General

  • Target
    SoundPad.4.0.9.7z
  • Size 7.7MB
  • Sample261113-e14n2af16p
  • SHA256 a45087763480221f92d9ffff8cf331759f5a58b66fe85c576f93953e70a943bf
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      SoundPad.4.0.9.7z
    • Size 7.7MB
    • SHA256 a45087763480221f92d9ffff8cf331759f5a58b66fe85c576f93953e70a943bf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      SoundPad.4.0.9/Soundpad.exe
    • Size 11.6MB
    • SHA256 17e162eae3204595e6e0806599fbb9e12f721aea16597307dca0ee9c25204d39
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      SoundPad.4.0.9/SoundpadService.exe
    • Size 552KB
    • SHA256 a5fbe4ff740558dd6872ca9992d6d25ce8d94b79acc3665733bb181ff9364972
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SoundPad.4.0.9/TTS.dll
    • Size 156KB
    • SHA256 7ba8f0713edad79c587c8385556a0d7605070ab187c0cab2ba116a88e5950178
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SoundPad.4.0.9/UniteFx.dll
    • Size 581KB
    • SHA256 16b9bcf7be1fc7829299229323efab0e9c9594c626eab6ff0bff8eb7495ccf60
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SoundPad.4.0.9/unins000.exe
    • Size 3.1MB
    • SHA256 5993a5b1852bee40acc1ae2a3c5d365c7f140e1cecaf81664eed085f7ed70046
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks