Overview
overview
7Static
static
3KORG_Keygen.exe
windows7-x64
7KORG_Keygen.exe
windows10-2004-x64
7$TEMP/BASSMOD.dll
windows7-x64
1$TEMP/BASSMOD.dll
windows10-2004-x64
1$TEMP/R2RKORGKG.dll
windows7-x64
3$TEMP/R2RKORGKG.dll
windows10-2004-x64
3$TEMP/keygen.exe
windows7-x64
1$TEMP/keygen.exe
windows10-2004-x64
1General
-
Target
KORG_Keygen.exe
-
Size
755KB
-
Sample
240624-2dr32sycjk
-
MD5
0fcfec0473488892e728d0c0f9f56112
-
SHA1
ea5ae2ade91ee860706d581b8bc36f0d7d117ef5
-
SHA256
c7164a6cf3cb8b7219ecdf48e07968515829790b7f6273d004c5c0ee168f67f9
-
SHA512
7543f559ee4f9fbbbec29426db69bc6d3c7a7bd95899f55c71492c68f8a7ba428745947e8f3f8b830ef6140f6fc7a6e87d058fb590585ddda92904b3c63009bc
-
SSDEEP
12288:XYkc9t2Sll/394NTPRhHaDEJ1pA8rTqbLoUfCh2TDF84Yo3IsvDY50kbgKnBEPgl:XYkcL5394NTPnHaDE/pA1L5m2987o4sG
Static task
static1
Behavioral task
behavioral1
Sample
KORG_Keygen.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
KORG_Keygen.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$TEMP/BASSMOD.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$TEMP/R2RKORGKG.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$TEMP/R2RKORGKG.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
$TEMP/keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$TEMP/keygen.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
KORG_Keygen.exe
-
Size
755KB
-
MD5
0fcfec0473488892e728d0c0f9f56112
-
SHA1
ea5ae2ade91ee860706d581b8bc36f0d7d117ef5
-
SHA256
c7164a6cf3cb8b7219ecdf48e07968515829790b7f6273d004c5c0ee168f67f9
-
SHA512
7543f559ee4f9fbbbec29426db69bc6d3c7a7bd95899f55c71492c68f8a7ba428745947e8f3f8b830ef6140f6fc7a6e87d058fb590585ddda92904b3c63009bc
-
SSDEEP
12288:XYkc9t2Sll/394NTPRhHaDEJ1pA8rTqbLoUfCh2TDF84Yo3IsvDY50kbgKnBEPgl:XYkcL5394NTPnHaDE/pA1L5m2987o4sG
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$TEMP/BASSMOD.dll
-
Size
33KB
-
MD5
e4ec57e8508c5c4040383ebe6d367928
-
SHA1
b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
-
SHA256
8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
-
SHA512
77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
-
SSDEEP
768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
Score1/10 -
-
-
Target
$TEMP/R2RKORGKG.dll
-
Size
263KB
-
MD5
6321ff7e66a454c311d4d555b17f8567
-
SHA1
879fe8e563b4b7f471702c2ffc612851d8804145
-
SHA256
3a695de76d98f3ccc0b99475eaeff587c5d44dc8836de43a5fa73b1bf65a1ca2
-
SHA512
5a1c9a7e5786b62593afbeb27c628055fdd1d5930a126feb4886bbbc2a5e5d8e5031842fb14e0a0584a4885d286b8ff18c30e2d0c9e7f5988bafaf13410f1654
-
SSDEEP
6144:R3HbCkzvTPDVJzfZFTa8hfVwJ2CTLTBExfVNH:lHOg7P5JzxJ84yLT2JVNH
Score3/10 -
-
-
Target
$TEMP/keygen.exe
-
Size
541KB
-
MD5
3e1b211e536421e2b5117825f85ada3b
-
SHA1
680eaac55cd5210f6b6ac2b793e03b38c512ac71
-
SHA256
8034693425631189dbe191d71ffde7d6a04351280155f0776cfb25ed6e2a3b05
-
SHA512
40539d9bc8c2e85d0df78306ba1cc30569b2cacf96ad2a28f7c023658857092d9f4877e7cbc74a97042a74e6e572570eda4e66120eadd8df9c3afbd4e3066cdc
-
SSDEEP
6144:pcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOdE3KTPQo10XnnkzFIYPS0:pc/kEPDonR6Y436vRM39nkzFIuS0
Score1/10 -