928fe2bb27971d03a37729a6c7ae30d29e112abf0cab5ada9247013bc6a048e4

Sharing

Copy URL Twitter E-mail

General

Target
SoundBoard-windows.zip
Size 17.6MB
Sample261029-xj4a2scb69
SHA256 928fe2bb27971d03a37729a6c7ae30d29e112abf0cab5ada9247013bc6a048e4
MD5 38e7987fcc7d2ad1938e9928a6647dc1
SHA1 ed8671db2dbdd7692f845af2292446caa1ed6977
SHA512 93faea69cf2b4972c8cfe7eb8f3e2b6e7a521bb5933de48cc5d42793b01a3e59f05e96fccc0a84c386c73947a868737d8320fff5bc42b133e853296a99d6185d
SSDEEP 393216:5LG3rsxYeFt/v98Wg3zTG2IZgloBZcA75uOP++1KeBSJSQS2A3JKDfT:56rsxYeFdV89zTGSoZc1O1YeBSJSQS2D
TLSH
T122173376E84F5CCCD06AD53425502F2265046CB528CABB8D29F50BCCA8B34DAFB5BD1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution pyinstaller

Malware Config

Targets

- Target
  SoundBoard/SoundBoard.exe
- Size 1.8MB
- SHA256 ec6c1dc170d9019b96508cb15c3e4b77d5f799110e1a74bfc70bc0c3bbb0f15b
- MD5 5517b0bed5d7e99bbd801ee17cd76721
- SHA1 6cdec451765b3a632b1f04db687110aa1db91b7c
- SHA512 e6e15abe115d0d819089e8301e02c907c826d4c51c10177f0f401702fdc0021bf6b6dca3a073126ece4a0396c59f2b2de0cb0e9f98c6b15da6ee3fb1da1c8f3a
- SSDEEP 24576:dLXm5I0Y9S6eZiVsS9L+xUS4DJ94OnZ+DlwUTaFeOcHBA9PBCBk7xlc83iia3:NXNM6sjS9H34OnZ+DlzOcymoYui
- TLSH
  T198851254B3D518F6F9B3963DC9A38605D6727C210734C6CF03E49A296F336E0693ABA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SoundBoard/_internal/SDL2.dll
- Size 2.4MB
- SHA256 520d0459b91efa32fbccf9027a9ca1fc5aae657e679ce8e90f179f9cf5afd279
- MD5 83c5ff24eae3b9038d74ad91dc884e32
- SHA1 81bf9f8109d73604768bf5310f1f70af62b72e43
- SHA512 38ff01891ad5093d0e4f222c5ab703a540514271bf3b94fb65f910193262af722adb9d4f4d2bd6a54c090a7d631d8c98497b7d78bd21359fdea756ff3ac63689
- SSDEEP 49152:7Vj3jF2sAlo/43FCPLQ+Ebh8NsB+f94OKLvci5R77CuiY:RrjFiOmC/65TowxCui
- TLSH
  T1B9C52A0AB3F6179CF6F78E749676A7225832FC298910DAAE2150953D0C31F908975F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  SoundBoard/_internal/SDL2_image.dll
- Size 122KB
- SHA256 1e364af75fee0c83506fbdfd4d5b0e386c4e9c6a33ddbddac61ddb131e360194
- MD5 b8d249a5e394b4e6a954c557af1b80e6
- SHA1 b03bb9d09447114a018110bfb91d56ef8d5ec3bb
- SHA512 2f2e248c3963711f1a9f5d8baea5b8527d1df1748cd7e33bf898a380ae748f7a65629438711ff9a5343e64762ec0b5dc478cdf19fbf7111dac9d11a8427e0007
- SSDEEP 3072:6bsejIuO504fzsOM05Nmy7iGpJ7SvFisgf:6bmX0qQOhmyPs
- TLSH
  T182C34A17F2E3A0FCC617D0B4A297B637F43138551630BEBE1BA09A345E61E207B9D916
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SoundBoard/_internal/SDL2_mixer.dll
- Size 285KB
- SHA256 2a0fc5e9f72c2eaec3240cb82b7594a58ccda609485981f256b94d0a4dd8d6f8
- MD5 201aa86dc9349396b83eed4c15abe764
- SHA1 1a239c479e275aa7be93c5372b2d35e98d8d8cec
- SHA512 bb2cd185d1d936ceca3cc20372c98a1b1542288ad5523ff8b823fb5e842205656ec2f615f076929c69987c7468245a452238b509d37109c9bec26be5f638f3b7
- SSDEEP 3072:uHT3KS12sljkvy5jXabgwdIFwix1Cvmm1xXLLPAgx+3BfZrzJ9qYdt2mTdIssFor:E3Kdy5eb+wix1Cv/7MBJJ95IssFo2p
- TLSH
  T199544B4BF2A365ECC127D03456BAE737B8B1B4A002217CBE5744DB316E12DA0A72DF65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  SoundBoard/_internal/SDL2_ttf.dll
- Size 1.5MB
- SHA256 fcdfabdfce868eb33f7514025ff59c1bb6c418f1bcd6ace2300a9cd4053e1d63
- MD5 f187dfdccc102436e27704dc572a2c16
- SHA1 be4d499e66b8c4eb92480e4f520ccd8eaaa39b04
- SHA512 75002d96153dfd2bfdd6291f842fb553695ef3997012dae0b9a537c95c3f3a83b844a8d1162faefcddf9e1807f3db23b1a10c2789c95dd5f6fad2286bae91afb
- SSDEEP 24576:jS8/9uHym3+c6zXD75JqzkiTPxk6saGjhn7+DNvY1vDe9tnYP05pi8ZpFUcjt:n/9ub3+c6zXDrqzkZ1vjhiDNvY98W2UQ
- TLSH
  T157756C96E2A394FCC22FC170429BD773F531B82000256DBF99A4DE70AE11ED06B5DB69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  SoundBoard/_internal/VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH
  T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  SoundBoard/_internal/VCRUNTIME140_1.dll
- Size 48KB
- SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
- MD5 c0c0b4c611561f94798b62eb43097722
- SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
- SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
- SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
- TLSH
  T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  SoundBoard/_internal/_bz2.pyd
- Size 84KB
- SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
- MD5 2be172c3086efe56c7e1d3279142295a
- SHA1 910e0d7ec11d1efda15d03ef826423834aa59fe3
- SHA512 37f84d9e6d766d8a97ccf0bd3c1a2a07f528cf45290762ef1f45e603cb513f43befec046693cf2e029366cca1682cd2753e54c53431773aba63c840bafcbf369
- SSDEEP 1536:5Qioz7CmAZG1OwJYrmbdmmv0KV06G68u+SSnrO+pIWCVeytH/9vfIZRE2:dozW2vJYanvEd3rlpIWCVWZb
- TLSH
  T184839E82F36857F6F49B91B986810797F770BA55071093BFF288C2992F03B816E5C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  SoundBoard/_internal/_decimal.pyd
- Size 255KB
- SHA256 aeacfead2befcc0768063a037bb64bd32109ae09cb144e5f571b04dd7965db9d
- MD5 240a03069d6968741b703d026337ad2c
- SHA1 42e6298c697e48d062db8835bafb976ef76b1f73
- SHA512 60b99cd5f1c66514fcd674f3400dabe84f4cff55a0d5ff5959879d226f3dbe85d325630a4a5583e54e8af313216fb3288d9a466d285973078675677dd6470117
- SSDEEP 6144:MsO6Ms4BvOcJ3TXFIZK1qGh9qWM53pLW1A8A/ctJuHI:4BvOcJ3BIZ/Gk6A/kJuH
- TLSH
  T105446B56A2490DA4EE738074889BDA57FBB278960320D78F43B48A973F577A3137D348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  SoundBoard/_internal/_hashlib.pyd
- Size 67KB
- SHA256 03d233dbace599168eaffec823de6ed7beec8c2a4ebfe9b8a3d8e042a59af3ba
- MD5 72b2f8cdf8d6b1dbbdd4e0c0bacf849e
- SHA1 54d10c68abecefa52f866bd13779544616c6b286
- SHA512 827bd7f6aaad7184b3bce810d027055e15818208c8b167ef467bfb21d83103ff24f6d90fe0a500297a93d66d5cddd41eb1cb632f124171b042506a417d5eb15c
- SSDEEP 1536:gksa/wmb96DB9qWptC8SBIWOIuytH/9SfIW44z4r:gHH9qWptClBIWOIBW4IQ
- TLSH
  T1B3639E0AB6944194D9A78175C9A39F53F9F1F28217206BEF4268C0CD2F233C3A77A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  SoundBoard/_internal/_lzma.pyd
- Size 157KB
- SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
- MD5 7c25a079b992919cc97221955dac050c
- SHA1 d12d4e0f36bad9c578dcb69436fc2a7505feb316
- SHA512 ac7e3a3c7b8f766a0e0811718a048f0f8a4340374023fcfc7df0454e030521cd52314c23e80de118f24755046d77bac17d5abee634e7e5fe950b97f53bf5a64d
- SSDEEP 3072:tfXToXxWCKqZGOPenZCIlznfF9mNoxe6FK0GIHMJpIWZ1iW4I+:troXxSBOMvNYOxzxGIHm
- TLSH
  T10CF34B96B394F0D5F7328C38D6628F53E7F5785A0320929A01CC976D2B1FB759A2A313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  SoundBoard/_internal/_queue.pyd
- Size 32KB
- SHA256 48e76e0ad63f6932b4a77b5819f41c1e7595636ca8d9e824f0943a14b8bb5035
- MD5 6ffc75670dfed859cc7ca266bcc89816
- SHA1 5a39c3fd8fb398234611b91a5da260547442da52
- SHA512 d26d74232dce6c6e57c92a0cfae605bbef7036dd848a04ca8b267aeee1aa12b1b06813746466ce186c363b3c89034424ee64681399b8d00f4d4e997abfef475b
- SSDEEP 768:eVzlP6rT1wyzklIWQUFOytxJEKrLy2Ip44Cxf1mljr8VMSU:eTST1lzklIWQU4ytH/9pfI38VMJ
- TLSH
  T164E29FCAAE644047E563CA70C2E7EE93F935B7935601879F2065C18E1F237C1E726329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  SoundBoard/_internal/_tcl_data/auto.tcl
- Size 21KB
- SHA256 08113823951619d659eb03a1f6acd2f9500e1264795219125a5df7b83cabcb99
- MD5 97efa9ebe840ea051f9706504c8bd783
- SHA1 287dea14d47977dcd8edc525fe750c836264db5c
- SHA512 ab9fc210f3bfd181cc2b93dd348415f67f763b2c7961179a88eba3f7f87e44b21a66ea4ea53715fb88784288c75b8270640f3bc6beafb0e8cc21966068a79bf2
- SSDEEP 384:UqT9XC9VZvWQjCTzsCTV7672ORgS0myvxFRTX7Xvt3wBTnbXhCUquyvz:LT9XC9VZvhjCPsCp7JlmyvTxvt3gTnbW
- TLSH
  T1EFA2B7635F9542A630B1C22B553DB9A4EF2F81B70675801D38F8912C37F1815C6BEAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral25 behavioral26
- Target
  SoundBoard/_internal/_tcl_data/clock.tcl
- Size 129KB
- SHA256 bd1c2dc481a582ef9eab301468ec7e7c3a284c57617fb2f4a8a97c22576fc762
- MD5 31bb1cacf5d128f77c0922800d3e111a
- SHA1 93262bdfa958cd64906fb8c24db59294730c5747
- SHA512 a156698c7dd9ae3dfcd2512e59a0a382027a23b52330191464f00d6efa96a22bead2d7c470f0f44b07a2dbc209a2451eb92ca91355ece75f0e23084b9e2848ca
- SSDEEP 3072:Ybn4IdhYvuCS9epsF4AzqpSMpWzP7ejMiIAEBsq6UkPAPaZqHYM8EN4LhVLAMrXl:Ybn4IB9epsF4SqpSMpWzP7ejM/NBsq6P
- TLSH
  T1AAD3A6027F19412E71B2D3364ABAE198DF2ED1B776AB805CBCAE405C3B1091446BFBD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  SoundBoard/_internal/_tcl_data/http1.0/http.tcl
- Size 9KB
- SHA256 fa7b657aa7d5bbd1bf1e3fbba8bb26fddd6ccff5805625d2e400db5ebe1f968a
- MD5 bef74a91e2e8f1252f594781427a0122
- SHA1 d5e6730f3e65e3b07482f1af9ee13605566adcb7
- SHA512 ffcc7316ae0b7758c4d01a4bcf9c8007ca4e1b5555955862c72520507e55d80da251706310be9db85ed75a6f319879b8ce20bc4b9c9433d0d7c97fda8c80e585
- SSDEEP 192:kipkqA3KsBMAikGJ4kIWPa95KTBoF7dg/8YNkgQ4id:TkqWKsB8kGJ4kIWPaDFzTd
- TLSH
  T1CD226485620691AD6DB2433ACEB990B0EE3A51B321B9416CBC5DC1643F7250E9FFCBD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  SoundBoard/_internal/_tcl_data/init.tcl
- Size 25KB
- SHA256 acacce15658dd7ce8f69b1e3d3a94770a22972a8e906eb3b61cd06f0ecd5db59
- MD5 ffe4e47b5f4f96ec33fb31d52ef0b636
- SHA1 3a625e493f8778277f65ffef1e0879fbec0e4d0d
- SHA512 dbbfd92ab6d95672f7882f3affb75f31749281c7450c29fcef58b5bdfd4f42b6d1d9f3a50ae0d3aa27e95d48918ed55cde5149751f892538bdd2dc39c618927e
- SSDEEP 768:+XrgPHudKlE7BG6Xg3tMo846ofRRECL9QDjr5v7hzx/i:igGdKlK4Ao846offLmNhNi
- TLSH
  T104C2A8112388917932B3533686B5E598EE7EC1F706A941BCBCCC825C777150A4AFDBD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32