eaf5410e77946f3a76388270112bfc72925dc9d4c305b891ba600b583bc8b3b8

General

Target
Voicebox_0.5.0_x64-setup.exe
Size 516.8MB
Sample261029-2cndgattgx
SHA256 eaf5410e77946f3a76388270112bfc72925dc9d4c305b891ba600b583bc8b3b8
MD5 66680d38ed1ea65b2014e9f8c1f30019
SHA1 a850fc042cf55a034685da27d51defef8d60db87
SHA512 b7ddf40164cbeeda5bedbe55e10eb325cbfbaaa05abd7317cf3b63f4be08c59ff8ac4d9037f7b2e08daa50c7668efb2251eb600cd7daa8e7a4e0d8c14e9dfcaa
SSDEEP 12582912:34ZE+MUCqZ8aBoHTs6XTm4Sw3b4TwekYHAKq:33J8XBoHTsQTm4t4TkKq
TLSH
T154493338BB63AD70EB684C32828571BDE5900F9E9147B69F7954320DD4478B6822FEC7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Voicebox_0.5.0_x64-setup.exe
- Size 516.8MB
- SHA256 eaf5410e77946f3a76388270112bfc72925dc9d4c305b891ba600b583bc8b3b8
- MD5 66680d38ed1ea65b2014e9f8c1f30019
- SHA1 a850fc042cf55a034685da27d51defef8d60db87
- SHA512 b7ddf40164cbeeda5bedbe55e10eb325cbfbaaa05abd7317cf3b63f4be08c59ff8ac4d9037f7b2e08daa50c7668efb2251eb600cd7daa8e7a4e0d8c14e9dfcaa
- SSDEEP 12582912:34ZE+MUCqZ8aBoHTs6XTm4Sw3b4TwekYHAKq:33J8XBoHTsQTm4t4TkKq
- TLSH
  T154493338BB63AD70EB684C32828571BDE5900F9E9147B69F7954320DD4478B6822FEC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  voicebox-mcp.exe
- Size 20.5MB
- SHA256 3e134aa8ffb74cce37ff54c56d7c2022e8c61c5683a74d1764cbb3718ecfbf9f
- MD5 0e38e1ca5554cbc4a98e1cc5217ee79d
- SHA1 a03509db66e471ace82c4c5f0d9411d28a761943
- SHA512 f7e3575db1fcdb748668f3e7c18ff020a3db4d43745d0ce154fb8eeda9d1996aa7dc3dce9dc42dde1496c51f321ee2b9d39c3bded74a41d53c2c5227ffa3d92c
- SSDEEP 393216:q6mdOzLNAwtS5LIQjuC6hHTodRGkXNaxIUNOWUACsQdgi/oV:q6LGwMh6Cs0LhXNaxZNOUQ+i/
- TLSH
  T1B92733E56A4141E9EEF7E238C6336218935138C7173AC6AB07D199E27D237F01A39673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral2
- Target
  voicebox-server.exe
- Size 489.8MB
- SHA256 574d3b21d616d50843bbe9726f6afbd616e117d99d8ace7b521f57dd537836ee
- MD5 c16a7fd65630ae9286aa49430344a4ff
- SHA1 4a53b4f5861b511ddf25ef9374ad93e980088b9c
- SHA512 d9e6b7e06d092a1ef4a0d2bf096dfb9f6e0ca13aab054cf24cc109366318156251361b2941d8aa145ebfe0e166afd50aeb9c4c7d3cc106960a3523a8e02d5fcf
- SSDEEP 12582912:2EcNxBjSMw2jTULzJfb0YDwq2U0QP7JH1dw5:2ESxJSMNUBrD0U0QP7JA5
- TLSH
  T1373933CC2E031F5BF5EA2931AAF5CB384690D5CB1732453F5B689113988B6CC6A7253B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral3
- Target
  voicebox.exe
- Size 24.4MB
- SHA256 565ba6b9c1184c2253ae3b36cb733370a11a1a0ae78001dd429f4ed4ac201a2a
- MD5 c6cc02642d8b5ab41d2c62a956b6275a
- SHA1 85194c72baf6c70a86620781911651e846c64477
- SHA512 bb3ba95a6e66aea0bd7add6c111df0ad2310c37737ea4aecfdbe8c67340f0cbe4c02d7cb664e37b9bcee60830e4d8040f7edf8ff24c7b8cb5c7a1de0215399ac
- SSDEEP 196608:3gNyszeMVS103StBWFSGPNuV5sN17xGwPsE7zKkJzzLwSkFBMJAur73:4zeMVS103StBWFSUuV5FdczI5qJAw
- TLSH
  T107472B21BA5B996CE05BC4B483478A760A7170DB0B35B9BF44C492392F6DBF42F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

2

T1082

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4