Overview

overview

4

Static

static

3

setup.exe

macos-10.15-amd64

4

$PLUGINSDI...er.dll

macos-10.15-amd64

1

$PLUGINSDI...LL.dll

macos-10.15-amd64

4

$PLUGINSDI...LL.dll

macos-10.15-amd64

4

$PLUGINSDI...LS.dll

macos-10.15-amd64

1

$PLUGINSDI...64.exe

macos-10.15-amd64

$PLUGINSDI...64.exe

macos-10.15-amd64

1

$PLUGINSDI...64.sys

macos-10.15-amd64

4

$PLUGINSDI...64.exe

macos-10.15-amd64

4

$PLUGINSDI...64.exe

macos-10.15-amd64

4

$PLUGINSDI...2k.sys

macos-10.15-amd64

1

$PLUGINSDI...xp.sys

macos-10.15-amd64

1

$PLUGINSDI...2k.sys

macos-10.15-amd64

1

$PLUGINSDI...px.dll

macos-10.15-amd64

4

$PLUGINSDI...fs.dll

macos-10.15-amd64

4

$PLUGINSDI...rv.dll

macos-10.15-amd64

4

$PLUGINSDI...20.sys

macos-10.15-amd64

1

$PLUGINSDI...er.sys

macos-10.15-amd64

1

$PLUGINSDI...st.exe

macos-10.15-amd64

1

$PLUGINSDI...as.dll

macos-10.15-amd64

4

$PLUGINSDI...up.exe

macos-10.15-amd64

1

$PLUGINSDI...fs.dll

macos-10.15-amd64

4

$PLUGINSDI...ve.dll

macos-10.15-amd64

1

Plugins/Re...is.dll

macos-10.15-amd64

4

Plugins/dsp_sps.dll

macos-10.15-amd64

1

Plugins/en...ac.dll

macos-10.15-amd64

4

Plugins/enc_flac.dll

macos-10.15-amd64

1

Plugins/enc_lame.dll

macos-10.15-amd64

1

Plugins/en...is.dll

macos-10.15-amd64

Plugins/enc_wav.dll

macos-10.15-amd64

1

Plugins/enc_wma.dll

macos-10.15-amd64

4

Plugins/fr...pe.dll

macos-10.15-amd64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    12.3MB

  • Sample

    240704-rc66gaxfnp

  • MD5

    76954d7dbf005d6db5e38d64f25a8c20

  • SHA1

    054ad10803aa95f512a2c56293be7d1a287696f7

  • SHA256

    e9e2eb114941f9f9157b4fb139e5588665fb89b709df82d4a8346ae66ccf03e1

  • SHA512

    49e77880255470096830059bda1baf1d955f7f33659118995495aa6a6e090e32c798a8568504f213a90c4d3c3c81db41c22c54359d0689adb7b233c96c4fff4a

  • SSDEEP

    196608:UNxQRuR6vMEQO4voQ0HrBGQIPvunb5VVAc6ysyl/8gl32tVT2rZ7MibIZDey1Iju:+QuRAJrlXbPVcysyl/8osIrZVil71

Score
4/10
evasionmacos

Malware Config

Targets

    • Target

      setup.exe

    • Size

      12.3MB

    • MD5

      76954d7dbf005d6db5e38d64f25a8c20

    • SHA1

      054ad10803aa95f512a2c56293be7d1a287696f7

    • SHA256

      e9e2eb114941f9f9157b4fb139e5588665fb89b709df82d4a8346ae66ccf03e1

    • SHA512

      49e77880255470096830059bda1baf1d955f7f33659118995495aa6a6e090e32c798a8568504f213a90c4d3c3c81db41c22c54359d0689adb7b233c96c4fff4a

    • SSDEEP

      196608:UNxQRuR6vMEQO4voQ0HrBGQIPvunb5VVAc6ysyl/8gl32tVT2rZ7MibIZDey1Iju:+QuRAJrlXbPVcysyl/8osIrZVil71

    Score
    4/10
    evasion
    behavioral1

    • Target

      $PLUGINSDIR/Dialer.dll

    • Size

      3KB

    • MD5

      61b40a89c8b94ad6355262e118c8420c

    • SHA1

      6b8fcae8baf661e115763cec2d69db7a6b767030

    • SHA256

      4e63d7b877a7e8889b6cd7bebc1dec767bff0f5bd41d8936d4a5b29d934ea4c5

    • SHA512

      77f7e3cdd2f2ec3a2cf619afec6438e0966a2f0d43539d62e9cd8e2acce56322e2dfa2f747937c3d62346640fb64e1176b52a329027a5a0569e0f05ceeb7a126

    Score
    1/10
    behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      4KB

    • MD5

      1be3fc5971da6f9b86843d0763912fb6

    • SHA1

      e921bfa5b330102630420007a63fde0c439f0cdc

    • SHA256

      89ed50600e7046184f80b2a20b5299f35a0439fab1ad1f9f5fc55606955b6186

    • SHA512

      99e5a4e888c6cbd2b67464162516aec5a564447fec389012acd8873aa6312020bfe5f0d68e83f54a7320355c5f828f7769f666d5cfd12f2ceed02a6d5b66dc4d

    Score
    4/10
    evasion
    behavioral3

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      a1cd3f159ef78d9ace162f067b544fd9

    • SHA1

      72671fdf4bfeeb99b392685bf01081b4a0b3ae66

    • SHA256

      47b9e251c9c90f43e3524965aecc07bd53c8e09c5b9f9862b44c306667e2b0b6

    • SHA512

      ccc70166c7d7746cd42cd0cec322b2adf4a478ff67c35d465f0f0f5b2b369c996a95557b678c09cb21b8311d8a91eed4196ddc218ea7d510f81464669b911362

    • SSDEEP

      48:apTVWFeApYx2lxaKe3yfeEIWCGWNpBWLGGrx3pMt4z8mtJ7HofYZVSLa:RFG0xaKkyfjIWTW7BYrhSbmtJ7/V

    Score
    4/10
    evasion
    behavioral4

    • Target

      $PLUGINSDIR/PrimoRedist/PXSDKPLS.DLL

    • Size

      194KB

    • MD5

      5f44f529e880666bdf1c1425f86223b5

    • SHA1

      709a7ffb6cf2eeeb557472ec2022195cb8a77017

    • SHA256

      08ea26310d842c69219491bc4f4e83fdbcbbfc81b7ec19b0ddf1503cfa971259

    • SHA512

      97f8aeb9a3a29a9783ef678e7bf79a055a24c12eca546486f9294a5889942f1495b213e0b13a73596223a6e62066660bb181f257ba58317a58b4ed7e6254a2c9

    • SSDEEP

      3072:6Gi4tE2v58rgZVhANBUf3thKFzcOdmE1imdzkIeJo3ltEe6Hl5V:M4KgPh8BUvtUFzcBE1iCS5V

    Score
    1/10
    behavioral5

    • Target

      $PLUGINSDIR/PrimoRedist/PxCpyA64.exe

    • Size

      66KB

    • MD5

      08d51e037f487f9ca9fd0b0388f4c15a

    • SHA1

      67188d670673a5e9185616923d1b1a8aa22ad8bc

    • SHA256

      fbaa0fd8dae9bde80bfe497dca28c6fc9174c14b12ab93e3942fffa04e3db3cf

    • SHA512

      a40bb551fa8a705a5ac2bdc02a17ebba1c6c70f9ffce38c668b07bc538dc4461658b0bf220e26aa1833f624009f417f05c44aa0ff81af59a5ada4f97dd99013d

    • SSDEEP

      1536:nBueoX5ZxIfZu3B9M8oLb8tg+xoEoXJ9hDkGO0mIOT:nBueo5PBWLh+xoxXJ9hwGKT

    Score
    1/10
    behavioral6

    • Target

      $PLUGINSDIR/PrimoRedist/PxCpyI64.exe

    • Size

      120KB

    • MD5

      50a76d2d5e4be94556326c4bf748c758

    • SHA1

      dd2188e2fde11b75fa73003bf7502515182d4c88

    • SHA256

      1c0e698d620f3703f940baccbfecd883b5f5e46d2436f0c17cb0c6c99155a4ec

    • SHA512

      f60decd858d2dce3d7d57f53e7a2f7f1090d2d5fffbb1abcfd37c67718ecc2c92bfd45a208a2ec93efa5e8fa9c33f29e84bc52891998195dda237d6f1ea971a0

    • SSDEEP

      1536:e8n6dVhjfCAm1tHcA3ep2Y3Bfzr6jsi6bJKRTV81Pt+yJBiK2Mb0mIc:4O/OQY3BfzHKRQF+yJBiK2MR

    Score
    1/10
    behavioral7

    • Target

      $PLUGINSDIR/PrimoRedist/PxHlpa64.sys

    • Size

      54KB

    • MD5

      87b04878a6d59d6c79251dc960c674c1

    • SHA1

      cc34993ed2b375bbab87058f79097eeacf381aa5

    • SHA256

      3eb8db0624e646f0a65d0381408d35cf9fdc5abfc30df6431f4070a8eb68447c

    • SHA512

      5c034f27ffd5d26faa2b6db9a6e97b261a0997400901e846880fc2eadda4ffc3aaf9885b90997ebeac8902b10f2e0f3e38b41e6f476b7c45f57ac5f9e59312b8

    • SSDEEP

      1536:xRLN27cqtMyAqEE36AZVKacKjoW3ZQLDDHphguIEFnYsli/LLjkM0mI1r:bp2C1+6AsW3ODLpNImYslcbkrr

    Score
    4/10
    evasion
    behavioral8

    • Target

      $PLUGINSDIR/PrimoRedist/PxInsA64.exe

    • Size

      66KB

    • MD5

      6d3630b7f27b3643fde05d1088f84f2f

    • SHA1

      be742991eac9c6c8b0674c4be1fbddd10f7b9d37

    • SHA256

      573d87feddc84eba6b3450bf00ad7ddf498ca99cc8809359fa9bb60c7ac76f68

    • SHA512

      48a218a270357d3513596d92410bc865ef51c3bda6bfe5f53251e2ca3a5ff6edb31d722ee50d6b85d4e3bc7094b956180bed88575eac226236b55d81e0528ec1

    • SSDEEP

      1536:adA8lmCJH8IeVf1jB8QgWHLhmAe6hnMJ0mIE:adAOJcnBZHLhmAe6hnMv

    Score
    4/10
    evasion
    behavioral9

    • Target

      $PLUGINSDIR/PrimoRedist/PxInsI64.exe

    • Size

      123KB

    • MD5

      94f95be2a44c8291132d314582f141f8

    • SHA1

      d5bb1a7519221964497560b579bb5c1f1ab30aef

    • SHA256

      df83d7cb34c59e1406fb5bf1edd083f8bca649db97979c6debc3d3ab0e36b980

    • SHA512

      4a726c8431d9722f1213659e3cf150cda5a0850bb874f0f7c4c280f6805a122d14882531e06b11cbcd36d8a9a741a67f12b46dd02933d00c65ad1e255e1ca1dc

    • SSDEEP

      1536:NdSxj9fQCZDQhkC0D0o8dzaMmwNU94mep7g8C5aqdio2yzy2ko0mIx:NafQjOCZwNwa41AYqdixyzQT

    Score
    4/10
    evasion
    behavioral10

    • Target

      $PLUGINSDIR/PrimoRedist/cdr4_2k.sys

    • Size

      8KB

    • MD5

      48daee926106c4427cd56da8f69aca7d

    • SHA1

      347913608fdffbd343fe4992eb29abc6fee42362

    • SHA256

      9657ce6f0a125b096e5a0c4bf989c23b96cbfbdc486cc839cf8d99eb3833a182

    • SHA512

      57052c2bc573cfc517c74c6248bc146896e27033d1a194714bee23194f41cd375e2f1e00cd0d8d68e1c2d8a1c67f9ead11f58fe1bcbc50370542e471eb476b43

    • SSDEEP

      192:yl3iyowJL/aMjGwP74MZaTR+ebMBpZgjlJMMRR6Cq:4iYJLW0aTHbmp6jrQ

    Score
    1/10
    behavioral11

    • Target

      $PLUGINSDIR/PrimoRedist/cdr4_xp.sys

    • Size

      8KB

    • MD5

      c3e76b0c05ebf7261abfb08d9e75822e

    • SHA1

      c7cadd59050c0dfbc3d17a057e5eb2b00a10aada

    • SHA256

      82e1d31d0ea694bf869ca30b5a705afbb2051e4281cccd078288874bb83be1c9

    • SHA512

      46d9ebfb7ebc35a4a1b36fb9222e1cd870194e11609b6bd17e37e9088897ee009e9db34e80e12488057627a4a95da36ece30a22065e50229b6cb6320fb039a2c

    • SSDEEP

      192:Ll3iyowJL/aMjGwP74MZaTR+ebMBpZgjlJMMRimb:BiYJLW0aTHbmp6j4mb

    Score
    1/10
    behavioral12

    • Target

      $PLUGINSDIR/PrimoRedist/cdralw2k.sys

    • Size

      8KB

    • MD5

      17590dfe29e02842a6e3a463e443d1b9

    • SHA1

      2a50ca7394807e503da3919a98f27c1f8b068aa6

    • SHA256

      c43c35eadf9c87419416abefe4270024d71355d9626937e6215101914f93048d

    • SHA512

      a9e0716829966704be174258186d3554608f5bc7c53d11626a1ca0a7359affcf13e0c7fe896c1d3c65e9f62424d6779ed48e3515e7a93f00332f0cf0c0efa297

    • SSDEEP

      192:oW8yowJL/aMjGwP74MZaTR+ebMBpZgjlJMK4:t8YJLW0aTHbmp6jV4

    Score
    1/10
    behavioral13

    • Target

      $PLUGINSDIR/PrimoRedist/px.dll

    • Size

      682KB

    • MD5

      dbb66b386c194a58e29e49d7ebbebe65

    • SHA1

      78dced6be8870938a2c8fefb1b5b884159e5fb21

    • SHA256

      309a40e28271eee4e41cdb5cd1f83c0087702d42f9fc3a87d62f9f30dd53d68d

    • SHA512

      6a49783c86f2bdb6cb522f0e53a6e653eccb89b1a2d0d800bfae499d304cad173f621d9dad7765a13848a1e8bc4da355d94fc1a4bbf2beb5c4d999ea79257764

    • SSDEEP

      12288:YhT+GE8INwK4VhupUoh/o/mKg8+ncSFL1T5iU2DF6mHmzazrr32ceMtw/g+CB:YhSXjz8hupUotimPcSFLwjeMtw/g+CB

    Score
    4/10
    evasion
    behavioral14

    • Target

      $PLUGINSDIR/PrimoRedist/pxafs.dll

    • Size

      130KB

    • MD5

      e66569100ada3821d49be51109fa111c

    • SHA1

      da0d6e0d9073b7d384e410916ae0306e16eee23a

    • SHA256

      b7c5e5cdb6bf6fc01d1823b6aa1b0fef62f1e594886e2797a00a03809589c0f4

    • SHA512

      981128e378ff2c286ad0aa9ca0012fc72cace283b0bbe4bb21ec7429735ef0b4438a6c6ff8dd3ac11438e25af33162f320a085223d6fcc41f5a7b060d88efb8e

    • SSDEEP

      1536:+QfvGEOg5r766WHTPnqMtpdJn16oYvXfR8zVULjePWwxfFkEba89lb6Oe6FoHkPE:+Q2d2WzPqeaizVUcva89lbxefH4E

    Score
    4/10
    evasion
    behavioral15

    • Target

      $PLUGINSDIR/PrimoRedist/pxdrv.dll

    • Size

      558KB

    • MD5

      8f6f3aa814143099b431744b16845664

    • SHA1

      67f518591a1cbb954a031cc7421faa1aeb25651a

    • SHA256

      7c9449c2e774087305a28117e47fa48bbf33638144e9694f20d20fb15065ac9f

    • SHA512

      5fdd908862dcabc37a794d0f7fe134e6df9f34d0e52cc69a535c37872a4f2edb44e2448654b3832a11f41fd57be36f1ad0f863603d1f268f99c6180a3a48bcb5

    • SSDEEP

      1536:PdT7plr0Xh+r3xZMmourvvsjI9vW/dy1HW6Hfuj+aUfQe95QV88YfOr1oE0mIQ:PkQMmouQjI9v8NMi7UfQe95FOF

    Score
    4/10
    evasion
    behavioral16

    • Target

      $PLUGINSDIR/PrimoRedist/pxhelp20.sys

    • Size

      44KB

    • MD5

      e42e3433dbb4cffe8fdd91eab29aea8e

    • SHA1

      6f764c5e20eecd6f3d4154d9d89d2420dd783470

    • SHA256

      20abd8372b242fd356ac143e7eb56f93cfea4988ed1b0c4434cb64c387d7f66c

    • SHA512

      260a2104aef64fd5a276e289e1cbe37502583e94039af41a3803f1c464d78c72def4e911f14312b94c63b28b1f6792a7bd10f23db837daf5a1a9ffd478c40810

    • SSDEEP

      768:UD8M77TDwgA0BdpVVIC8X4tzQq2edfEVxAyDiypP+TsZ0I8V8/L+HbmpmF:Ux73E0/iQz12asV5VUsWI8o0mIF

    Score
    1/10
    behavioral17

    • Target

      $PLUGINSDIR/PrimoRedist/pxhelper.sys

    • Size

      38KB

    • MD5

      34c637b2ff3bdcf1d44ce3272bf33133

    • SHA1

      adc7d79f9cbe9705b26ab8c61aac60939e7ea053

    • SHA256

      5ccfbb493fce6fea34f2fac1434f9ed653017ab18fb65ec1ff23ed99013aa8ca

    • SHA512

      03e896843b156775a42006a427bb0b942497820633d7e3d37dc6b06a10e52c166da86a2f85792e9447309998b3487f73e5d5569b69f9e4bfd08c9bfa94fc84c5

    • SSDEEP

      384:qhgnakV4I2JL7POqbPBreer43znPtgMk8gXYJLW0aTHbmp6jI:OJkkx7OIBrJr4jnPtTnBL+HbmpmI

    Score
    1/10
    behavioral18

    • Target

      $PLUGINSDIR/PrimoRedist/pxhpinst.exe

    • Size

      70KB

    • MD5

      d2728a10ccd2a675638b016d47b1c254

    • SHA1

      9311a83a94d7b5694109e0e9694eada76765caa1

    • SHA256

      8ca37574a79fffe781375955362eca8ba4511593dce6672590be8c42a775f146

    • SHA512

      a6a31019f560b69935f5873fabe192b5899785544b9cf3841c1a846740edc56b3ba5f396d43d104f51acfd59faa97121f104abf7e4ac4a3fef5539cbd85a9759

    • SSDEEP

      768:CGybMX4w3YpquiJTIG5bEJTRqvHKXWDFuNaTxhcVcvfLJL+Hbmpmm:C/bdqFJTFWJTSLDgQ3ccfLJ0mIm

    Score
    1/10
    behavioral19

    • Target

      $PLUGINSDIR/PrimoRedist/pxmas.dll

    • Size

      214KB

    • MD5

      746833260d2123ebb46ff44afcb8103c

    • SHA1

      54275329dbc8caafb8a4a61198cdaa0986756ee3

    • SHA256

      6cc2fc325653f7fc8725808270792921423c7dffba4f4e5bfdf5d396f89c2d97

    • SHA512

      a2a577a39ece8b3b1407b528b17a3088179bc5eec3e1a9b14270529f82f6175d9c950da957bf6d707c968e4395eb55464e08778bb887b2871351f5655507252b

    • SSDEEP

      3072:08Vn25ZaElZMuUK1GfnNdspMfRUAist3AcEp5QhgtybXk0P:08VtElZMu54fnHshyuUbU0P

    Score
    4/10
    evasion
    behavioral20

    • Target

      $PLUGINSDIR/PrimoRedist/pxsetup.exe

    • Size

      70KB

    • MD5

      4ee24c7fd67b098431c951db7686bd19

    • SHA1

      5b14bed150ea0bf619b938ce94b9f32b02a6aadc

    • SHA256

      0f445c4b76bc309a940d5f4ba615bef1dcefbc0d160f3a8d06e0038160d9b4af

    • SHA512

      7853bcd7482b85ab362935060506a1b44779946e9428838a1c95cc54fcbf94058ed9c2101b5c4e3114ed125b88692ed694b394ff94ecc8d88c39b57bb21f08f8

    • SSDEEP

      768:hAU7HRAGh50RWvgd01Q1xBovT0/TYJ1BJ5dylihjtJaQ6GUfcY00YeCGL+Hbmpmx:hA11u+BovTcYJt57jtJjqcYLLCG0mIx

    Score
    1/10
    behavioral21

    • Target

      $PLUGINSDIR/PrimoRedist/pxsfs.dll

    • Size

      2.0MB

    • MD5

      e5ae8bd7d28eb4bf87f9c56daa6d3e3a

    • SHA1

      61b841bdc9006953d504c137d5d7d8e8602fb31b

    • SHA256

      780e084efbe74ac28d8d91dfff1e3bef97ebda3c54c7bd5c8fbbed128f21ea7b

    • SHA512

      4930e9e128f9e8b55657752b5a8b1aa82c252dbae6ed0fc5d3112e5be85f30e6381e514e668ce5eb5dba8177583151d89707410b102d4c6466424682bcbbf0ad

    • SSDEEP

      49152:gAKqkC75TGAlzA2LwytkLmImxcIqtSz3L8Zhutsgnypk16PTT7Xx+JoAwx1DipMO:gyAA4ZS0c

    Score
    4/10
    evasion
    behavioral22

    • Target

      $PLUGINSDIR/PrimoRedist/pxwave.dll

    • Size

      430KB

    • MD5

      24fa4bccc5ac82f5471abd0e3c9cb878

    • SHA1

      9d9caf552519395fc76c7b756532032686827586

    • SHA256

      a90d09923443c749266f65797176d70235854b9157a023362701c0d8477b78f3

    • SHA512

      5e05daf7eb1de0baad166758304a5450750a876d4f7a521215aad279a00dfbc34a96299389dc2f523b54a73894433ce35480f559ed04d10ccbb14b1c75111914

    • SSDEEP

      12288:oOiHxqn65BYQdnYIp1sZtgeUghgWqTX2XWayKt1:IYYxYN+mGay+1

    Score
    1/10
    behavioral23

    • Target

      Plugins/ReplayGainAnalysis.dll

    • Size

      11KB

    • MD5

      a362de744d295b2f201de2c7e2a867bf

    • SHA1

      f80d68cdf7d163c0fb8bc998f1069ca0870decd3

    • SHA256

      57fe8c3ead0d76a26b51dd1c46a54c295841b3c393adc0d6254f4fe0e433a9b8

    • SHA512

      fd0d82daef79f1de7cf7b27a2555f729bed47ce0eb3f6783c2c98aaa7d89183fa3c35762cb22d7a1b6710f2994b06f68fc27b9f8d45f5d417625d4dda5f094e0

    • SSDEEP

      192:vjuPb870XuBCL4QBRB1t1lrhT6/bwCdwegh0buWo4yVqoBOCl3XvVlD6z:6T8sC1+r/rhcwCdUh0Kp4yVqZC5fVl

    Score
    4/10
    evasion
    behavioral24

    • Target

      Plugins/dsp_sps.dll

    • Size

      40KB

    • MD5

      b870438b1a2d0a978c229d0d34852403

    • SHA1

      d9a6e782b600ac5db09afacb046922cee4fc25a1

    • SHA256

      d0538f6e9ef4964d6015d11efa5e62a1b3526a8644bb8de57d872ce973e3c681

    • SHA512

      40a2170cddb0075cbd99e72c9b3d46771c8967820da79cb188d70b89dae86274bedfcec1895bdb48289c08beef0096fea8b13d07ec1f2951d2985d9278a59568

    • SSDEEP

      768:wEoHJKCii9G+qjk3MG4BDWVPZa9ssUV4UlZK5/yXmK/8dpJQtF:wuI4jQkBDKBx4Ul4xyWKEU

    Score
    1/10
    behavioral25

    • Target

      Plugins/enc_fhgaac.dll

    • Size

      1020KB

    • MD5

      e95de51980c9936575fc3ef57a8dbaf2

    • SHA1

      2a332ecf206c0727d4fbf6e7bc39b7a02c60c6d2

    • SHA256

      4b9d0d156616cc84d01c5c6f663f5288e1fe0bd8e3061195cf5111c634dffd96

    • SHA512

      3bb415879d0eaacece26aa2db3d40e0586daf2a3546ef86bca273331abf98837351c05cafd318c351e02b66aa3c6fc135cf27709f145642abf0e1b247f62e7b6

    • SSDEEP

      24576:z88LjDSh1XfxAMAKTdisTalvC8/1plgBjYOsVAolNx2+mdxGLF1:S1XfxAPKpil88/1plWADCzGZ

    Score
    4/10
    evasion
    behavioral26

    • Target

      Plugins/enc_flac.dll

    • Size

      18KB

    • MD5

      f4417001f61d3f142927de6bd6029d41

    • SHA1

      a9967e4a6901c1d8aec69f6f2a167a36194eb257

    • SHA256

      12f4ab6dfad4c17b167996bdf0b5d58a6cdbf876d2541766a1470372f9a6a85a

    • SHA512

      95d986dc7b2f9263641d802eb54f5df18491de5bcf7c7d07134eb0c77c816ea663422bdb89bd899d77f0810196fd333bfe513b77246078b2f8d2724833a1f3fa

    • SSDEEP

      384:J5MSv+1VPwMZp0BPm5rY2vHTWy7wgAzOtMjlonTALh0DT0J:J5MS2Ll8BPm97wrOtAQuuDE

    Score
    1/10
    behavioral27

    • Target

      Plugins/enc_lame.dll

    • Size

      18KB

    • MD5

      fdd69352f386a1535fa88c7019ab3f63

    • SHA1

      efcdd42737e5ac410a99da2eab14f172c3989439

    • SHA256

      a9c494cc1b9ed82d7e6c5a745f97799137449c7767873e6d186716506ff52cd7

    • SHA512

      aa62213a8c4cd422f305f4289e939001877ae70945f524d05593d3b4073b5d2d5c2739594c75997f6709a985f7ec02b262e536b6b7b2492c9729da5f0f5f10e7

    • SSDEEP

      384:YR1b00pRm/OjA3YHWTNW/FxcriqMufgPyTR7e8l+3TOtfVlRw7tu8eZ9esjcyM:H0pRm2jA3YH+gCr74KTNjl+DOtN36t0v

    Score
    1/10
    behavioral28

    • Target

      Plugins/enc_vorbis.dll

    • Size

      1.6MB

    • MD5

      515a9b8bafffe044a44375a5723dd1cb

    • SHA1

      b1e9feef50e04b4a9351987157be89fa96e73601

    • SHA256

      8cf00ddb1c4b857ca4a289fce8a1641d2b32e1aad2ab525d4ffb62ce8ce7e025

    • SHA512

      5682370147079c0d37a0407e8e087254f91198591accdad69f66a33b3de22e4d05f1fefcc77e1264a24605afdde5fa9610335bceb6b187ac7868993eadacaf9c

    • SSDEEP

      3072:ui3KNQbqBYQvWcPvvwe+SsEElwZViFB7lI1MR0Iw04vePS6N0hBqOm6HaP4elM:uoqBYQvjAeFsnhxdR05xvpw0hBqOmP4

    Score
    1/10
    behavioral29

    • Target

      Plugins/enc_wav.dll

    • Size

      14KB

    • MD5

      04ba4c4ba0ecb1bb7937e2dcfe1d0746

    • SHA1

      4d15ed1708278ebc429135d0b0976d6cb911d7cd

    • SHA256

      1fc357b490e7b07c02adc441444a2e77b8069fe25c45ff462d45cd46d989bb4e

    • SHA512

      46650128e8c78645d8866c4182c7e4e3f7f76ff3e7665cd34658648ab573870f8ddf2f4bf1cbe2331aea7d36d38a9993604c2edd6b17134537f075788b4d5ecd

    • SSDEEP

      384:EwPcAwhPynXxKkNSDnl1RwtQO9njG6EbHjv:EwGynXxKUinvRhOdGNbr

    Score
    1/10
    behavioral30

    • Target

      Plugins/enc_wma.dll

    • Size

      19KB

    • MD5

      e541c1b6dd55aab04701c3e52551b1c8

    • SHA1

      cffe9407795c7b36ab6aab46525564916a42ba4a

    • SHA256

      1f33b9c97af987defe231dd96ce86418648ff82aa135738d6951a29119f3f62c

    • SHA512

      7f3906c0aaa7d22ebc606f2de42f8589bcd6cc0844e65589a4c46cd7494ec849c04b700f2b6351b6eea9ebc5bb13355223a6a94ff061c0a1d3bd699dbadaa1d7

    • SSDEEP

      384:piq/0MvPNPQ0/f38Ec0aD1ijP76/YAJPIFWOlnCc1qoqOFnebYsIFW+:pX/0KNPn38PpD1U76/YAGRFCcqOkvIg

    Score
    4/10
    evasion
    behavioral31

    • Target

      Plugins/freeform/wacs/freetype/freetype.wac

    • Size

      326KB

    • MD5

      b8bf42e79469e0422f1b69fe42529c63

    • SHA1

      0e1c6672b77c259fa9947ad63b0679ef118fdfe7

    • SHA256

      34829033d03e5ff36a74d50551b660487517180e1a5dd06aa95ffb3adacb9d4e

    • SHA512

      07f880a1c925c894e40cca90c40d21b2246f1f1765369082fdb33a20cf94e09116f8d7f92ba0a8afaff6dfc6c3ead399b8cb91f54b20c7f409fadabcfb832e92

    • SSDEEP

      6144:Z062nXMuwuBr19mrGKHAB1zd1bSF+i8dT5+vAMtk2KwrgAgGvgXSI0hKCOtIZ:aPZ/mg12ygLO2LgAN4i

    Score
    4/10
    evasion
    behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

15
T1564

Resource Forking

15
T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

Score
3/10

behavioral1

evasion
Score
4/10

behavioral2

Score
1/10

behavioral3

evasion
Score
4/10

behavioral4

evasion
Score
4/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

evasion
Score
4/10

behavioral9

evasion
Score
4/10

behavioral10

evasion
Score
4/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

evasion
Score
4/10

behavioral15

evasion
Score
4/10

behavioral16

evasion
Score
4/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

evasion
Score
4/10

behavioral21

Score
1/10

behavioral22

evasion
Score
4/10

behavioral23

Score
1/10

behavioral24

evasion
Score
4/10

behavioral25

Score
1/10

behavioral26

evasion
Score
4/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

evasion
Score
4/10

behavioral32

evasion
Score
4/10