Resubmissions

11-05-2024 00:12

240511-ahjhxscf87 7

11-05-2024 00:09

240511-afq5zsce79 7

General

  • Target

    Uhe_KeyGen.exe

  • Size

    708KB

  • Sample

    240511-ahjhxscf87

  • MD5

    e4ad77c21fb6497dd469e9e50036832b

  • SHA1

    9275ac1286c9ecec3e704d8eea4708295dee1819

  • SHA256

    17bfda2d300d5321642789fd5b826318735766d5e5d5c9b2e7c93e520ad87881

  • SHA512

    1a4addaaa94aedfc57378c393443ae67240ff0852fd9a1fa4e44a12832505ae0d6c256f419cd677dc3575b196b68d4b688e4b8291267523a58359ca8e5d10d43

  • SSDEEP

    12288:XYkc9t2Sll/3Mn6WeH3lgoN8YWo/Pv7vnXvWNqTf6WfydeLPwsgjrPO9:XYkcL53Mnmr4E7n/WNqundIwsg+9

Score
7/10

Malware Config

Targets

    • Target

      Uhe_KeyGen.exe

    • Size

      708KB

    • MD5

      e4ad77c21fb6497dd469e9e50036832b

    • SHA1

      9275ac1286c9ecec3e704d8eea4708295dee1819

    • SHA256

      17bfda2d300d5321642789fd5b826318735766d5e5d5c9b2e7c93e520ad87881

    • SHA512

      1a4addaaa94aedfc57378c393443ae67240ff0852fd9a1fa4e44a12832505ae0d6c256f419cd677dc3575b196b68d4b688e4b8291267523a58359ca8e5d10d43

    • SSDEEP

      12288:XYkc9t2Sll/3Mn6WeH3lgoN8YWo/Pv7vnXvWNqTf6WfydeLPwsgjrPO9:XYkcL53Mnmr4E7n/WNqundIwsg+9

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      $TEMP/BASSMOD.dll

    • Size

      33KB

    • MD5

      e4ec57e8508c5c4040383ebe6d367928

    • SHA1

      b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06

    • SHA256

      8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f

    • SHA512

      77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822

    • SSDEEP

      768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0

    Score
    1/10
    • Target

      $TEMP/R2RUHEKG.dll

    • Size

      3KB

    • MD5

      abcbaa94b4d828f5c3080c5ddbbbf403

    • SHA1

      42f8010079fb6222f97557fff9377a7276189968

    • SHA256

      940f041a89d78bf62b32771023553f9f3b867d58dd87af679508fff6ed0e9144

    • SHA512

      24799c073c878f9d2fbf0b8e01dbe0abcf183b950dd991e7a504cfb5f1d370edc558896b7a4607271569bd2fa512b5d76e6f94155955da5bf67e0a8a12a75465

    Score
    3/10
    • Target

      $TEMP/keygen.exe

    • Size

      554KB

    • MD5

      ba7e85562433a89ce3fab455644b3d44

    • SHA1

      d84aa7a4128af9ca4b535d17f498f2e70bb5879c

    • SHA256

      b98872bfda93afc1c34ead787762425db922b557b5526e8d0b1e10a4bbeb0b57

    • SHA512

      4edcfa12c003215bd4f983ffe879fcd336f0cd167ef0708f8e28d7eec6db245c59324026821d020de8df7f0a711737a5b0ec56c48e0de7bfc0d3a91272524dad

    • SSDEEP

      6144:bcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAO06/lDuy:bc/kEPDonR6Y436vR1/Ey

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks