General
- Target Install AmpliTube.exe
- Size 255.2MB
- Sample261027-bkfeqazzd1
- SHA256 015e68ac4edc8304fb9ee7eb6ba69168e2ce90ba8eaebf3977960a60a2209c98
- MD5 8b43bcbefc484666fd12ecf990bdf701
- SHA1 5fc55b05e95be40a6e205193b55edcb0b0aa82bd
- SHA512 8281f43e1fac4c5bfa58f3311eb8d5e16a7e5ee85730defafa4a95bf285e4820c7d0374b8339aa9cb6bf206709e9c58e97ef43ee1f0d9cdeac672cc1a69f1bb8
- SSDEEP 6291456:7AmzoHE2HcSq8HgBFjFKcq/QfrtFIg//21//jJXk:sa0cSSTJT0EtiG/mjJU
- TLSH T136D833C2CF355928976401799E6EAF30D561A5EC9C2B40036D80FBDB5877FA139A3CAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Install AmpliTube.exe
Resource
win10v2004-20260911-de
16 signatures
150 seconds
Malware Config
Targets
-
- Target Install AmpliTube.exe
- Size 255.2MB
- SHA256 015e68ac4edc8304fb9ee7eb6ba69168e2ce90ba8eaebf3977960a60a2209c98
- MD5 8b43bcbefc484666fd12ecf990bdf701
- SHA1 5fc55b05e95be40a6e205193b55edcb0b0aa82bd
- SHA512 8281f43e1fac4c5bfa58f3311eb8d5e16a7e5ee85730defafa4a95bf285e4820c7d0374b8339aa9cb6bf206709e9c58e97ef43ee1f0d9cdeac672cc1a69f1bb8
- SSDEEP 6291456:7AmzoHE2HcSq8HgBFjFKcq/QfrtFIg//21//jJXk:sa0cSSTJT0EtiG/mjJU
- TLSH T136D833C2CF355928976401799E6EAF30D561A5EC9C2B40036D80FBDB5877FA139A3CAC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory