2d1441eca5c9c1b8bf75e2d4f0fe35616e069f736f61dca704b68bcc861205b7

Sharing

Copy URL Twitter E-mail

General

Target
NANI_KeyGen.exe
Size 677KB
Sample260531-cm1dcaax2k
SHA256 2d1441eca5c9c1b8bf75e2d4f0fe35616e069f736f61dca704b68bcc861205b7
MD5 dd762201825dc8d5a60dd6b683d47bd8
SHA1 81b681f5c332fce99e031acafd5ee94eecf34f0a
SHA512 65f83faa7202121c791aea5cef5a371b0ccd22de3d0a7004eee57c265b6c58820eb64d52337e26cc64f35f25903e60d5ee204c90efe6d44a0509d673a259ec31
SSDEEP 12288:sc9t2SllUbZ8/JjYFc8pGckKnubY9oYij4SEuCHyboIsvJvZPUQ:scLy92ac8pdkxb0oHuSsIkhcQ
TLSH
T111E41313BE4009D3DCA79BB0757799516ABBED250E62075BA7D8776D31F3203022BA83
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  NANI_KeyGen.exe
- Size 677KB
- SHA256 2d1441eca5c9c1b8bf75e2d4f0fe35616e069f736f61dca704b68bcc861205b7
- MD5 dd762201825dc8d5a60dd6b683d47bd8
- SHA1 81b681f5c332fce99e031acafd5ee94eecf34f0a
- SHA512 65f83faa7202121c791aea5cef5a371b0ccd22de3d0a7004eee57c265b6c58820eb64d52337e26cc64f35f25903e60d5ee204c90efe6d44a0509d673a259ec31
- SSDEEP 12288:sc9t2SllUbZ8/JjYFc8pGckKnubY9oYij4SEuCHyboIsvJvZPUQ:scLy92ac8pdkxb0oHuSsIkhcQ
- TLSH
  T111E41313BE4009D3DCA79BB0757799516ABBED250E62075BA7D8776D31F3203022BA83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery adware spyware
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $TEMP/R2RWXAKG.dll
- Size 326KB
- SHA256 84ea7edfa687a5fa6bf4f20ac4be0fae19a1dbe8f67866247a472af76857917d
- MD5 26def155948cf4df1d5f55f0bfd6380a
- SHA1 f54a2d1eec85a705947444571d085129a9515593
- SHA512 ce6e4ddf2e08252eab7829aabcec2780d494f0ecb5b3e2911e01883b7aa3b88c52ee20c71c72b98aee24ec4416f6f675821b1a6e9b139d8b7e1c516144abd970
- SSDEEP 6144:hjXD5Y9g6e2xz30hs1on5tE+Zf91dLD83ULDe3TBqrWG510qAOvx4N:VIg6e250hs1wM+Zf9TFDe3TQVaqY
- TLSH
  T10D64AE00B892C472D57F01341878EA715BBE79311BF4D9FB6BC85E2E4E762C0A732666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $TEMP/keygen.exe
- Size 686KB
- SHA256 773c9e7fccd850294ae89c1b0c83d18102ba4c84683c116afe4502c01f281415
- MD5 01a70f08005ee20e9387488a0d0ab9a9
- SHA1 5db2329564b312fa12bc18720310258601a986f5
- SHA512 ff4a414dd50e07125d0832b96e1cf5fa586d2b91bb328057c9e83aa4976b9e6d619be467c5aad7c8abb63d5ffb0f0d7db0a3082726c47f418790baffef21bed2
- SSDEEP 6144:tPA4GcGvY6Q4rOQonRBVSszRNAOMohWGeUJ2Z5neFmgwBDDC1DLSiIANgYqO2re:tpGVQ4KQonRBVrzRNHWGnJ2jeZ4DO5d
- TLSH
  T1E6E4744CB200D9E7F04D4FB5277165AB752E2885EFA67086110A98ABF3C3ECD63587C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8