General
- Target IK_Multimedia_Keygen.exe
- Size 543KB
- Sample260628-cdt5zaey6m
- SHA256 ce5bb4d88e0edd03a335569eb637a9736164f3395bc8c0916ad92d1d80ce0513
Score
8/10
Malware Config
Targets
-
- Target IK_Multimedia_Keygen.exe
- Size 543KB
- SHA256 ce5bb4d88e0edd03a335569eb637a9736164f3395bc8c0916ad92d1d80ce0513
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/R2RIKM2.dll
- Size 74KB
- SHA256 289672b18894cd8a5a2d3228472137d9ca616c54aa37f61e794d33694ef143b3
Score3/10 -
- Target $TEMP/bgm.xm
- Size 53KB
- SHA256 498eadc5b3d65aaf34b8496954c3362f033297c489d7ef4559cba8890c530171
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/keygen.exe
- Size 674KB
- SHA256 e8b34fde3c8b06521cdb42869b0cd25b71d49120392b3fefbd21e6ebab1fbd79
Score3/10