80cea7b7bcdb20f75173509b56f4f3bb843bed848219079428946d270fa9f121

Sharing

Copy URL Twitter E-mail

General

Target
Valhalla DSP Valhalla VintageVerb v4.0.5 WIN-R2R.rar
Size 4.0MB
Sample260907-tvpp9acp7t
SHA256 80cea7b7bcdb20f75173509b56f4f3bb843bed848219079428946d270fa9f121
MD5 10cb8ed1dc7a028fbd1f1da2deaae163
SHA1 0a5fe50121b32c7a086ee26357de6aa9f4867490
SHA512 227a61c50f0a732ffb20f8c717c3bcc84dd48f6f8dc5554c2de34f404cbe18b130b668d3f1af08a7dae3e7f48b24889a4c2071c3171775a73994787025cb49a5
SSDEEP 98304:+rkYJ4sEKe8PCSN0kmK0NYd7DgI0PsYUbslVum5rIynVEMAOc:+gG4ce8PvNeed7UPsYU7mZIVOc
TLSH
T1511633643C9F0ACCA16DC232B9BF45B74336D118450957A8D8AB274DD3A1364BB863EF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Valhalla DSP Valhalla VintageVerb v4.0.5 WIN-R2R/R2R/ValhallaDSP_KeyGen.exe
- Size 559KB
- SHA256 649453c43b998ed2c23c87a950e6d4524cc435f995f6352676b09e043e381d5a
- MD5 a4352482c6c31a8722e7a04b83a5cf49
- SHA1 b9a4ece533737ffcc0e226f990511748b75af814
- SHA512 740e7db44137dfda82c082969784fc6b16f7e5ceead61b6ef0ca923e5812077329282a78ad882eadccba0aa0be9778b224957da48eb4148d887d9476ed1d0b24
- SSDEEP 12288:XYkc9t2Sll/UA8w4vQuo+KF76OyD/kyS2uB:XYkcL51oQd+KF4/BpK
- TLSH
  T10DC42301F965C0D7C8614771A4FF8F7575B37E268A76130B23987A387AB3256A60B383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RJUCE.dll
- Size 242KB
- SHA256 674a6eafb277261cd6959a4145329ab8b612fe5948fc8daf064192498fa65f92
- MD5 90a452c84f7f2b5ca5a61bccaaa17e92
- SHA1 3fb5829be5db5af55ee4043f0dce7f9253d800dd
- SHA512 41304120d3b2d0489fa82c13abce47fca967c6415e28c05382c0c567a167ff400f7d58b843afdfcc33227d4caa8fbb32af38fa7175fd066631fe1bb82615975b
- SSDEEP 3072:BsUYsLox8+vwJMcr7HKKQnpkrsvPmp55kIlzjjrfFO75Ag0Fuev/TBfoxzV7i94:n0x8fO0KD2AvPmbeQNcAOe3TBgDtDc
- TLSH
  T1BD34AE007491C4B6CABE053048B6EB655BFDB8200B70DDBB6B944E6E0E39681D7727B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/keygen.exe
- Size 733KB
- SHA256 0586b5996c1ecd29d05c3f159f2a74857bc1dcab40552a2495cca936d1349c39
- MD5 b42891de36d265662c5ae7bef4432958
- SHA1 760f557163dd295fb9f51dc3c6304debabe1fc3f
- SHA512 43bb4a637465e34544aa5c9b25f236daaa44285b3c8936a4b2e477ec4efc41a30e2a4b1735a0c36006f945b1c1f60e0426c228bee94176115e0c5361bff8b078
- SSDEEP 6144:bcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOyIJd/Z05t5460caYqtYryIl4INJM:bc/kEPDonR6Y436vRp/iK60X9z8VOB
- TLSH
  T159F4A14DBA937030BEC8423F1368C786BFEEEDA6DE1755D342EB2D5162216B84F24149
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  ValhallaDSP_KeyGen.exe
- Size 559KB
- SHA256 649453c43b998ed2c23c87a950e6d4524cc435f995f6352676b09e043e381d5a
- MD5 a4352482c6c31a8722e7a04b83a5cf49
- SHA1 b9a4ece533737ffcc0e226f990511748b75af814
- SHA512 740e7db44137dfda82c082969784fc6b16f7e5ceead61b6ef0ca923e5812077329282a78ad882eadccba0aa0be9778b224957da48eb4148d887d9476ed1d0b24
- SSDEEP 12288:XYkc9t2Sll/UA8w4vQuo+KF76OyD/kyS2uB:XYkcL51oQd+KF4/BpK
- TLSH
  T10DC42301F965C0D7C8614771A4FF8F7575B37E268A76130B23987A387AB3256A60B383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral5
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  $TEMP/R2RJUCE.dll
- Size 242KB
- SHA256 674a6eafb277261cd6959a4145329ab8b612fe5948fc8daf064192498fa65f92
- MD5 90a452c84f7f2b5ca5a61bccaaa17e92
- SHA1 3fb5829be5db5af55ee4043f0dce7f9253d800dd
- SHA512 41304120d3b2d0489fa82c13abce47fca967c6415e28c05382c0c567a167ff400f7d58b843afdfcc33227d4caa8fbb32af38fa7175fd066631fe1bb82615975b
- SSDEEP 3072:BsUYsLox8+vwJMcr7HKKQnpkrsvPmp55kIlzjjrfFO75Ag0Fuev/TBfoxzV7i94:n0x8fO0KD2AvPmbeQNcAOe3TBgDtDc
- TLSH
  T1BD34AE007491C4B6CABE053048B6EB655BFDB8200B70DDBB6B944E6E0E39681D7727B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  $TEMP/keygen.exe
- Size 733KB
- SHA256 0586b5996c1ecd29d05c3f159f2a74857bc1dcab40552a2495cca936d1349c39
- MD5 b42891de36d265662c5ae7bef4432958
- SHA1 760f557163dd295fb9f51dc3c6304debabe1fc3f
- SHA512 43bb4a637465e34544aa5c9b25f236daaa44285b3c8936a4b2e477ec4efc41a30e2a4b1735a0c36006f945b1c1f60e0426c228bee94176115e0c5361bff8b078
- SSDEEP 6144:bcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOyIJd/Z05t5460caYqtYryIl4INJM:bc/kEPDonR6Y436vRp/iK60X9z8VOB
- TLSH
  T159F4A14DBA937030BEC8423F1368C786BFEEEDA6DE1755D342EB2D5162216B84F24149
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  Valhalla DSP Valhalla VintageVerb v4.0.5 WIN-R2R/Setup Valhalla VintageVerb v4.0.5.exe
- Size 15.9MB
- SHA256 f73dfac2c047672bf898cb22afc1a36a05917dfc5f9b2f843f487a6a0b621e95
- MD5 90833626894a4a3e26892856dff120a6
- SHA1 18e4eba85e0ce3471f53b2494dbcbb1b8099f897
- SHA512 7f6d102574f5432e862faec9a7f06c005242df5fcd5b466680ecdc0e0f9ac57a9718cb9b51c0016e78bcaf5dc5d997d47b712b624c884706bce1c47f184722e3
- SSDEEP 196608:KDkrOd4cp2q3B1Ye04iuB9BaFZhxXHfGvAkt1RPb+Qp3HBJBWuF9gJf1PGcvF6ww:KDR/y79hGjXMo
- TLSH
  T1FEF64C6572B1C1F5C02584789A9A765BFA353C014F604ADF92A1A56E9FF3AE04CFE330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral9
- Target
  Valhalla DSP Valhalla VintageVerb v4.0.5 WIN-R2R/WWW.4DOWNLOAD.NET.url
- Size 122B
- SHA256 1f15c85728d1f4088def104e981ec6d238c415ba9da5e68973688d5c4feb4290
- MD5 3d0f57d3814074f941bbf15ed1c10d6a
- SHA1 f966cfebb51addb8be758fdc8b19ad60023f8eca
- SHA512 396567f83d78127c6f089aedf4601a857b124eea4cc5e2e75a377b347a726915749cb7436bff6e7a4b459410c05fe852189b7e500b12cf6cb79d534e227c1fee
- TLSH
  T10CB092AF4206828EE241694A90B0F808890FB9A508D2D0AC6258DE8B9D980D5D989B77
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10