17cee8e38e6c54cc617ce6cc81ae3b08654f8b8d6c437ee73a8ffd9e74815fd0

General

Target
GForce_RSA128_KeyGen.exe
Size 526KB
Sample260731-xs49psfc89
SHA256 17cee8e38e6c54cc617ce6cc81ae3b08654f8b8d6c437ee73a8ffd9e74815fd0
MD5 e7582c2de3a5eb3a3d608c3148827f21
SHA1 0fb9878996cfec4f6544aa539f01c6b7e56be162
SHA512 e4b4359dbe9533073e0a73ed3c1bafb22e4e2242b2349b763e1979cd85a575422837b69107b9c1d6be6a592078c445264a4806d37ef1c601172cff8e8150e2a5
SSDEEP 12288:BX4Lc9t2Sll16+scVlEOCFRxLv/jQvHvlzG46gK744hi:B4LcL3JFVl0RxDcvHNiPzEx
TLSH
T153B41201FA9048F3C4AA1BB158FB9E223AFA2D2686D7115F53847739B973352852F743
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  GForce_RSA128_KeyGen.exe
- Size 526KB
- SHA256 17cee8e38e6c54cc617ce6cc81ae3b08654f8b8d6c437ee73a8ffd9e74815fd0
- MD5 e7582c2de3a5eb3a3d608c3148827f21
- SHA1 0fb9878996cfec4f6544aa539f01c6b7e56be162
- SHA512 e4b4359dbe9533073e0a73ed3c1bafb22e4e2242b2349b763e1979cd85a575422837b69107b9c1d6be6a592078c445264a4806d37ef1c601172cff8e8150e2a5
- SSDEEP 12288:BX4Lc9t2Sll16+scVlEOCFRxLv/jQvHvlzG46gK744hi:B4LcL3JFVl0RxDcvHNiPzEx
- TLSH
  T153B41201FA9048F3C4AA1BB158FB9E223AFA2D2686D7115F53847739B973352852F743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RJUCE.dll
- Size 238KB
- SHA256 8780a48d66bc41f21381fb7dc9c501eefa49e33db372b08d42648c23163a35d3
- MD5 eb06a15d3f244a918bccb2755994768c
- SHA1 b4abee1f4cbb43db220cbe42a0f954738b0e1e6a
- SHA512 094af7730a41beabd99c8d4a15e0ddbd91ccab4a55b1af6bc1fcfd27cf3aa63e38dd666cbdfd3cdbe6823c247a90f1bb42f7d59525160bf2dfa5e45bee36893e
- SSDEEP 6144:aXUGa7cLy/UlXwS0gSlrJ+tGRHBpf/gsZ6:2Vy/2AZxJTl
- TLSH
  T134348C11F891C07AC66F09308C769B645ABEFCA04BB0EDD777840EAB4E356C0DB2575A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/keygen.exe
- Size 542KB
- SHA256 5d37f3d14447f72916f5be5f3d69c5e023e7bf4a9c25a08df0446f98a1bb4d0c
- MD5 4842d11cbd5082298f59a713ceb3bf96
- SHA1 9de0971f95d06a991dceb69796add9fb2dd6305d
- SHA512 09c23a7d0a7642ce7033efe389a61c02171e1f1cc8d2dbfe26039f758eb0118463b7c848de120f7826ca2be75d4cf2b2571b25f7b6e38bc6b848592190ae9b7a
- SSDEEP 12288:ic/kEPDonR6Y436vRaox6ZDcG3+L+LNMjvbNPqI:ZLonR6Y43ZoEAL+hMzMI
- TLSH
  T18AC46D03D52189EFE9F2573D24466A06C450A3BCCB98F4EF82E30E59583629E11EF7D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4