General
- Target http://magnet?xt=urn:btih:1AD065C82C2589082ED1C7E23E9CFADB5DE48526&tr=http%3A%2F%2Fbt.t-ru.org%2Fann%3Fmagnet&dn=Image-Line%20-%20FL%20Studio%20Producer%20Edition%2026.1.6%20Build%205406%20(All%20Plugins%20Edition)%20%5B07.09.2026%5D%20(GUISEPPE)
- Sample260924-qd933sec65
Score
8/10
Malware Config
Targets
-
- Target http://magnet?xt=urn:btih:1AD065C82C2589082ED1C7E23E9CFADB5DE48526&tr=http%3A%2F%2Fbt.t-ru.org%2Fann%3Fmagnet&dn=Image-Line%20-%20FL%20Studio%20Producer%20Edition%2026.1.6%20Build%205406%20(All%20Plugins%20Edition)%20%5B07.09.2026%5D%20(GUISEPPE)
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.