5c7d774313e58e4e3b93d7860126e9df834ead52e03c696a42c398d6ddd6a039

General

Target
FabFilter_KeyGen.exe
Size 595KB
Sample260511-d3a9tsd18j
SHA256 5c7d774313e58e4e3b93d7860126e9df834ead52e03c696a42c398d6ddd6a039
MD5 4be8f03c51f006a7ca3542e571acb6bb
SHA1 a39d638e5e075f9f44bf0b434ab3a6f5ad53652c
SHA512 967870c9eff8bc06233a8abdbd45f65e913f2fe040519dd2a3d3f2b8f867641bade0d1ac9ad1297c9d182067bb9d67634fbe837482f98819fafa872fec257f88
SSDEEP 12288:XYkc9t2Sll/d7jwkELre7lHzVYC3FtQjtyHw2evVF7v:XYkcL5Zkxe79S4taOw2ev37v
TLSH
T19CD42245FA508593E892033568B784153BFEBD2D96B2264767A8FB3C79B3342911F383
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  FabFilter_KeyGen.exe
- Size 595KB
- SHA256 5c7d774313e58e4e3b93d7860126e9df834ead52e03c696a42c398d6ddd6a039
- MD5 4be8f03c51f006a7ca3542e571acb6bb
- SHA1 a39d638e5e075f9f44bf0b434ab3a6f5ad53652c
- SHA512 967870c9eff8bc06233a8abdbd45f65e913f2fe040519dd2a3d3f2b8f867641bade0d1ac9ad1297c9d182067bb9d67634fbe837482f98819fafa872fec257f88
- SSDEEP 12288:XYkc9t2Sll/d7jwkELre7lHzVYC3FtQjtyHw2evVF7v:XYkcL5Zkxe79S4taOw2ev37v
- TLSH
  T19CD42245FA508593E892033568B784153BFEBD2D96B2264767A8FB3C79B3342911F383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RFBFKG.dll
- Size 91KB
- SHA256 1ab33027c4965b027298651781a1c780c272818da189e2c3a8101ac578069260
- MD5 62695f6fa2a85fc9993f57dfcbdc2749
- SHA1 07a9b478df63fba4cf3002974b4cf56b404d0914
- SHA512 69dd0de913629853400106811bffdebd8ec2037c93c9f9820d3f140e84576912de3ab57434086e20cf8698185015c27fa307e06047e2219dcf38a927a36f3c95
- SSDEEP 1536:NWTHBAtr5cPLOWpTo5iw4AInivibbb+S4A39:0ThAtr5cPLOiaBRIig3
- TLSH
  T120935B467492F332D52A117D735A47671F7FE8302212E4AB8BB81D575A32B83CF26683
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/keygen.exe
- Size 1.0MB
- SHA256 be0b99fa2979e33afe4fe1b98e616c5f20c577eb2669f1305348769d05712a89
- MD5 b9872d9716560f33dfc497b1f9620c16
- SHA1 a947972a9dc18d765c8604de03330d4a0d7662d8
- SHA512 bbec5ff507592a33f1aa0219e0ff048ffa05bde41dd1efd9e9d1b58c5f0fe4716165eace96a00715de2a11b1228643a6c5c9f3acef28511758c62a34a4d6db90
- SSDEEP 12288:pc/kEPDonR6Y436vRpGynhSlMyhqw9MD3t2l:oLonR6Y43+GqnyL9MD3t2l
- TLSH
  T145253E439351E62ADB368435F16E6E2760075A6D3B217BB7CC2D6FBF4009990A1FB321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4