86ea5473fb5d7b1e1c5f7f5a967b0a8e55d4c960bc392325ee9a128fea9fb836

General

Target
Algonaut - Atlas v2.6.2.zip
Size 41.2MB
Sample260804-vngxhas1fx
SHA256 86ea5473fb5d7b1e1c5f7f5a967b0a8e55d4c960bc392325ee9a128fea9fb836
MD5 2760208038bef18d5f7fbc7b05ac0d10
SHA1 0da01210eab7888b1aad58c8d4896b9cbceead87
SHA512 f7b8ac8129cddd5ef1fd3db41c6cc071a9832e10a981b1476ec4409ebaaaaa204bbe85d8c0756ab9f3fb4d64dd30c381a47ab5456263ae15f5dee638af9e25b8
SSDEEP 786432:vd2CzzbeEPA6kZmbS5G4KHsFeWSJM0uz0tweS8Dg7pCLb9iB0Gu0M/:A43eEP7WZKHsFeW+M0uz0tweS8DcpCnh
TLSH
T10797339121A78D7C50B4E117E6599D6F9BDE54F6D43BCAE0AE4383100DACA34AF3243E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  Algonaut - Atlas v2.6.2.zip
- Size 41.2MB
- SHA256 86ea5473fb5d7b1e1c5f7f5a967b0a8e55d4c960bc392325ee9a128fea9fb836
- MD5 2760208038bef18d5f7fbc7b05ac0d10
- SHA1 0da01210eab7888b1aad58c8d4896b9cbceead87
- SHA512 f7b8ac8129cddd5ef1fd3db41c6cc071a9832e10a981b1476ec4409ebaaaaa204bbe85d8c0756ab9f3fb4d64dd30c381a47ab5456263ae15f5dee638af9e25b8
- SSDEEP 786432:vd2CzzbeEPA6kZmbS5G4KHsFeWSJM0uz0tweS8Dg7pCLb9iB0Gu0M/:A43eEP7WZKHsFeW+M0uz0tweS8DcpCnh
- TLSH
  T10797339121A78D7C50B4E117E6599D6F9BDE54F6D43BCAE0AE4383100DACA34AF3243E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  Algonaut - Atlas v2.6.2/R2R/Algonaut_KeyGen.exe
- Size 613KB
- SHA256 66a8df91df9f7783f3be30c5332642d5a335c0623cc1cced245cb63b04461b14
- MD5 58ba3b9567cb977f625faeb1fc971693
- SHA1 e4667d8cf0be9a6e0782b43848db930d7a1699c8
- SHA512 00dc46a33f1eb2f819a6d954531dead4b28b4faad4d0fad5bcd87f3d9b6b24a39394dbc46b10434df3d3899bf4b00fe84a310b0bc0fdfcea72797e4ac1904c6c
- SSDEEP 12288:BX4Lc9t2Sll1SZgRyQEvg3osztqhNCKJUBOhA+paZWN9djRk:B4LcL3UgRydvg4sztwXPzc4O
- TLSH
  T108D41317FED08573CCA2473188FF8922297B6D66C6BA2B4B66C4B73C19B2343551B643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral2
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/R2RATLASKG.dll
- Size 312KB
- SHA256 641a3752546f3a2edf4e11a8bce80a1926d2465962cd832703e326cc3cd8ae2f
- MD5 4e66eb25dec14586623c82069930146f
- SHA1 0ea668cc15d4d94bd6a77504d4e95c4e5d5e4c2b
- SHA512 fa956ec5bebd22bf365a6748b0ca9ce0021bdc6739fbfbc3699e0c558cf3637f7a8728b20b3482b4010eb628fe0a96f02522b99da0b36cebe270d6455d8aa853
- SSDEEP 6144:750GdGEbE59069hVkCZ5mlCLCPTI6vnmp0ySBMgl2XBZYR2P7:VtwEb8FVkCZJuPxZySyfBaRS
- TLSH
  T16F64AE10F891C03AC66E04705A79DBA84ABDB8700FF1E9DB77D41EAE5D31AC0972671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $TEMP/keygen.exe
- Size 441KB
- SHA256 2aa5d573846ffd1bd27b5d9043c942ffe84fb6290a27e67ae90271e33feca48a
- MD5 02b0fc712fd8e32abb6c1103e95390ac
- SHA1 c95227e2662990cabee618bfc3e5ced7a5379a78
- SHA512 240e6a3c58c13e9792ba0f7523547c04b94fd395f8d22e40922cad7d8b0806c0666fdad9ea2659fe71e10a68075da053fd86cf10e6cbf17d5f4547cc789e138e
- SSDEEP 12288:ic/kEPDonR6Y436vRzAIe9UySHyHQ0D3d:ZLonR6Y43Ire
- TLSH
  T13EA4F711E26215FDE8FA133E265BB715D212636C0B67F2D3875B1A1A89311C342F9BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Algonaut - Atlas v2.6.2/Setup Atlas v2.6.2.exe
- Size 85.6MB
- SHA256 2cd23c8b8ed837e2581a86da2e690e31c1fa9a321e6665df930dad90639c657e
- MD5 7dc704db55efd39630f95e2341bd3ae6
- SHA1 521247d4f21b568cf94638a325b45d0b24f40014
- SHA512 ab27b774cc1d9a56fc081c6763b5d2a674cdde87d29734a6ffc8cb826b2f6fc9d6fa28d5877cc8ba4b4792f856a2eeedb06b96a8771978e324d2990a25d34e50
- SSDEEP 786432:4rozrLrp5TakH7pd+5mm9ajuaZAMDH8FGa4nqdW/FKopblQaIEI:zrakl0aj5Aea4nqWiaI7
- TLSH
  T11818CF47B29910CAC0A6C17CC6979E27E332B86557308BCB355DA76D3F27BE04E7A250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6