bc4c155a0054a18b5eea7153e7c5292508e91f02f80a031d98ac0772c5704b68

Sharing

Copy URL Twitter E-mail

General

Target
flstudio_win64_25.1.6.4997.exe
Size 1022.2MB
Sample260913-wtawtabn81
SHA256 bc4c155a0054a18b5eea7153e7c5292508e91f02f80a031d98ac0772c5704b68
MD5 115c2161ba35950233804aff0a9d8263
SHA1 d529f3e2743f8ba400a22919ca16a2f71fd2fd99
SHA512 2bf1bbf91bc9b464fb8bafb4e790a4a9a8e2ecb71c5f8c1a7c29d7c312e34accf2cdf8a4557272c0251b13ff7a0d30df2b8cc38d47979f1dc4b0471d2c1cf4c9
SSDEEP 25165824:w7KmbZbLVhU8vs4sDDhvJShLMY4iS38XNyAo56fan:w7dZXnwHnJshLm13goA7Cn
TLSH
T1B1B9339C53FD65C5FBB0A93F08AB2A7177DA23850B03401A5675A80DBDFCE44A236B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution

Malware Config

Targets

- Target
  flstudio_win64_25.1.6.4997.exe
- Size 1022.2MB
- SHA256 bc4c155a0054a18b5eea7153e7c5292508e91f02f80a031d98ac0772c5704b68
- MD5 115c2161ba35950233804aff0a9d8263
- SHA1 d529f3e2743f8ba400a22919ca16a2f71fd2fd99
- SHA512 2bf1bbf91bc9b464fb8bafb4e790a4a9a8e2ecb71c5f8c1a7c29d7c312e34accf2cdf8a4557272c0251b13ff7a0d30df2b8cc38d47979f1dc4b0471d2c1cf4c9
- SSDEEP 25165824:w7KmbZbLVhU8vs4sDDhvJShLMY4iS38XNyAo56fan:w7dZXnwHnJshLm13goA7Cn
- TLSH
  T1B1B9339C53FD65C5FBB0A93F08AB2A7177DA23850B03401A5675A80DBDFCE44A236B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  .data
- Size 512B
- SHA256 020706760674224ad7cdb2cdc0f19353c0c1c14698c40c5471468f0958850ba4
- MD5 6441542fb2afaa7d2c49c9878808b86f
- SHA1 5937c7c41f86a1085fe6ad12ee5e5c516db900ed
- SHA512 ca92865f7d67f2d9f209533d4000941fd50878a24505b54b9a40c47a8bdab7f03c130707e6c6738566a0fc3b669bebc7c6d11d9a7feac7f06944373d238af85d
- TLSH
  T12AF09B979F16640DE645CC771751008D331D6E133400139A50D338464539B31DB15C42
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  .rdata
- Size 6KB
- SHA256 0ac6658d7ec44668f2de9fd62c27998423ebd3f1684adc7f416aee7f678f5208
- MD5 6fa1963797c52ce037b57866ab14a035
- SHA1 f8649892f3dec5255b84bf755c08f7a541d7ae05
- SHA512 a28eb856f9fd69e3de2547ab0b7f61cee56ef1d03bd39f30575800674947f469291c38fcb6bc0a21e8c5cbee5404dab4a08e459ee6dc857b5ffc5ec7ddf9df23
- SSDEEP 96:nIWmDBArDY6DMm8xCjuuapcFv9IWmZSGdx8DxlKmde7EKc1LVVPzWXryWKEW+:sirvDk8uYYZFduD7KEJxVS7yW7W
- TLSH
  T108D1A64177B8014BE5F31B343879291E8AFE7850E47EB30C2750914DADB968A857DB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  .rsrc/BITMAP/110.bmp
- Size 1KB
- SHA256 5ac685bb79e6fe75e6e54b9fd4e9524d8da6bc8acb269f50c42bf372af671570
- MD5 60d2a10c7daac29b36ca1c303f13d0a2
- SHA1 20d4acba22f5f106bbef22fa3e70166fff9fb9b6
- SHA512 c56f59c8ec1dc653cc69953ebdde2786e0fb6e327d34b9c3107f50a3302e9c709733156e29b52b1ce4fe7352585a11a5b8c62843608746422ab5f6d2d2d3a0e3
- TLSH
  T17031722ABA5FB08CDF90507159F8E878816937FD9B8FC9BB4024C515DDE60C91F92485
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  .rsrc/DIALOG/102
- Size 180B
- SHA256 7854e8d67a11148566ad37c5d23e1534e0990fe31a160e0e7da3ca751830bb50
- MD5 a69caf66f3f899403f8b25b02dc61908
- SHA1 3e5db9186cf0f75be24676462d88170e5950d9c8
- SHA512 b8f5c43b1efaa529778ef8a8860101077dd99bc631c72399cf50755099b977c2c7d49e2a3dd669cf72a312ebcead788dba2b73479bf8a45f9f5837bcfd72c504
- TLSH
  T110C092A002DAC169EC448430BF8ACA63A623B802415CA687BAC4236B4512E08CD25296
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  .rsrc/DIALOG/103
- Size 288B
- SHA256 c50631fc1f8425a95fd1edcc8e730d339e193a38f18d42372c32847a5ad2c016
- MD5 db6dd0434da4d7cac564518725167e09
- SHA1 a65a1367d7cd96450f089a8f8108239bbcea9f5b
- SHA512 4f0c2d1b5ebbb6760c43b9369dd90fdac6ab5e2280db9288ba9eb106642b4aa7076cb942718ae9f93cc97af79de1ef85d07e2aa4823a882956d46f5e03ff0872
- TLSH
  T180D08C4583D2DF95E4048C382AFECBF33A3570411624948BFD04AB637020A30EE660E9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  .rsrc/DIALOG/104
- Size 344B
- SHA256 4978808cfa3a9f541262585edca9b87268d2025e637f7254b269cef216b39a79
- MD5 9bf5ce4f6c93b09e4f5659e204c7ef69
- SHA1 70260f4f07476e289d4f0da08f6ea81edf377c05
- SHA512 943d8b8636cc829cb46f4f88ffd7f5cfa51ef8fd8ce4cb05d5af43fe6be2bb420d66d4b41382f75e980b78d27dbcd3e7a81482bee9dd44cb7a77404c5fdb5c52
- TLSH
  T196E0A90847C5C918F02898302BEAC3DF2033B0420820006BFDA817130024A08CBA91C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  .rsrc/DIALOG/105
- Size 512B
- SHA256 15663576584c947d634dab9848defcc7d8f05eb0b7e7c6d52d81eca695fc7a6e
- MD5 d1a92272fbd597e1aa19021483110d5a
- SHA1 9f75072682b37c6c52361d8c988ebd06dd003f63
- SHA512 367ebf76b9e39454afc064094b82df47177e533b3532dc24eb92aa6b5ec6393f228337cb093a73eb2f05516fed200d4a26fc74b9588fca19b0ff352736c4dd99
- TLSH
  T1D7F0EC596744C41BE00D4B7847E2C3E77633B01816482A53FF89B38B9550EDCFD2DA86
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  .rsrc/DIALOG/106
- Size 248B
- SHA256 4a55bd714f5d50cd8eabba10e57f0618f1842717dcfa582d73a917b1933cd1d4
- MD5 fa83652660409e90e0db9731ad2adb17
- SHA1 0a8f0af67723c87fe26ccf676b8e19ec6357b4dc
- SHA512 d97885f9c2846a042ec3c0d01a756d22fda7a989d55cd61efbc945abcdcfd74ca0284c745cf8bebf2d2fab82718f7b57ab0b701f67d2319ca6b5f55bce663c07
- TLSH
  T118D0800987D0C068F4704C34643BC5672914F5420C1471CFBDD583BB0824D00EF76241
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  .rsrc/DIALOG/111
- Size 238B
- SHA256 cb3c86cbcb579244a6f819f9c1807a7e89b6e600982ec6ea0841fcdcb16a9efd
- MD5 663040d6315b1d6ce8c0334d182ed8fc
- SHA1 ebcfff801a12fb8ad1200a4526fca8bd2c3e96cf
- SHA512 a6a4dd7641083e24e09ff1e851e26b191a46f623705098777baf0784003637577417330e78df6bdd28efc98d0cb9edd1d259cb78327946eae5e7a5117d13445f
- TLSH
  T1F7D012553AE6C50CF5B52DB1FEB2E2E71331F410D530C66F66C0120D00D5900C919B86
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  .rsrc/GROUP_ICON/103
- Size 132B
- SHA256 4306a580d344902ea4eddbaf0d4eb232e94af8167169324a86b71815f2698123
- MD5 3eaea37329e07b52b9aa3895651f5b96
- SHA1 d5e11ff4f4f7885a8527c2c8eaa4ab3c340449ed
- SHA512 83dc676bc95fa6cd4ba68a82aee5b4568a3d01219f2532f2f650b7f9e3e0231fbf23ed5709ed874b67c55c1e3e2cc163e043bcb307a740cb570ff02c77b56be2
- TLSH
  T10CC09201AB08580EC3F08BB8084B0333803DD0E001B366024A1F46E97D4B1722AB4B10
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  .rsrc/ICON/1.ico
- Size 9KB
- SHA256 e2638e78626d46841cfca102d811b150eec2a22ee82dcff56179402b244824eb
- MD5 116757cf78afecfc1060956f1823e86f
- SHA1 428145a1c9b04e93c87ae9b8bee9a57dff27d904
- SHA512 98296f272c0add282c3ac51c401e1007dba8f163eabcbcea711596ec46ba8332855e9ebe84452654289e89ba0b154153d845a30fcb3b5b83ce9fad0991ae1a30
- SSDEEP 96:aepBBpaC8EY0Vp1a6XVaIaSMam2p9+0jUixP9gAY/0bAPuYcJjGCyK:dkCS0Vpv7y8VBxlgx0beuYsyCt
- TLSH
  T1CC12C899F3D0478EE82C45F298AB09732DD43E1D4664B66A6285B7530D7211632EBD0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  .rsrc/ICON/2.ico
- Size 4KB
- SHA256 325e615a2ce5522625eb7e2141f2dfa91631cd9e0eef503d440213093600af9a
- MD5 4236c42865e038f3dfffdc2f6a7d0642
- SHA1 8eb65ef93e70f481030098cbca5ab18eb1a6a0a4
- SHA512 7e26dd566c318b0abcdda46217870ddc97fdb80b3d15fa1e88951259a34037b3785ccdc8e2da29af2b5436d882c69801f524f30cbfece21ccd1a6741238a49bc
- SSDEEP 48:GBXjpZnEG7pk6JnGZ7dAIw9h+VIV+ua98nnCbJS4naiYVNzAO7UB0jhvtoevMbc4:bGdk6Q7dmhio+ubCeV9F7Um4er4
- TLSH
  T1C491DAB0B3C82FD9E70491F5953E49D219F09D4950DA3DAB18D5F123C1B2243269BDCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  .rsrc/ICON/3.ico
- Size 3KB
- SHA256 7075e5b8cdfda69ee25f83e414ab073035cc2d2e1a286ad0c9eb6699c82d1b19
- MD5 a0332000cff957d6a7160cfe336d93e4
- SHA1 713d6d7f6c0ee82d1209dca926b9e5adb50ecdd1
- SHA512 7cc586ec188d17f49cdd3b0db158b66bedbd379c19905665867c8ce38b0b80829dd862881d4820f3f5d856c98a2f56b4a3b74d8edc4cb0f0a87a5fd1c4ccbfe3
- TLSH
  T15E71B70133E7A90BD80B9C39FACA86B11CCE6B00F13755AD49B21F63D9844B0502D11A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  .rsrc/ICON/4.ico
- Size 2KB
- SHA256 1843c2c3d180ded68e3cca7af6ae453ce51e98401f1ade79dd8d3edd5f43398d
- MD5 1067ca46830088494ac7dda0f837f3e2
- SHA1 7b919b8dc05848fb9d65fad0665dac7743287d17
- SHA512 c8612ae4873b16d023cc4eff7a70c60a5c6c9a535b4847d46fb8a1200e7c1735eb318c68b1fbe4767f30246d3188329590ab03ce3d7c99127d598227aac5c3ac
- TLSH
  T15941B8240300C255E12E1778B9F761D00EB24410523BA7F6AE91594ED996CEA7AFEC6D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  .rsrc/ICON/5.ico
- Size 1KB
- SHA256 cd89ebd98d089390c92a4a2f0d3ebc69b06398a5014c5cdff77552b6cd158f93
- MD5 bce8a2e304cfcfc383cd59a8a58f9092
- SHA1 89d935ca844041587199e07b789d81a5f0a68d70
- SHA512 8ab62fb8b4ee53f5c8da04c3e13ecf6e1ac874bb2ec22fd97303d56d16b45e957a1d12b32685e968eb1e7503ec490769c9c1e6c6cb77cfa08a9541a9517ad80a
- TLSH
  T12F31F8667FF49257D65C2C34A4AB1130FC2ABC05FB75992A41B3BBBB087C2F8590146E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32