General
- Target VoicemodProv1.2.6.8.x64.ins.taiwebs.com.rar
- Size 42.5MB
- Sample261107-w5nxtazz5q
- SHA256 ebcaf56dfc29f499ba5aa3bb8659e16127e96fa9ea51950ecb042498038672b6
- MD5 1e26e68884030491880f4224568662c2
- SHA1 29f090ad6623086cd7321567aae425bdde668532
- SHA512 dcd40b5e4bbc9866385d0952b3836279b5e07b118dc955dd544a42cf98a7a029c49d995a055fcd6d003a26af9bf10ca1ff93fcf0108b20581d02e70d0c12442d
- SSDEEP 786432:SfNeoyjaUZtWTpM5a+DBF8pZVJYoudREPRsJVRtzxgZTGpRbjr4Ux7MqrMqQ:SFX+BEpTZNudR7V7xgZT+RbvnMUI
- TLSH T107A733823F8903CD3C3CDCB56296BC1B18D94E1D4946A6BEA160FC7164E2DEEE6493C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VoicemodProv1.2.6.8.x64.ins.taiwebs.com.rar
Resource
win10v2004-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
VoicemodProv1.2.6.8.x64.ins.taiwebs.com.rar
Resource
win11ltsc2024-20260911-en
26 signatures
900 seconds
Malware Config
Targets
-
- Target VoicemodProv1.2.6.8.x64.ins.taiwebs.com.rar
- Size 42.5MB
- SHA256 ebcaf56dfc29f499ba5aa3bb8659e16127e96fa9ea51950ecb042498038672b6
- MD5 1e26e68884030491880f4224568662c2
- SHA1 29f090ad6623086cd7321567aae425bdde668532
- SHA512 dcd40b5e4bbc9866385d0952b3836279b5e07b118dc955dd544a42cf98a7a029c49d995a055fcd6d003a26af9bf10ca1ff93fcf0108b20581d02e70d0c12442d
- SSDEEP 786432:SfNeoyjaUZtWTpM5a+DBF8pZVJYoudREPRsJVRtzxgZTGpRbjr4Ux7MqrMqQ:SFX+BEpTZNudR7V7xgZT+RbvnMUI
- TLSH T107A733823F8903CD3C3CDCB56296BC1B18D94E1D4946A6BEA160FC7164E2DEEE6493C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1