8dab3fda5b8bd84bebc7c897e0329d3eca94333eb55e5c0ceef498e825034061

Sharing

Copy URL Twitter E-mail

General

Target
Debug (1)(1).rar
Size 1.7MB
Sample261001-krldzsfc89
SHA256 8dab3fda5b8bd84bebc7c897e0329d3eca94333eb55e5c0ceef498e825034061
MD5 09e96f44c7502b091166e3a5a13e5a3f
SHA1 009293c52b11f400c2e4d31e7b7c04a0dcaa4f39
SHA512 a5e2ef6104a881620ea4af4061c9b0cf03a24312c88d8734b24c4a5906c237bee6ae7bb9e244ddcb0f84716090cc4ec6e54e7b1da56b87234114f092993fc043
SSDEEP 49152:FXnHY4PyotlW2MgJwegLQWQD3b9k6s2Kk78Rel:FXn44PzlFweLWQDrs2Kq
TLSH
T1488533BD3592E6F861488A0DFCC9DB7C9A5C87CB40DAB6C04977A4C03D2F6AC264D536
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Debug (1)(1).rar
- Size 1.7MB
- SHA256 8dab3fda5b8bd84bebc7c897e0329d3eca94333eb55e5c0ceef498e825034061
- MD5 09e96f44c7502b091166e3a5a13e5a3f
- SHA1 009293c52b11f400c2e4d31e7b7c04a0dcaa4f39
- SHA512 a5e2ef6104a881620ea4af4061c9b0cf03a24312c88d8734b24c4a5906c237bee6ae7bb9e244ddcb0f84716090cc4ec6e54e7b1da56b87234114f092993fc043
- SSDEEP 49152:FXnHY4PyotlW2MgJwegLQWQD3b9k6s2Kk78Rel:FXn44PzlFweLWQDrs2Kq
- TLSH
  T1488533BD3592E6F861488A0DFCC9DB7C9A5C87CB40DAB6C04977A4C03D2F6AC264D536
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Debug/EAX Console.exe
- Size 2.0MB
- SHA256 bdf4919f27b345c98e727abb93d19efc2dc0d1470fc24df9824a91d4517baf41
- MD5 26edd1667706d4aa0fb295fbc8909a6d
- SHA1 20dd1f5fd5a8cbff81d1e564905dbda8aca18e8e
- SHA512 af7feb773a8f23db0afd1dd2db9913a6a2d85550c60c8abc0b9a7e13878cbc07f83eb654ff1fbad4a3497093a5387be336b008c997231ca9e3f9ecf4e4efa3d4
- SSDEEP 49152:SsCKIuxgaMj3XRD+uj3H2Cuk1+Lda3WvhoUo5c0XWzoZsCKQmL:SsCKIkDMj3XZ+ujX2Cuk1+Lda3Wvho6F
- TLSH
  T1AA9538D2EA4482D5ED3E47B3B0275CF116A33C7EEAF4649D248DB92649B3253442F81B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Debug/Guna.UI2.dll
- Size 2.1MB
- SHA256 6d876b257a97995d21072acd44580633468516121145cc218277edc18f971030
- MD5 58459aefb74d5ff786b9efb982d44eab
- SHA1 584f851c9824a27f4e2e5594ac206f8b165adf72
- SHA512 80e975d2726eb1e4515a79f3ced422e61315f9b2bcb87d054aa654c1885c12c2a16f75da9aba6f8cd2dd652bb85da50579d1e618f10fab1e50c0cd29f37c7b55
- SSDEEP 24576:mecRcAIrcai1e9RcNiCljNAXCITob+HgbY8DkUKAMDitqTwCTxZmxV7FdHQ/jzwQ:3AIKyo+HgbY8DkRmaZ8V7FyH
- TLSH
  T133A50A147ED4EB27D16BCE33D5E24011E3F1E5A32AB1EB0E76D35768184234A788636E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Debug/HandBlue.cur
- Size 4KB
- SHA256 ede61b6f6d22ab82d1ee9ccb0c0831dc776759860b09fd2dbb0e8fa19ad775a2
- MD5 161d157ccab42b7edbb2c62fa38b298a
- SHA1 f1cf92a510a5799e5c3a44940d07217278f5481f
- SHA512 ddc6f153f9292ef70ea88bc7d8054b12cca1665d947c7bace9d2a4d5b4b45b2d26d6223a55f6c16a05379f4022a80be0fa5190e317783254570a1f2eababab59
- SSDEEP 24:KOFNM9wfQWjGeqY9UYaQIBkrrs8zqFJVtYK7bB7rSJyLkcXF:pRQWHd/gBaXYVeKHBvSJEd
- TLSH
  T13C91DC94E884E2E1FDE11A34CA95ED321A033D9F80413C10B4C5BB1B19733E72B72E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Debug/Melanchall.DryWetMidi.dll
- Size 778KB
- SHA256 ad4ac36ecd26a0dd9c79ed0fadd6a9a18fcbdef0032af22f083e9430e1c84e87
- MD5 ed0dc7a819ba3e72503409b1bc3f7b66
- SHA1 9e2ead3d137005dd19573f2695657eff3015bbf0
- SHA512 b4709a51d7da713f1ae0828664f9dd622ad6f8740d0d0c9872f3ab54a9bd61d01fb7c9bdd1b24f012880f16e86034f2d0926c02c73276ddb1ac55ea5643db9f0
- SSDEEP 12288:vwUNlhmD+rq4sdOuxyuD63PdQAdPYfFRvBR:vwUM+GC1uWPdG3BR
- TLSH
  T19B05591237EC8E3BC6AF163BD570129963F0E846B393EB4B2314A6995D96B425C403F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Debug/Melanchall.DryWetMidi.xml
- Size 2.1MB
- SHA256 f2da1cb18492541cf59455162ce2bdfdba18a98d7a0a8089c5912b6a1ff08446
- MD5 89a8c4eac38d71c3d2e033b98f8ce1a7
- SHA1 d7fa6faddc8d55817c8423dd901a32ad38cbcae0
- SHA512 e40391cc737da6c037ffd7d419c93890006fcd4634705abb92bf3f5ddca5e21e3b6626729bf5cf8361d4ad9b295e813c8db6ff1909c14c83c0bd3c3a044b54e9
- SSDEEP 6144:TrmzbvjQGhekYjTq++Omo0CcqkY8WO0+S4OgC8Wtt57uwqOC+gaOwgUaAW2uPecb:TA9bNF
- TLSH
  T164A52134B2D04A170AB702971D2BF484FE720663648D186971AC5F6B3F7AC935AFBC61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  Debug/Melanchall_DryWetMidi_Native32.dll
- Size 56KB
- SHA256 080346c638e219ec7cd4748e370e5e11931ed3a228c17f76d84c4d10ba9c9e6f
- MD5 1b976d18b403ffb7d670b17a871bbfd4
- SHA1 7e2022b1833f8ad6c4f4cc643d7068e013107ebd
- SHA512 1b676ca71cba6ed2fc9952e46038eb891217a7960d7aa10b37dcb0f6230e30ab2e62d1e36faf7c783785c7874173dd29ab947e8bcd4be8c36cec7277a2340692
- SSDEEP 384:ikfQAw+aLuu4N5ljtm8Xy9kjwJFP9TNaZFjnUmWw6w+e5XchXSvWZdTc2xv1Awo6:hft9RBi9kcfPmZFjHP5cJPDHthH
- TLSH
  T18343A890BE844C9AE411B37854E5C167B63CB9D5C6031F0766286F35AB23BC13EDA27E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Debug/Melanchall_DryWetMidi_Native64.dll
- Size 65KB
- SHA256 80ca89af931e43642a125ec82e253d9bd7002088d000daba6e0661cdad89f5aa
- MD5 5326dfc6840947388f19f474c28e8c55
- SHA1 81afe328f00c500a7138c16c2a0ef200e2a122e4
- SHA512 4c0a1385438f26c1633c58c5e57f0f94ce704d8da52ec16f6111d2347e69cf8c0a3bdf9a4e737794110c02108ed70a4b65dec0ef67fca16d9103647e65a7ac5c
- SSDEEP 768:STukqEi0unSZFjZe7+zZj2WuLGIC1FyOJJnD19UkG3JSTEUb:G3dun+jZeyYaIC1drGoTEUb
- TLSH
  T1636350E12FD44C9BE925A23C52E6C232353CB9E447534B07963469321F13EC17EE9A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Debug/Melanchall_DryWetMidi_Native64.dylib
- Size 88KB
- SHA256 aa08c542e77b045fa1e00d4feab21080ceb415c4b6c343b0dbc5704d1fb02f92
- MD5 a51c6118f789a4f373ab25d98fab2988
- SHA1 80eafcd0d5806bb6bc40600d418206b78f4240a4
- SHA512 333a70512c919ec4119e9ce30364ad5380655f9105c60fdde4a29de600d54985bee73b02f498cd9a90d0ded58d9ea4d9eb1ba76f1879b595760d6b5174b2f647
- SSDEEP 384:OwUiZX3J6yvvnVDytNa2ZHS60LuoM5W/pFA6Uxf9pVtjN/gDtgd/OC5zgtDH23Zh:Owd3CBUuL5WafVQ99W3PQdLj0
- TLSH
  T14E93F9E36BC8561CC58B62B4C85101E2F435F81613E6461EF3DCAFA5EC197C82646EAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Debug/VoicemeeterRemote.dll
- Size 156KB
- SHA256 5d85a8e00c714a707a65671936fb49611f4e7751a9065c618804ed5ca47872cb
- MD5 79b4ef6b17d0a8bb825437773c1d8e3f
- SHA1 255fbeb8ad45faad93afeac2afa2cb7e7d78d079
- SHA512 0c76b45b3c311f34de0087755d63e7966edf24ad77360897475854ff66421ce55e93f35a78ea10f15cce8ccc505618d12dd6114eabc89b73a1e468f5b16799f9
- SSDEEP 3072:+cvA+X1yaikOLqMvbJl1rvVygoP5UG7GjSVX:PYH1rtyrQjS5
- TLSH
  T1E6F3AF1376D240F6D5813EBD14E7373BEF3AAA5648668E438B98DD521C31352BB2620F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18 behavioral19
- Target
  Debug/VoicemeeterRemote64.dll
- Size 188KB
- SHA256 6c108f99c955ec963702dba37739d70c31c9ce4d77758b312c0233a1f435f4fb
- MD5 b16e2603eeee1099dfe97ecf987a1319
- SHA1 a4229d70f8471d2bf7df79c5d7b426aa0bb60b94
- SHA512 3c27ae44a7d9bd88c169721a963924901abecf30537582e44f9610054e19bb8cb6bed18fadf40d71391af84d327227ba9dac2785650dd4b664eef18659fee839
- SSDEEP 3072:aR8mc+AKYjdhTzhTq4UeT/AS5IGFM4W1CgmgReNA9KHVL:aRVXA/zhTWeT/AS5L6tTKAEHx
- TLSH
  T190149D8A329010FAE85B9238C9E76656FB73B45313755BCF166483761F173E22A3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  Debug/hand.txt
- Size 26B
- SHA256 aae4720fb818e25b0ae7bcd1bd3761730ed9c67a308b416805897ee13aae1733
- MD5 72dae589b0cd2214ff2a78d981b02427
- SHA1 89fffc23e5d5b13b5cdaec82ba442802264382c7
- SHA512 22169d8657d9c333ce9c33ab55e3e7b839e602c0b7f76b87791267003df2b40a758de2868bc2d8485c35a5a20b14510ecf62837743914c64fee5e3be7989dd25
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral22 behavioral23
- Target
  Debug/siledr.bmp
- Size 1KB
- SHA256 bae61b36c730e5d091ee74db10d530404b0399784a2b97d49cdd5dacfeaf24d8
- MD5 6428af1cb7c2f936153aa7a0650f76a6
- SHA1 bd5b24d5e04459afdb02b508da1e724604e47158
- SHA512 f6010b587ab6d71efb5599d81b5d2297c33d79da5a3cd32b39551eebbb19d9c1ebadac603c1aaa9a740579dd99871875e698ef8cdcbe166d8dad65747c872621
- TLSH
  T1F42105D2B77CD71BCDC150B1D614D3365555B50EC00794B3D638695CE48D34847472F4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  Debug/siledr.png
- Size 256B
- SHA256 5ce19c025eb7e6dbab9566f9b53d4470afe0120f1ae1014b5a7f42b92dbbf5bf
- MD5 f0a15afc62b0669cbd33f435e6c3d46b
- SHA1 349ea4ae02c74d0c3fbc7bed62a830838fa7661d
- SHA512 c10d550f3c67667c320c2eb1130234c782243c48da8f554b5b921facba7e632350666ba03ed1f659435d4e3d6eefdd55fbf167251034000bca7de3c8767dd6f6
- TLSH
  T160D02B854B83ADCCCBC8003F36660420D057127B159880497FE8C21185AA95C4241712
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral26 behavioral27

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27