8e3ae377a8835cbaf451748fb97da75444ab5fd1c17b1293c4ac887ededa303e

General

Target
REAPER_KeyGen.exe
Size 430KB
Sample260705-aej1aafs41
SHA256 8e3ae377a8835cbaf451748fb97da75444ab5fd1c17b1293c4ac887ededa303e
MD5 b444e2faf68b38dc77f98e46acb11c56
SHA1 546a4702f6b0158669b7ee38928f9d50b7793ff2
SHA512 866ddfb5ca3454acdd2b7398cd1afa1babf8a4cc54dd2d3c5986aa10289df9db07d1ca10dccd98ada190a8acaa66c47f02f727af9d1d5510e5e130b8278cf259
SSDEEP 6144:BX45rw6T2nA8P9tlASRzKW3FY/YAKpW1PoXqab57xjCnM+7cTxCKe9c+ZYbn3XHh:BX4Lc9t2Sll1+971PG3j/RxIZsnr5P0e
TLSH
T1D4941200FD6445E3D0660B3698BB99713BFB7D259AE6160B1398F33CBA73642501BB53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  REAPER_KeyGen.exe
- Size 430KB
- SHA256 8e3ae377a8835cbaf451748fb97da75444ab5fd1c17b1293c4ac887ededa303e
- MD5 b444e2faf68b38dc77f98e46acb11c56
- SHA1 546a4702f6b0158669b7ee38928f9d50b7793ff2
- SHA512 866ddfb5ca3454acdd2b7398cd1afa1babf8a4cc54dd2d3c5986aa10289df9db07d1ca10dccd98ada190a8acaa66c47f02f727af9d1d5510e5e130b8278cf259
- SSDEEP 6144:BX45rw6T2nA8P9tlASRzKW3FY/YAKpW1PoXqab57xjCnM+7cTxCKe9c+ZYbn3XHh:BX4Lc9t2Sll1+971PG3j/RxIZsnr5P0e
- TLSH
  T1D4941200FD6445E3D0660B3698BB99713BFB7D259AE6160B1398F33CBA73642501BB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RRPRKG2.dll
- Size 85KB
- SHA256 d109a8ba3f5f76f2860f8649895a52c556f5ba57faff2ce96a8216f09b47360a
- MD5 08f5d7200733f206b8033308c2e22071
- SHA1 73a110b12c958c7e9c1fdd7f658c322590ae9c38
- SHA512 9b80baa5e5d06ce3411a5cb3d71344aae99801dc534ec903543d0f514e1c86c5ff9a50190255067059445285694f020b59bfacebb569bd8d1b8a5e1c2f9ea95e
- SSDEEP 768:S7D7FdZfwJruuHvqESPSfXxmJ/59yevFJ5OUGzjcNVZfw7zfH1IR5Uhoibbb+S4N:S738u9ESqgJh99n5aZOibbb+S4A3JK
- TLSH
  T13E83384174A2F331C43A267C735A4B271F7EE9B41152E89B8BB90D0A5B32BC3CF15696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/keygen.exe
- Size 442KB
- SHA256 daf3e140087659ad4ae82493c95ca40f88aae3b26368a529d6384af5c9ce8a58
- MD5 034c470c20a1ceba7b7f0abafed23f0d
- SHA1 f332bee5e2e1bd819bd0b12c82bd087760a3f5e6
- SHA512 6a6cd7d1bd688e8cc6495c1331a93cd6250ee37c48f80fb831f2298901400de52fee31b876587e289f709d6274e89454dbe554d7cf1766dfc50d3e647a674e27
- SSDEEP 6144:icmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOEErJx85SoChmhr1DnZEthExqN5f:ic/kEPDonR6Y436vRv/85LJZOGy5f
- TLSH
  T19FA4B268DAA1C9FEFBF2933944856615D180533C4321A4EFE2DF8DAC987A6D160F40DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4