Overview

overview

7

Static

static

3

XLN_KeyGen.exe

windows10-2004-x64

7

XLN_KeyGen.exe

windows11-ltsc_2024-x64

7

$TEMP/BASSMOD.dll

windows10-2004-x64

3

$TEMP/BASSMOD.dll

windows11-ltsc_2024-x64

3

$TEMP/R2RXLNKG.dll

windows10-2004-x64

3

$TEMP/R2RXLNKG.dll

windows11-ltsc_2024-x64

3

$TEMP/bgm.mod

windows10-2004-x64

6

$TEMP/bgm.mod

windows11-ltsc_2024-x64

1

$TEMP/keygen.exe

windows10-2004-x64

3

$TEMP/keygen.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    XLN_KeyGen.exe
  • Size 800KB
  • Sample260621-swbpcaex61
  • SHA256 0c10769b277cf217dae2877ecd476e70413907f4eb7a70de55c2fba4edc947ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstaller

Malware Config

Targets

    • Target
      XLN_KeyGen.exe
    • Size 800KB
    • SHA256 0c10769b277cf217dae2877ecd476e70413907f4eb7a70de55c2fba4edc947ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      $TEMP/BASSMOD.dll
    • Size 33KB
    • SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $TEMP/R2RXLNKG.dll
    • Size 6KB
    • SHA256 76d9ffeeb89773c56d58fd8935c2d310aacdae3b590f3cc7aa24ed267339a735
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $TEMP/bgm.mod
    • Size 606KB
    • SHA256 7aa1e2789c5222a5cdd09125cb268a28569a482e7ced85b150b27e0c57ad1e9a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral7behavioral8
    • Target
      $TEMP/keygen.exe
    • Size 443KB
    • SHA256 5c9509349f39b2fcade22eb219126d45831920fcb4f319191f2f4a9e7643371a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks