Overview
overview
10Static
static
10keygen-step-1.exe
windows7-x64
10keygen-step-1.exe
windows10-2004-x64
10keygen-step-3.exe
windows7-x64
7keygen-step-3.exe
windows10-2004-x64
7keygen-ste...ck.exe
windows7-x64
3keygen-ste...ck.exe
windows10-2004-x64
7keygen-ste...28.exe
windows7-x64
10keygen-ste...28.exe
windows10-2004-x64
10keygen-ste...up.exe
windows7-x64
6keygen-ste...up.exe
windows10-2004-x64
6keygen-ste...5f.exe
windows7-x64
10keygen-ste...5f.exe
windows10-2004-x64
10keygen-ste...af.exe
windows7-x64
10keygen-ste...af.exe
windows10-2004-x64
10keygen-step-4/ss.exe
windows7-x64
1keygen-step-4/ss.exe
windows10-2004-x64
1keygen-step-6.exe
windows7-x64
7keygen-step-6.exe
windows10-2004-x64
7keygen.bat
windows7-x64
10keygen.bat
windows10-2004-x64
10Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
10-11-2024 13:01
Behavioral task
behavioral1
Sample
keygen-step-1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
keygen-step-1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
keygen-step-3.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
keygen-step-3.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
keygen-step-4/Crack.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
keygen-step-4/Crack.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
keygen-step-4/PBrowFile28.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
keygen-step-4/PBrowFile28.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
keygen-step-4/Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
keygen-step-4/Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
keygen-step-4/f2217e5f.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
keygen-step-4/f2217e5f.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
keygen-step-4/md1_1eaf.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
keygen-step-4/md1_1eaf.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
keygen-step-4/ss.exe
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
keygen-step-4/ss.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
keygen-step-6.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
keygen-step-6.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
keygen.bat
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
keygen.bat
Resource
win10v2004-20241007-en
General
-
Target
keygen-step-4/Setup.exe
-
Size
1.6MB
-
MD5
7009fb80a52366b6c2cd8ec052a65791
-
SHA1
db0894463edf3ac11e5ca4b4584e8f10d75810f6
-
SHA256
767c546decf6f669263e4a0a87a0f5d92234e031e9a0de3733fa954a8f3e0255
-
SHA512
26e50e4b3d0b5fe866423b9ae0c02f61882f632fe4a16c05da117c02fae9aea26a6c81458e4b0bc2bda8acd0407565132f8bd6b7d3e828dd90fc280b1f15f079
-
SSDEEP
49152:IldcuFGnuxWiOuRg/iyFzb2QN83XfeYav:IldhGnuxWiOl/hNOmB
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
Setup.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Setup.exe