General
- Target Algonaut_KeyGen.exe
- Size 613KB
- Sample260708-edf98aaz9q
- SHA256 66a8df91df9f7783f3be30c5332642d5a335c0623cc1cced245cb63b04461b14
Score
8/10
Malware Config
Targets
-
- Target Algonaut_KeyGen.exe
- Size 613KB
- SHA256 66a8df91df9f7783f3be30c5332642d5a335c0623cc1cced245cb63b04461b14
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/R2RATLASKG.dll
- Size 312KB
- SHA256 641a3752546f3a2edf4e11a8bce80a1926d2465962cd832703e326cc3cd8ae2f
Score3/10 -
- Target $TEMP/keygen.exe
- Size 441KB
- SHA256 2aa5d573846ffd1bd27b5d9043c942ffe84fb6290a27e67ae90271e33feca48a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.