Overview

overview

7

Static

static

3

FabFilter_KeyGen.exe

windows7-x64

7

FabFilter_KeyGen.exe

windows10-2004-x64

7

$TEMP/BASSMOD.dll

windows7-x64

3

$TEMP/BASSMOD.dll

windows10-2004-x64

3

$TEMP/R2RFBFKG.dll

windows7-x64

3

$TEMP/R2RFBFKG.dll

windows10-2004-x64

3

$TEMP/keygen.exe

windows7-x64

3

$TEMP/keygen.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FabFilter_KeyGen.exe

  • Size

    595KB

  • Sample

    241003-yrgbxstfll

  • MD5

    4be8f03c51f006a7ca3542e571acb6bb

  • SHA1

    a39d638e5e075f9f44bf0b434ab3a6f5ad53652c

  • SHA256

    5c7d774313e58e4e3b93d7860126e9df834ead52e03c696a42c398d6ddd6a039

  • SHA512

    967870c9eff8bc06233a8abdbd45f65e913f2fe040519dd2a3d3f2b8f867641bade0d1ac9ad1297c9d182067bb9d67634fbe837482f98819fafa872fec257f88

  • SSDEEP

    12288:XYkc9t2Sll/d7jwkELre7lHzVYC3FtQjtyHw2evVF7v:XYkcL5Zkxe79S4taOw2ev37v

Score
7/10
discovery

Malware Config

Targets

    • Target

      FabFilter_KeyGen.exe

    • Size

      595KB

    • MD5

      4be8f03c51f006a7ca3542e571acb6bb

    • SHA1

      a39d638e5e075f9f44bf0b434ab3a6f5ad53652c

    • SHA256

      5c7d774313e58e4e3b93d7860126e9df834ead52e03c696a42c398d6ddd6a039

    • SHA512

      967870c9eff8bc06233a8abdbd45f65e913f2fe040519dd2a3d3f2b8f867641bade0d1ac9ad1297c9d182067bb9d67634fbe837482f98819fafa872fec257f88

    • SSDEEP

      12288:XYkc9t2Sll/d7jwkELre7lHzVYC3FtQjtyHw2evVF7v:XYkcL5Zkxe79S4taOw2ev37v

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $TEMP/BASSMOD.dll

    • Size

      33KB

    • MD5

      e4ec57e8508c5c4040383ebe6d367928

    • SHA1

      b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06

    • SHA256

      8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f

    • SHA512

      77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822

    • SSDEEP

      768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $TEMP/R2RFBFKG.dll

    • Size

      91KB

    • MD5

      62695f6fa2a85fc9993f57dfcbdc2749

    • SHA1

      07a9b478df63fba4cf3002974b4cf56b404d0914

    • SHA256

      1ab33027c4965b027298651781a1c780c272818da189e2c3a8101ac578069260

    • SHA512

      69dd0de913629853400106811bffdebd8ec2037c93c9f9820d3f140e84576912de3ab57434086e20cf8698185015c27fa307e06047e2219dcf38a927a36f3c95

    • SSDEEP

      1536:NWTHBAtr5cPLOWpTo5iw4AInivibbb+S4A39:0ThAtr5cPLOiaBRIig3

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $TEMP/keygen.exe

    • Size

      1.0MB

    • MD5

      b9872d9716560f33dfc497b1f9620c16

    • SHA1

      a947972a9dc18d765c8604de03330d4a0d7662d8

    • SHA256

      be0b99fa2979e33afe4fe1b98e616c5f20c577eb2669f1305348769d05712a89

    • SHA512

      bbec5ff507592a33f1aa0219e0ff048ffa05bde41dd1efd9e9d1b58c5f0fe4716165eace96a00715de2a11b1228643a6c5c9f3acef28511758c62a34a4d6db90

    • SSDEEP

      12288:pc/kEPDonR6Y436vRpGynhSlMyhqw9MD3t2l:oLonR6Y43+GqnyL9MD3t2l

    Score
    3/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks