General
- Target Effectrix.zip
- Size 7.7MB
- Sample260808-bdxenaxalf
- SHA256 a82135042409fc945a0528f0a249d81220c66cbc132538d804b30082b272a298
- MD5 358823f3d1a2d7cee5ed4571c248f225
- SHA1 0182818bbcca50b6f5bc1664ddbd936ff7e0ceb3
- SHA512 bff100b7ee86e02678eb53dbb69569979427e1f4b495056dce5b342d7c2b982f5b3e8d9a3e292225cb8c0dae5d8cc725ff786b67a27fecb0eb531ff29a022ef4
- SSDEEP 196608:vBKJK6bACY9rnv5zXoUk0x9krdVNsvBncBs+rUWeaxfEY:ZNBRbnFuVpB2qEY
- TLSH T15886339F876F036478C267CAA05173FD435F340AAE60D6D49A5CAF44AEA984816F0F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Effectrix/Effectrix.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Effectrix/R2R/SugarBytes_KeyGen.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
$TEMP/BASSMOD.dll
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
$TEMP/R2RSBKG3.dll
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
$TEMP/keygen.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Effectrix/Effectrix.exe
- Size 7.9MB
- SHA256 b7ce3d98e042faa8cdf4ac8602d6558fb2022b5cb3bffbab31b4efa92ee8c747
- MD5 29f6e9605ce8ca415f172d68a9ad3c98
- SHA1 3f73fa5e4f9adfefc51c18e1873df492b255924b
- SHA512 7310ac9b34604382d0dfcbf46fc32669fd74d732c9d20738280a8b5d7b7e0becb56ef0e3ecd965e5fc4cbe4390db6cb9dfcdfc6f9e935e8968a19d5833f5402c
- SSDEEP 196608:iQSJekV6M8L3frnNbu8K+3/SxF7/Y3V/CfQouRxeWA2FJ:BpXj9Tzy7XfPuWm
- TLSH T1A1862327B299613ED49A27354173A06055FFB66DF812BE1667F4C88CCF660C01F3AA36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Effectrix/R2R/SugarBytes_KeyGen.exe
- Size 343KB
- SHA256 4f41d7ced3b8ae60891c49746d8876e82c1459638a992e4698f9fc488b09e638
- MD5 4bb7741219995ebe40393a302adf5a27
- SHA1 31cfd0025dcbe959bbce900f24ea48ce50c3e4ac
- SHA512 2ad5d2da52f4b0f142dc59aa522a5e0d0a7b5119d14f89eece512f1593cf58c4d34760725b56217c16868665f69946c760b8b37a7ec42841587ccb404975505c
- SSDEEP 6144:iay2nA8P9tlASRzKW3kcxuQcHfKEUP1Z2hsXueFv4fgy:sc9t2SllUCuJHfKX8sXrZ4T
- TLSH T146740142F95004E3CDF7477018BBEB2137BB7D169A622A8B23E9BB347973242951B143
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/R2RSBKG3.dll
- Size 2KB
- SHA256 46c62945f5d31b06609b29dfbf677dca0b12456e4ff737817f9965434265d208
- MD5 2b7b334e1ad9155a5248bd73c5a1ca5e
- SHA1 3b04ba9d0fca206d552c8bb979afa0917d134f44
- SHA512 c196290d1550f00f561798ff5e7534a40f85ac2848f0a8c6d2a0208ac97ba9c9c155df95f50c16c01303f49d5f1f05b2cf9e58570f17b1347808402690604ab6
- TLSH T1F251CE97B3B549B3E11C07BA8A93D58870BC6B2457D6C30619541A0A38C0D1E28AAF87
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $TEMP/keygen.exe
- Size 212KB
- SHA256 6bd227f2cfd2c950db89dd92facb7a496fd8de1844bb5184d161fdf3c73262f1
- MD5 16b3ed73391d8024488f7dad5447c414
- SHA1 4a5d3087aea29962eb9d7877dc897d28b1a9329f
- SHA512 a046b1e8982e02655a9828c382f1e80dd0ed9b6f0e663bbe6161374b19aac291fa9d782dc9cb785346b9024daf91bab47b390733b122a7c1f2c35fca6171f2e2
- SSDEEP 6144:tPA4GcGvY6Q4rOQonRBVSszRNAO5Xd0WHUN8u:tpGVQ4KQonRBVrzRNXRU9
- TLSH T1DB24AF3BA7F2C1B2D85B317809BB67FAB73176040331D9E393542E5AAD213D095372A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10