Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
apgb2qp-kmn-win.rar
windows10-1703-x64
3KORG.Modwa...2R.nfo
windows10-1703-x64
1KORG.Modwa...47.rar
windows10-1703-x64
10RET/KORG_KeyGen.exe
windows10-1703-x64
3RET/R2R.txt
windows10-1703-x64
1Runtime.txt
windows10-1703-x64
1Setup modw....2.exe
windows10-1703-x64
8KORG.Modwa...47.rar
windows10-1703-x64
3KORG.Modwa...47.sfv
windows10-1703-x64
3General
-
Target
apgb2qp-kmn-win.rar
-
Size
14.1MB
-
Sample
221229-3b3bnsed77
-
MD5
22c6e21817a101f0cda381eba29ee536
-
SHA1
37ffaa488ac5ce6fe6f6b4460fcf177a027d98fa
-
SHA256
ba062ded9471928fb75bfb07b8fe8eee19f6e3c4bf0bc6634cc3f1778312eea1
-
SHA512
a4919d104eff2b6313503f88832596ca1682ca40a941d23b5e6c6b98cd7d93fc4bbc82655b25ccab1401d53bc35cd846afb195cbc93ff77c86be7568c8ae9d39
-
SSDEEP
393216:J12h7JXS4bIJ5KaVVcErC5CPR7scF/i3bHsHIlr3k76VieCdrZR:J127JgekbP1ji3bHTr0eCdrz
Static task
static1
Behavioral task
behavioral1
Sample
apgb2qp-kmn-win.rar
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
KORG.Modwave.Native.v1.0.2.Incl.Keygen-R2R/R2R.nfo
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
KORG.Modwave.Native.v1.0.2.Incl.Keygen-R2R/r2r11647.rar
Resource
win10-20220812-en
Behavioral task
behavioral4
Sample
RET/KORG_KeyGen.exe
Resource
win10-20220812-en
Behavioral task
behavioral5
Sample
RET/R2R.txt
Resource
win10-20220812-en
Behavioral task
behavioral6
Sample
Runtime.txt
Resource
win10-20220901-en
Behavioral task
behavioral7
Sample
Setup modwave native v1.0.2.exe
Resource
win10-20220812-en
Behavioral task
behavioral8
Sample
KORG.Modwave.Native.v1.0.2.Incl.Keygen-R2R/r2r11647.rar
Resource
win10-20220812-en
Behavioral task
behavioral9
Sample
KORG.Modwave.Native.v1.0.2.Incl.Keygen-R2R/r2r11647.sfv
Resource
win10-20220812-en
Malware Config
Extracted
C:\Program Files\WinRAR\Rar.txt
Extracted
C:\Program Files\WinRAR\WhatsNew.txt
https
http
http://weirdsgn.com
http://icondesignlab.com
https://rarlab.com/themes/WinRAR_Classic_48x36.theme.rar
Targets
-
-
Target
apgb2qp-kmn-win.rar
-
Size
14.1MB
-
MD5
22c6e21817a101f0cda381eba29ee536
-
SHA1
37ffaa488ac5ce6fe6f6b4460fcf177a027d98fa
-
SHA256
ba062ded9471928fb75bfb07b8fe8eee19f6e3c4bf0bc6634cc3f1778312eea1
-
SHA512
a4919d104eff2b6313503f88832596ca1682ca40a941d23b5e6c6b98cd7d93fc4bbc82655b25ccab1401d53bc35cd846afb195cbc93ff77c86be7568c8ae9d39
-
SSDEEP
393216:J12h7JXS4bIJ5KaVVcErC5CPR7scF/i3bHsHIlr3k76VieCdrZR:J127JgekbP1ji3bHTr0eCdrz
Score3/10 -
-
-
Target
KORG.Modwave.Native.v1.0.2.Incl.Keygen-R2R/R2R.nfo
-
Size
5KB
-
MD5
358088227db69b9a82270efa4dc3c078
-
SHA1
df840141fddaf8ca51e3b4332c0021e6647d9caf
-
SHA256
d0a70e90888dcc9bf5ea4b96ea2908f9b94697b0599aac9617f107e51c8e6316
-
SHA512
ec8207f5b5b0994060fc92120113336b8b877a35bce4cc22b32716bf897d0e087a4c4149963dd6382e8f38878069cc7ec060926b0a45fd2aaa1e2e448f0accab
-
SSDEEP
96:rcp6z63Jv5KozYq7lTXHRMCjNSdALa4HFXo:ru3JvFz7pXxNZsAHa
Score1/10 -
-
-
Target
KORG.Modwave.Native.v1.0.2.Incl.Keygen-R2R/r2r11647.r00
-
Size
4.5MB
-
MD5
5cda3d60171f0574501b4cca85818e4d
-
SHA1
effb80e501695f5229b2785415159a230b9b0d6e
-
SHA256
c2b648a19c45d0c5d29793b0d909adb9cb3c9b22c0ef9e1f556aff0dcebdee16
-
SHA512
47c5d5514ca333925ea153b884abf7004d326ef12cb687199e48e545fd18cfa4287a0c9d2b0d9a523332f04702155110dd9647e393ad49c9a2fbd7d82a493817
-
SSDEEP
98304:4Uj3VaAEOjLh7JnogKlFohaEBgKSzSR3E+smKjKg5xHAaUN5ksW5fmPaGdQ5t:4U8iLh7JnXKlFSaE9Szi3Sbf5KaVVOP
Score10/10-
Modifies system executable filetype association
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Registers COM server for autorun
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
RET/KORG_KeyGen.exe
-
Size
738KB
-
MD5
dbb55254ab12a9309ffb44da0bcf7dab
-
SHA1
5166ce2dad336dbf2053ace4e3d3ecf6ae5be3dc
-
SHA256
7a5cfca75110e66c6a54ae1434cf73669c3a119d4240e88fb5d8e15346cd4c3c
-
SHA512
261b107412da0d33d32b901cc1c45f7442b6f3748dd00fdd64bf0292ad1aefcafaa56dde097c24ebdf4e6e513e7e05a854a361ac2fa8035ee7826da894b10058
-
SSDEEP
12288:artfhxhkZuDzrx7J9qOVrK0r3of4NXWcX9soVH/3vjMfcW8t:arLbkZur1zqi+s4f4X9soVH/fjMfJ8t
Score3/10 -
-
-
Target
RET/R2R.txt
-
Size
372B
-
MD5
3037caa29b4d64d45bb8081e1bfe37fa
-
SHA1
9967caebd2d4a3de5fe76210dc92c347395af07b
-
SHA256
058e768ce740679dcc3b0c7da07a7015c33fedf0c0a4c901cc732b03334ac130
-
SHA512
57c0c22e0515bd8f7220075ed5642db1890e5aad6ebc820865a8ad6a72bb4e69a58cd4ca2a1ee1d106049c761a03a44aaba3cc4fd8850f6a6e01d13a525ec7fc
Score1/10 -
-
-
Target
Runtime.txt
-
Size
57B
-
MD5
3058fe75e484af9cb6e1a08eca3a52ad
-
SHA1
b4e977a02d392dd754b58d24355300e1a1924848
-
SHA256
cfb34b5660cda6483b4368ab08b66c310f02e5bd75c287914bf8807435ba37fe
-
SHA512
c5edc52798bfb934baf8db9d313d2f601d00d98d15666ef571fbf9192a18ada4d8f4e4966ece9ed3c6ae0890cd218e0efdbf8e1527379eb9304b1b3f95b11148
Score1/10 -
-
-
Target
Setup modwave native v1.0.2.exe
-
Size
13.6MB
-
MD5
6228c1f711f4e7d32c382a2328d666a2
-
SHA1
6a80671330487924d225d90dc3405ea3ef398643
-
SHA256
bf57076d20a6d1a6bfc8e826a4a7ac5226e9a2a2de64f1bf2fa8b7949f541306
-
SHA512
b98856d76a31d872e444ac0a1ed747814f90244f3e61a7cd6b4156ad6cf7d8580772bbce3f82bfa55ea3abe76f81f1143b63fe7b3193aa99b4625bec0ea0186c
-
SSDEEP
393216:BCYiAqb6VVEfVAJQAW07OEQdCukQXGnku5E:faMVQ+JQI7IguEnkuW
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
KORG.Modwave.Native.v1.0.2.Incl.Keygen-R2R/r2r11647.rar
-
Size
9.5MB
-
MD5
c1836a32041c6cc49ecf77ee1b0cd946
-
SHA1
664fe039e1ba633b5c1acfb09d3e9b2f2b425325
-
SHA256
603094296040617276ab9eb4cbe8e565a5b10058a6defb5b7110beca6f33ce5f
-
SHA512
338d82ec302a5386adc05907e7f294c3a5ed9fa8be1f22f4e8edd29440713f731fef2f34f8cd82240069e8b823da80e7a38beff773001c441254abc9489bd2ea
-
SSDEEP
196608:crGsVCYsjBAP1LhhXGh9c9T//Vc3KoHqnpHnIldF3zUO8Y9gaJVzs4q6AGCd7fBj:6C5CPR7scF/i3bHsHIlr3k76VieCdrZ
Score3/10 -
-
-
Target
KORG.Modwave.Native.v1.0.2.Incl.Keygen-R2R/r2r11647.sfv
-
Size
46B
-
MD5
cf85154f33e773ba69268691acf2fb1a
-
SHA1
71122ee8044925bca847248f0968c3329376530f
-
SHA256
bf6a72f235050d5d0043842a399c51d119eb61246f28152be9c985a9c73c90e7
-
SHA512
3af58e739148c23c5ed03c57580a2876b3e0dcebc2222ed4e67a80b18163ed721ecad584154a9d3f778d2cc3ef06b5d57888711daff0412180939b8763f24bd3
Score3/10 -