c43953502ba7dc269459897dd4d23f0c16f85c8446a5233bab9d0e711be4be08

General

Target
QuikQuak_Keygen.exe
Size 514KB
Sample260713-gx2flset8z
SHA256 c43953502ba7dc269459897dd4d23f0c16f85c8446a5233bab9d0e711be4be08
MD5 bfeb7a3ee6d3c1ddd635334d3ad2474b
SHA1 c3ab0b6c67596f3a78d1fb90bcb79092af235d86
SHA512 6a2a2ddb37558568e6ff255d0198e3413bbd999f14d54281ab99bf6cb6cc7e17d738506158269e77bf51174ddba388644155b80432cb7c16eecefc3b24aa11e7
SSDEEP 6144:8hjmq2nA8P9tlASRzKW3ZG/ZKFb7wOSdV5P8Yx8Rc8ppNIhdc2Ww0VkqgPMNdZrg:Uc9t2SllJG/5kYAppye7hVkqgPMrBGa+
TLSH
T114B41226EDA489E3D4771BB454AFD941B1363C11D632271BA7E8BF3E2A733839512903
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  QuikQuak_Keygen.exe
- Size 514KB
- SHA256 c43953502ba7dc269459897dd4d23f0c16f85c8446a5233bab9d0e711be4be08
- MD5 bfeb7a3ee6d3c1ddd635334d3ad2474b
- SHA1 c3ab0b6c67596f3a78d1fb90bcb79092af235d86
- SHA512 6a2a2ddb37558568e6ff255d0198e3413bbd999f14d54281ab99bf6cb6cc7e17d738506158269e77bf51174ddba388644155b80432cb7c16eecefc3b24aa11e7
- SSDEEP 6144:8hjmq2nA8P9tlASRzKW3ZG/ZKFb7wOSdV5P8Yx8Rc8ppNIhdc2Ww0VkqgPMNdZrg:Uc9t2SllJG/5kYAppye7hVkqgPMrBGa+
- TLSH
  T114B41226EDA489E3D4771BB454AFD941B1363C11D632271BA7E8BF3E2A733839512903
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RQQKG.dll
- Size 29KB
- SHA256 7ce5a1e7d49367c4da47465c95355f7f25e5a3de787da49a24ffaa2040466d4b
- MD5 671b7bef3059cf601d0992d0c7cdecdf
- SHA1 aa4d4f6203f243a776ab511e35aecebc8e2482bb
- SHA512 b7e522b38cdf6f64002a08ff1e31cd5e787c7a44e13627b70c52dfb9d85b52a3b5b0824b87661bb928814e959cce85725ad31e850662c81f9a68408a7f3a0b8e
- SSDEEP 768:lhKODbQJhH79NtYSDqTNJfBZgqvQiU797D:lgOHsH79NjIpZgqS7
- TLSH
  T129D2D0E6E2ED3A08EE6D0233215EB403A724F99F5641D27E4BD0111B7C84B923D9D7A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/bgm.mod
- Size 153KB
- SHA256 462b7f1fe5cac88f9f5fbd990d1a900f471f7c07b3deeff4e132b24969fad816
- MD5 ca6adc836557720ac85cdef700a8a4cd
- SHA1 7ef485c3ada8b54f41f2572359248352bacc4230
- SHA512 5790dd984bae56dd98c1fdabd45a569be4673c97d366fef48f7c604789b92172b43c2ec6affa6518831f00df71dcc84585228de6207b71a986bd1623b06f6760
- SSDEEP 1536:wpVmLVTQy3uIIbSDD6fyjN/VfKRR50EvP720ATlJZZks3/WhBOl1JO7T2NnjlG5z:scErbT2NeKlbF3OalrET2NnZG5Lez5hm
- TLSH
  T1B7F37C636BCA7F47C9444E70DDDE63433A51A82B95F3420E7CC0EC5AA538312AE75B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  $TEMP/keygen.exe
- Size 364KB
- SHA256 fdc007d8d8a8ad2c8f672391a86c03599b76128f740240758bd20ed2a95e2c08
- MD5 49a22205b561e13071905ba24b771653
- SHA1 e9bdc51363202d283a220ad12b715cfd02ff8ea4
- SHA512 dc8b33cc4dd4b2006d61d5d3e848056d4162fdfb6e855b874f388672a9b7aab8b8177c79f47abb0525420e3b3e8c2573cd79c6d2276751e3ddfa912371ca668a
- SSDEEP 6144:syztgw3QmFzwDK14dHTDtes6apFCwVcihmULfpHwUqf0tQj0rk9loKvemmUl0Fc0:jzh3NeWSzBe3apFCwVdhmULfpQ5f0tQ0
- TLSH
  T1D0847DAFE7CBDE78E38900FD2130F6965269D0F915A384C02FB3175A9F8693152E2D91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5
- Target
  out.upx
- Size 220KB
- SHA256 b84293468fc2540489478e8e4b8bd837470c1e0e74886240b6e35ab5f7d1acde
- MD5 8a24901aa6a0744ca0f79d201b880407
- SHA1 7dfb495c7d8eba78ccc20216bec30ee6f93e7cb3
- SHA512 ae95cc258d5cf054e746275ba41f06f5b5b73c8b87ff85398482a8c3c1a36fd10a7e12342318c64f4443bfce4c2dfe1611417b5f920418135c8fd25bef09f186
- SSDEEP 3072:gqAOuG2thmqRp25BzhGOc3GuDtYPiaKlBonRRKNzWgNL055mRLk+29iAg0FuanEb:gqWm47txlBonRRSz/SHm6AAOd
- TLSH
  T1EC24BF1267E3C1F1F89621BE88DF576F763C22190725DAF783A01E9DEC213E051BA295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6