Overview
overview
4Static
static
33rdParty/w...le.exe
windows10-2004-x64
33rdParty/w...le.exe
windows11-21h2-x64
3BASSMOD.dll
windows10-2004-x64
3BASSMOD.dll
windows11-21h2-x64
3BassMOD.Net.dll
windows10-2004-x64
1BassMOD.Net.dll
windows11-21h2-x64
1CommonHelpers.dll
windows10-2004-x64
3CommonHelpers.dll
windows11-21h2-x64
3CrapInstaller.dll
windows10-2004-x64
3CrapInstaller.dll
windows11-21h2-x64
4CrazyInstaller.exe
windows10-2004-x64
3CrazyInstaller.exe
windows11-21h2-x64
3ExternalLi...et.dll
windows10-2004-x64
1ExternalLi...et.dll
windows11-21h2-x64
1ExternalLi...ET.dll
windows10-2004-x64
3ExternalLi...ET.dll
windows11-21h2-x64
3ICSharpCod...ib.dll
windows10-2004-x64
1ICSharpCod...ib.dll
windows11-21h2-x64
1IOManager.dll
windows10-2004-x64
1IOManager.dll
windows11-21h2-x64
1InstallerS...rm1.js
windows10-2004-x64
3InstallerS...rm1.js
windows11-21h2-x64
3InstallerS...er.vbs
windows10-2004-x64
1InstallerS...er.vbs
windows11-21h2-x64
1InstallerS...es.vbs
windows10-2004-x64
1InstallerS...es.vbs
windows11-21h2-x64
1Ionic.Zlib.dll
windows10-2004-x64
1Ionic.Zlib.dll
windows11-21h2-x64
1KeyStego.exe
windows10-2004-x64
3KeyStego.exe
windows11-21h2-x64
3LoaderManager.dll
windows10-2004-x64
1LoaderManager.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
118s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/05/2026, 16:27
Static task
static1
Behavioral task
behavioral1
Sample
3rdParty/wbfs_file.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
3rdParty/wbfs_file.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
BASSMOD.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
BASSMOD.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
BassMOD.Net.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
BassMOD.Net.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
CommonHelpers.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
CommonHelpers.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
CrapInstaller.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
CrapInstaller.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
CrazyInstaller.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
CrazyInstaller.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
ExternalLibraries/BassMOD.Net.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
ExternalLibraries/BassMOD.Net.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
ExternalLibraries/irrKlang.NET.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
ExternalLibraries/irrKlang.NET.dll
Resource
win11-20250610-en
Behavioral task
behavioral17
Sample
ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
ICSharpCode.SharpZipLib.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
IOManager.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
IOManager.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
InstallerStub/Form1.js
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
InstallerStub/Form1.js
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
InstallerStub/Properties/Resources.Designer.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
InstallerStub/Properties/Resources.Designer.vbs
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
InstallerStub/Properties/Resources.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
InstallerStub/Properties/Resources.vbs
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Ionic.Zlib.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Ionic.Zlib.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
KeyStego.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
KeyStego.exe
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
LoaderManager.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
LoaderManager.dll
Resource
win11-20250610-en
General
- Target BASSMOD.dll
- Size 33KB
- Sample260508-tx9s7set2r
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4692 wrote to memory of 4988 4692 rundll32.exe 78
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\BASSMOD.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4692 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\BASSMOD.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:4988
-