Overview
overview
7Static
static
3future.dj ...en.exe
windows7-x64
7future.dj ...en.exe
windows10-2004-x64
7$TEMP/BASSMOD.dll
windows7-x64
1$TEMP/BASSMOD.dll
windows10-2004-x64
1$TEMP/bgm.xm
windows7-x64
1$TEMP/bgm.xm
windows10-2004-x64
1$TEMP/keygen.exe
windows7-x64
1$TEMP/keygen.exe
windows10-2004-x64
1future.dj ...o1.exe
windows7-x64
4future.dj ...o1.exe
windows10-2004-x64
4future.dj ...64.exe
windows7-x64
4future.dj ...64.exe
windows10-2004-x64
4Analysis
-
max time kernel
590s -
max time network
362s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
08/06/2024, 16:19
Static task
static1
Behavioral task
behavioral1
Sample
future.dj pro/R2R/FutureDJ_KeyGen.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
future.dj pro/R2R/FutureDJ_KeyGen.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$TEMP/BASSMOD.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$TEMP/bgm.xm
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
$TEMP/bgm.xm
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$TEMP/keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$TEMP/keygen.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
future.dj pro/futuredjpro1.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
future.dj pro/futuredjpro1.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
future.dj pro/futuredjpro1_x64.exe
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
future.dj pro/futuredjpro1_x64.exe
Resource
win10v2004-20240508-en
General
-
Target
$TEMP/bgm.xm
-
Size
687KB
-
MD5
6bc0100cd3323ad073dc685c915922ed
-
SHA1
c88e421883b5c6e24c887ddea96c1b76be367150
-
SHA256
002970f9e11eb1b58a5924f8dd2cf462317a172a25f4040458b2f4af7497dc13
-
SHA512
55a39f4ffaf2c04ec04dccfb17cf3084bc71d0315fceeb02b78cff655efa5dc076764752f799b833e976a1b2de667a9aa0d8006bbb1f74b9b82d16bba38a1197
-
SSDEEP
12288:SAQNJ/t5oimj4qTTI42ccwGUqe5o/CDShbePhr4Erbk0F21lOFVp1f:eVtIT8PccLYDDShiPhNrb5F214FVp1f
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1928 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1928 vlc.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1928 vlc.exe Token: SeIncBasePriorityPrivilege 1928 vlc.exe -
Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe 1928 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1928 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\$TEMP\bgm.xm"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1928