d4904bf3966a91f800668e592b2561f71e55ffd629798b9fdbe11b117d3cf68a

Sharing

Copy URL Twitter E-mail

General

Target
Audacity.rar
Size 22.4MB
Sample260910-j7arrahr7v
SHA256 d4904bf3966a91f800668e592b2561f71e55ffd629798b9fdbe11b117d3cf68a
MD5 86cf8a68a827a2cdff53697d2915b48b
SHA1 17badca54aa73ec9bac636efcdfefae573c7413d
SHA512 6032c67659bc733f2a63d5cd1d43e37759c0b39598291c4bfe46bbbe16da7a2f511acfdc554191f1c43215e0de2d31bfac5661ceaf156a5bba22be1c6327e559
SSDEEP 393216:kp3FFLE8hTEcuPrJ3+C7k5aCl9ke0ASsZeOsWWqKrAy7cKomPP7aTyxNuUKzfSmh:kpNTEcCNu5aCrHPSsZeKJmpomH7YySzh
TLSH
T1E13733B0DED5600FAE68F4B87214E4429D9C01F1A45923EEEB56978C39C09F607EC7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  Audacity/msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH
  T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Audacity/msvcp140_1.dll
- Size 35KB
- SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
- MD5 2a214cb2f0f9473e7765ee3b8db8651e
- SHA1 9ce5c3d6c7d94b175f136f552af8771dca6147b3
- SHA512 ea9a759babdec5818fa1e430d1cb453cac762cfaa8f934e01d7182100f66cae21527962696f5bd963fcb0fba2c0f38bf4028e75f89e9e599ddee008021646a33
- SSDEEP 384:3jJ2J9VQH+qNy09dmFWcS5gW7YZ1gr4iSt+e92xS+R9zWd/I1IHRN7SUl8BR9zTr:d8QH+qNy0PmgogU9v2ci9zeHSn9z3
- TLSH
  T1C3F25D86F7248442EC674970C699EE837C3DB3D25B50969B17A5F61C0DA33C1FA34A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Audacity/msvcp140_2.dll
- Size 273KB
- SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
- MD5 3151333808c2c2339d5f5466df70b7dc
- SHA1 e48159bb2127ec812ff679f6fabc41141009f26a
- SHA512 8f1daa078e124dc89b51b84baab8d6cc2d77497be23b2ba95ef3fee54d9034e17bf5cd15a4043d025699972cae20f9c46d2e7bef48e4283f3ad9ca6b84fc64d1
- SSDEEP 3072:1J51P7emwi1j+XZi7b1dbqtH0h6XV3Q0JPQo07ICl3Sg2xmygdCg2LMeDh5FD799:1JbjwvnQo/iy5L/XxTWrNM
- TLSH
  T1AD543912B51A2EBFC5D6E8B04939B416FC223A418775C48A57C31C8D9E2BB437FE3529
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Audacity/msvcp140_atomic_wait.dll
- Size 49KB
- SHA256 640b2aefced484d0368eea5bdd06addd0658a3a70a49256e560d6923b404a479
- MD5 44aec42494531580bca182b0e2fb19c2
- SHA1 a85a6a4de6656e5969fa4ab15f2230dfe2839e75
- SHA512 d8afb5bbb1394fd14c3ec8ecdd4c02e1c6f23031b15173b1448dfd4915c392bb8512cd41eccb449db19969397a09046d27d54db704c8122ff62c12ff5a89c9d6
- SSDEEP 768:ayMsqh8UGchsJr3KbYA5XeDmqw4DYPW9zr0JD0io9z7p1uF:W+UjCKb/5XeCqgazrURgz91G
- TLSH
  T19C337DDDA7684083E5678634C1A4E517FA7AB7E20710D6EF4352F0890FA37D1AE34B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Audacity/msvcp140_codecvt_ids.dll
- Size 31KB
- SHA256 f2069a52880ec885ee7f0511186100eb7fada0411a2b4948fafea7735b878a18
- MD5 3ece3fb90bfaea8e9a5fb7139ff9cbdc
- SHA1 91b19dd0db24a5cbd944eca9c67fad3b53f9c154
- SHA512 c059ffd80de25ad10d34064b1e9421666525da67710de0ac445cfc45b8139715dd946f7e90c1e0d719c60e3d5902e3229db4496c87d674c0012c9b4a8c2b2291
- SSDEEP 384:p7GVNpd36sRWioEWEw4himRSt+efdDtdQ5R9zpU8NSqHRN7w9ju0R9zlWdo:5GVsfaw4DYd7ds9zmMEu49z0G
- TLSH
  T19BE27C89DA3C4487EC9B5C7082ACDE477C3D77C60A10569B4392F5181DA33C6EB3866E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Audacity/ogg.dll
- Size 59KB
- SHA256 606ce550fb8ed3e3f086d235d697c7b3ba795e78049d00da846f8fdd0172f7a5
- MD5 86657518fd12cbec0e2fc834ca58deac
- SHA1 9d6727777111bebb82b62ce79c8faf80da99bdf9
- SHA512 f1f018c22efaf924e665a30258287585bcdc24096aff6f693dbb128ee0b329352849b72ca64b0428b0ca293e24acf97c73e490da2262331b7af6ff39b8e6b063
- SSDEEP 384:mL4+Hg53IwRNwz2dQV0ljyC0smD34O3NRzBXNdk+2xsBR0LRRCppImMAYnQI3VmX:hBewZGs01tcyGtUplYZQhP9g
- TLSH
  T18E538D4EBB54C16BE832907E499BA719E77A3816D31213DF129443AD0D23ADC3E3B725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Audacity/opus.dll
- Size 547KB
- SHA256 fdbd519f0e93bf398e9c84018e7c4e0f0e5158f0fab00b4b698dcb96e200f437
- MD5 48f8803b1b9b17e7914a53790f772896
- SHA1 fa4cd8e5aaeea47f29cc1755052219e071c86ef9
- SHA512 ec401ebe4402d622cc37f56cc4b7cfb9c80930b4a180b7b9af2b94a6b9d546c65f924c20fe7495ffc7fafab43e9e86990d8ca05dd0d9068e29e024ebe6ba18e4
- SSDEEP 6144:QyoTUIxa0ntUqhlrp6aIIlWDV35xxbiRfaqI7qXkJ2TBFfvi3mvWMTT+3Zj/FbWK:cUOtUM7l+viRCyvi3MWMTT+3RY
- TLSH
  T1BEC49D05F2F599D8E03B9038929AB75BF9317959031005F746E0CA64AFA6BD04FFB326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Audacity/out123.dll
- Size 77KB
- SHA256 171779a198b99569fe663b33b85e389efcd88a4b0386273bc4fb637652f00fa9
- MD5 4b36415157fdf2da3a9024e0131d7673
- SHA1 2f4ba47af5c187db47980ec5001b69305ccf01f2
- SHA512 3fe9a74aa9c46c79d4b1deb167c8c09a59cfba434a56256cf534122cc81fb81334b8c39c7cd2ca20a16a2470528a719e3f6e5f72af02c6db7148602949a44dfc
- SSDEEP 1536:WpbaoxGsfz4b9J2Or82aX0cNMqV6Rcgb1T1T:gaoxGsC9gyaX9gb1T1T
- TLSH
  T18A736C95777801B3D223933C829B5749E33AB1811B7093CF1598826E0F17FE56EBA761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Audacity/portaudio_x64.dll
- Size 216KB
- SHA256 370e0fd6a9793edbd0d0fa7f2cc7cdaa4eed86d3a747d765cafc1ddb0e5968ef
- MD5 2e9d04b73aea9c6e1c18cd33020aff31
- SHA1 702c5c7168f017b16277747e58be68e49b3ca479
- SHA512 c54779d21ee25f31c8ee12ba2656e9208581738c1310151413d57f600fcc0e6a48fbf8e7ed6f5a4a66bd5c589e6d768ec1e5782d67483e032b05356f074fc488
- SSDEEP 3072:YEs06zhxelqtg0ibHy8X3D5EnJs+zElGRk1lkPo+PChCHHP:GQqnibHzz53Ic6Po+PCO
- TLSH
  T14C247D7AB3A4ACF9D82B807DC6C38782F672351503298BDB175186391E17BE4AD3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Audacity/portmidi.dll
- Size 59KB
- SHA256 eac026bccb67808a2c66e06c93e8a58aa0dce32342b279d7a85cd6243619774e
- MD5 8ba0fc5fce7885b20df3f458ff3eb2e1
- SHA1 2a9f83eb67b0c62e27448c4766c698da740166c7
- SHA512 33f5799a0a991651577d9a9c955e324ed8360843744cb4c092873468bc5f030edcce07008d5fd04deedac80d2d87ce0a98cbd57bf217f15d15200e05f39b5b86
- SSDEEP 384:7hP4vAy/CAOhTwn6PJBQSX7lHuoOwtoKJdRN98yE0+SlHTRccDufIwjrICN/+oUd:7hPDhEn0lisruGzZiVhUeUDO6Y1a
- TLSH
  T1AA435A6A7FA4A1BBD07BD17C89930716D3A1B115131157CF026493DE2F27BCA6E3A328
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Audacity/portmidi_s.dll
- Size 59KB
- SHA256 a5e856e6c79ac764880dbf45ba7054dfb85926094804330917717e8fe3408d60
- MD5 322ee4b4fee9d06b7d29eda7b6a52538
- SHA1 b62d6ecc100a2c1276a76ee936b69ecb6e656ff4
- SHA512 e11f5b19d8638ad08abcdee10082ad8c8139ce91b2f86ba1fef58ad40904c9ea4176a75c986cee507a44cd08633183eb9eade4ea0b40bcdd5670bf90fdea68b8
- SSDEEP 384:ohP4vAy/CAOhTwn6PJBQSX7lHuoOwtoKJdRN98yE0+SlHTRccDufIwjrICN/+oUH:ohPDhEn0lisruGzZiVhUAUDO6Y1a
- TLSH
  T153435A6A7FA4A1BBD07BD17C89930716D362B055131157CF026493DE2F27BCA6E3A328
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Audacity/sndfile.dll
- Size 668KB
- SHA256 e32d3ceef6f1975b09bbdb3ac2ea7664e20f74fb183cbcd2fa5f5762aae92c82
- MD5 d99d5f8f5acdb06f43e90ff406b8b5ab
- SHA1 d985e3254e4cdc34d5133ac8c7f83061fe1ceb4a
- SHA512 cb3a9cffb702b12686f94ef362f981e0b17513734ef6cbc0b614fc66e7b34f766dfe25ba3aae160f9ee0cc5b1b701f831705c467e17a37ed7f05d6b0c10c155d
- SSDEEP 12288:x+D/L/1Enu61iJN/D3FEMiXqzc7HgDj1koR:iL+nuB/DWM0jHgDxko
- TLSH
  T1FAE48D89777225FAC6A39238B181722BF7B4751803605BDB14E4CA70DB03ADA5FB7B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Audacity/sqlite.dll
- Size 846KB
- SHA256 32e61174217d06cbf18c742a0bfc6d3cf1b7fb543d3a25fc0ee890863f20320e
- MD5 f135ff7e82c3d53c81ae34370face0bc
- SHA1 d6b4f0101725d68a3cc36dafc224188d401b4bf3
- SHA512 ff0cda892f2354863c970aa0befbad73bd0a6eb2d0481e0455260ff7a3809522cbb54447a2733760fbaf8c6cedfc8c5658f9650ece6cbe3648cc8cd97949dd9a
- SSDEEP 12288:H293miY2cejr8EX/ItiB2AhNMlvRCePqjU8P:uWi7cOR/0iBW1kdp
- TLSH
  T177055B8BB7B811A8D47B807D85931357EAB1B45513209BDF86A08B9E3F13FD61B3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Audacity/syn123.dll
- Size 152KB
- SHA256 7ea5afa010751df8e0250109422f691087428cc206c6bb872e28549b36d74d90
- MD5 38f5bb1a7ef8f5aba3317cffe037243d
- SHA1 1a295e88cfe90dc87814a0fed21316fdf9f02f1c
- SHA512 508c9a9cbfde148bca46dbaa964838039e521fec4845d7d7d67a706ce73e9654e3246684b4e90f7eb30e62cff8fe33a434988da9aa3c076ddd374b0cf49ffca5
- SSDEEP 3072:YQV6DDO/hLBwUoY+Zy5vlI85ZifVEUwUnz4FiN/RR3Wr:Yfy/hLBwUoY+ZdqiTIr
- TLSH
  T193E33B43B2E465FDE12B813A8269768BF5723211031089EF77D09A352F96BC43AB7317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Audacity/turbojpeg.dll
- Size 867KB
- SHA256 4dbe4d737956ee9a58cf56d0eb1653c7014c888058bd2e75b290a870c80e4d66
- MD5 08cd32366c2e715645aed74d96b08359
- SHA1 57bd75b081d456f792c8a6953e42efc2aba14ee6
- SHA512 651c9790066aca690760a1c75de771452d835c5bec50da0b10413c53858d73c6e0986fbaebacefb8dd504e928192e8a1039583aa25c7f88ec0c38717d1584344
- SSDEEP 6144:xMwRpNe0F+gFQmo7zXa4I3XDr2SYGPryYlEahMUOIayMDoO4qZfdiVcY9YmOHs3Z:xMP+pgk96iTQAf
- TLSH
  T1C615070BE5A26D8BCBE1C438CF29D936DB54B46C83F35AF7709286D479039E07976A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Audacity/unins000.exe
- Size 3.7MB
- SHA256 56a12170378cb2f143582cb954ef7cb57ec28712f40cddbce5c81363c28a9b84
- MD5 4a8d38d17d4f0b78401b114af6324b3a
- SHA1 671c8200c53ca15a8ec6453876c49251490b1483
- SHA512 d54578ae1e904edac54b11840f5fc3785cc4b50d836db1f4ce7ceb24ae3947b81a4b82e72d7c9b6066038b757c81dc68ee8ede02277bdc3f7916c430d242cfb0
- SSDEEP 49152:c3SA9I3bZxTZElVySH6UNoO7zjQynN4s7UUZyE8eECaN2Mc333yNcq/E:cCbWroSkynN4sQ+TdMc333yNcqc
- TLSH
  T14A066C13B348643FE06B1A395937FA64543F7A7229138C675BF41A8C8E752802E3A777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Deletes itself
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Deletes itself

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32