Overview
overview
7Static
static
3Keygen+VCR...kup.7z
windows10-2004-x64
1Keygen+VCR...kup.7z
windows11-ltsc_2024-x64
1Ableton_KeyGen.exe
windows10-2004-x64
7Ableton_KeyGen.exe
windows11-ltsc_2024-x64
7$TEMP/BASSMOD.dll
windows10-2004-x64
3$TEMP/BASSMOD.dll
windows11-ltsc_2024-x64
3$TEMP/R2RLIVE2.dll
windows10-2004-x64
3$TEMP/R2RLIVE2.dll
windows11-ltsc_2024-x64
3$TEMP/bgm.xm
windows10-2004-x64
1$TEMP/bgm.xm
windows11-ltsc_2024-x64
1$TEMP/keygen.exe
windows10-2004-x64
3$TEMP/keygen.exe
windows11-ltsc_2024-x64
3vcruntime140_1.dll
windows10-2004-x64
1vcruntime140_1.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/07/2026, 15:36
Static task
static1
Behavioral task
behavioral1
Sample
Keygen+VCRuntime Backup.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Keygen+VCRuntime Backup.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Ableton_KeyGen.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Ableton_KeyGen.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$TEMP/BASSMOD.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
$TEMP/R2RLIVE2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$TEMP/R2RLIVE2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$TEMP/bgm.xm
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$TEMP/bgm.xm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$TEMP/keygen.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$TEMP/keygen.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
vcruntime140_1.dll
Resource
win11ltsc2024-20260709-en
General
- Target Keygen+VCRuntime Backup.7z
- Size 751KB
- Sample260727-s13nmahl21
- SHA256 1074aa2f7827c1981a231f82732aff9ef57a008b93c261799b58c38d5d55afd6
- MD5 a84ba956733883bd35f863893a60c48d
- SHA1 1e4aff4c3e257a83b4d6060c5e0cc62a1688375d
- SHA512 fb0e1f89527e8d9f8c6de218af9b8367db7eb5a039c351c6c2058525fce666dcdcf68569a743efcc28bb56f638dfe22a0cf7cf9185ac081fe16e6ff09fc9d0e2
- SSDEEP 12288:XzJqfNCnjM3t6s4tO+GEwi+aN3N8wixwVedfnMGqZYnAjnda:XzMUjEzj+GAv3N8dVdfMXFjnda
- TLSH T1A2F4234D1A7BC114F30FD2B88C32A355BBB40CB26A6954628631F8D5EB1CA178BFD5E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3704 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3704 7zFM.exe Token: 35 3704 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3704 7zFM.exe