8d8ec36173fa5316f65d9621d767f2b7b4acd800fb4cb1aee49b5e711b753f06

General

Target
XLN_KeyGen.rar
Size 731KB
Sample260721-tbaf8azcpg
SHA256 8d8ec36173fa5316f65d9621d767f2b7b4acd800fb4cb1aee49b5e711b753f06
MD5 afc1e26ff39ab4e54c21868fb2672d90
SHA1 3b3e0246d1266a6b77342672078e1de8ab8c80e8
SHA512 c86b09b33b22edc21bd69a9efb77596b1ebc2a377364790c9324f497ecc7f1dd454a05cc8d84d485171b6dc9cbdf2a07b27181b243769b082c7135b78fc892c8
SSDEEP 12288:ioK0VyTvL5Pbp/h2FHRs4z7GalTvisp5xpo570uEQpE8r+0qEEcYZkIxl:ioK0kLxvkS4tiApeGQU0qEEcAxl
TLSH
T188F4238316095F4D688D0A4507A2337EEB3F6AD3AFB8EE2C2D19EB5366E751034DC485
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  XLN_KeyGen.exe
- Size 800KB
- SHA256 0c10769b277cf217dae2877ecd476e70413907f4eb7a70de55c2fba4edc947ea
- MD5 952d893926df7a8d5879f2ffeb96e96e
- SHA1 2a2f3faa2c7670a52e27b838c81737e6c9b4f965
- SHA512 4e456fdfac6ea38d0746b2a516c04fd797f75def9dfe3b2fd7a2c1f934f14f1f644e61809d660c542ffbce9e2198651a8376f5c92a2afe5455e286e051a34a56
- SSDEEP 24576:UcLjNw85Iyerj0xe41VExk6DVPiFeoMkPr4Q:UAemLEj0xeuqifPr4Q
- TLSH
  T13B052326BAA444D3EDF30BB114FFD964B1BBAE678B02158F62C5BF395532742600B243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RXLNKG.dll
- Size 6KB
- SHA256 76d9ffeeb89773c56d58fd8935c2d310aacdae3b590f3cc7aa24ed267339a735
- MD5 edc9d719c3bdb5702e28abf9df8359b6
- SHA1 d433026c1a8c51552d1ad657a8fccf81cc73ac76
- SHA512 a7f866c2bce0e73d893bc07d5a298f5905ea3cddd11e111e5c1195959a9e5f2a0607670b6506860cadd1fa88eef05bf23063128c0d806184ec35d9daa0327197
- SSDEEP 96:MuPsNE+ByIO4EOkkIrZjr1LTReB55H7bl01tzDAQ2bJJ:M39BLEOqjr9TGD2TDAQ2
- TLSH
  T1CBC1E63753E148C3E1B686B03B75EF4D15ADF4212120B6A8CB21C8493DE8696FE17766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/keygen.exe
- Size 443KB
- SHA256 5c9509349f39b2fcade22eb219126d45831920fcb4f319191f2f4a9e7643371a
- MD5 2cf51f0737ff7c3b804f5c9646b627c7
- SHA1 d37ec75aca03b01e7f79d760a9ba02ec2b03eff4
- SHA512 ebd931371967f129aa2dd2051c89fd15d6f615a55edfb5f25dc7d518254c8b9625fec9f35e76f72e532337aeefd89bd5ff713df85a6904c483d37f41a133aad7
- SSDEEP 6144:bcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOYyFGn4eg6QKxE1aal/i:bc/kEPDonR6Y436vRjFGnJEFi
- TLSH
  T171A46A419382CE78F2DA82B98DFB7B2BE12062245712A5F7C2573E379DE42DD1C74219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4