09f96286fedee9cb039f2200c1db4e075470e08a2db34648ffb94d6952ad5042

General

Target
Ablaze Audio Screamer v1 0 5 WiN.zip
Size 6.8MB
Sample261107-14s8csfx6y
SHA256 09f96286fedee9cb039f2200c1db4e075470e08a2db34648ffb94d6952ad5042
MD5 08e9d914c4451bcb2c6d2e1513653567
SHA1 048f206a1cc39e1d778ce27c84d6134ebad1b34e
SHA512 f6b49046c8884dd4a1ac4901e305209bef19d0169eec81122d5140634f2977f2c5417e20eefbbe9dcd4934b421535b812b2512b2a03aa3b2d67b686740058621
SSDEEP 98304:5wBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzx0wBOBfKt5yLFxNTZB7ktTq8K+P:5w/tyd3w++lz0by0w/tyd3w++lz0byV
TLSH
T12E76234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Ablaze Audio Screamer v1 0 5 WiN.zip
- Size 6.8MB
- SHA256 09f96286fedee9cb039f2200c1db4e075470e08a2db34648ffb94d6952ad5042
- MD5 08e9d914c4451bcb2c6d2e1513653567
- SHA1 048f206a1cc39e1d778ce27c84d6134ebad1b34e
- SHA512 f6b49046c8884dd4a1ac4901e305209bef19d0169eec81122d5140634f2977f2c5417e20eefbbe9dcd4934b421535b812b2512b2a03aa3b2d67b686740058621
- SSDEEP 98304:5wBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzx0wBOBfKt5yLFxNTZB7ktTq8K+P:5w/tyd3w++lz0by0w/tyd3w++lz0byV
- TLSH
  T12E76234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  .Store
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH
  T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery persistence privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral3 behavioral4
- Target
  Ablaze Audio Screamer v1 0 5 WiN.exe
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH
  T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery persistence privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral5 behavioral6