Overview

overview

7

Static

static

3

X-LAME-ACM...up.exe

windows10-2004-x64

7

X-LAME-ACM...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$SYSDIR/lameACM.dll

windows10-2004-x64

3

$SYSDIR/lameACM.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    X-LAME-ACM-Codec_Setup.exe
  • Size 503KB
  • Sample261104-vcan2sbx2x
  • SHA256 be9e1d83848eacefff52ceaf6670b4ba7c5e678ced29e91a2766445b6074a42c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      X-LAME-ACM-Codec_Setup.exe
    • Size 503KB
    • SHA256 be9e1d83848eacefff52ceaf6670b4ba7c5e678ced29e91a2766445b6074a42c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 7KB
    • SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $SYSDIR/lameACM.acm
    • Size 738KB
    • SHA256 3aec31569852ab3bc462831084295b3c3b9489acf6c3c02647b8996e1e2a3199
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks