeXyPzTKSsMj8RRuo7xcCWD6UpoMF6Ejyoe0R19ajpnQB0F79fG:jprvL4RRhFcRmUpoMQEuWeQB0Fpuhlr
- TLSH
  T10C66120979C4C91BFA24033D4AF24793A735DC49D32B53EA9189720FEDB6685F2271CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation ransomware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral15 behavioral16
- Target
  Leppsoft.SoundPad.v4.0.30.x86.x64.Multilingual/Soundpad_x86-4.0.30.msi
- Size 6.1MB
- SHA256 961424427b9228dcc188b9756a6b4ad4980ee1481bf1d970647bea9df296a1d1
- MD5 1d927487b5d0fa9c77d14e9d673333d6
- SHA1 33d0b2b6264c7b1eacb9966c54b4dbc5d09a08a6
- SHA512 f5f7a33440758b088c04c6bf16eab372d1e7d31203241db8631efe841150304d42869a94ec6345a9f88201b4bd40f5c7eb9755311ad349cbdc44335b2338422e
- SSDEEP 98304:USPzajJtb25PDXdiAwERzoCZHNTuLQliLerlTkVgLEuQwOASzsyw5C:rR5izSZN6chRTkVcEuQTASe
- TLSH
  T179561209B9D4CA1BF625073D5AF247936739CC58D76B43E6A086710FDDB1A81F22B0CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence privilege_escalation
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18