fdf53ba6309dca2c76d41867335a136ebb74346216e80664de136e46581b27d9

Sharing

Copy URL Twitter E-mail

General

Target
ValhallaDSP_KeyGen.exe
Size 517KB
Sample260809-rsqtessxet
SHA256 fdf53ba6309dca2c76d41867335a136ebb74346216e80664de136e46581b27d9
MD5 6fcb45f0965d2e14accd797c02d55962
SHA1 f3c05c2b7c0e98a62bef0146fe5e80413bdb2a01
SHA512 dcf28da49e4a6aa2bc582a64be0a70d3444476e3c0c19ebdb5921354d7a92c017c61d3e5b168866e272c32b44b22489ebe1edf0738a74aabec08e70ce2144e40
SSDEEP 12288:BX4Lc9t2Sll1iwizuhIK8sZFCWHlev/amZNQN58OJoWJ7YUdA9ePQpNT:B4LcL3iwiXKvZHFaNG58OuWXA9aoT
TLSH
T129B41215FA6485A3CC7247B158FFDE617AB7AC2E97AA19472384771CF9B3381810B342
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  ValhallaDSP_KeyGen.exe
- Size 517KB
- SHA256 fdf53ba6309dca2c76d41867335a136ebb74346216e80664de136e46581b27d9
- MD5 6fcb45f0965d2e14accd797c02d55962
- SHA1 f3c05c2b7c0e98a62bef0146fe5e80413bdb2a01
- SHA512 dcf28da49e4a6aa2bc582a64be0a70d3444476e3c0c19ebdb5921354d7a92c017c61d3e5b168866e272c32b44b22489ebe1edf0738a74aabec08e70ce2144e40
- SSDEEP 12288:BX4Lc9t2Sll1iwizuhIK8sZFCWHlev/amZNQN58OJoWJ7YUdA9ePQpNT:B4LcL3iwiXKvZHFaNG58OuWXA9aoT
- TLSH
  T129B41215FA6485A3CC7247B158FFDE617AB7AC2E97AA19472384771CF9B3381810B342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $TEMP/R2RJUCE.dll
- Size 238KB
- SHA256 09cc1c611ed98944314e3ac99ef4c5568cbd05d60c31bc2fee3877b28afba1d4
- MD5 a2bdcc5daa462c869fe58c6c77216ce1
- SHA1 4a8e96a8ed6e22381664d86c87dcfaa8aa007369
- SHA512 155d4a3985f107c4c656addd169cf674d05b41798ba4218686e66e4d57004da142c68b6968741240ebe31cf995540c77132830ed613e661371832075888f91dc
- SSDEEP 3072:eq8t6hY2ZbNIRlLOXf+3Y+MSUgyz0HWkQUENVIvg++CIWwryfsCTsGtOIT:qt62ONIlSP+IbRAOUEYvLXTsf
- TLSH
  T121347C01B891C472DA6E0934CC75DB649ABEB8504FB0E9DBB7941EAE4E305C0DB3671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $TEMP/keygen.exe
- Size 585KB
- SHA256 1293ffb2805fbd701c104d4b6be5c1a8d831ddbd929157f884aab01487356ddc
- MD5 bc544595d3f5ebd477b88390eea454b1
- SHA1 33ded970dc9a745714473a21afd2c303143d1357
- SHA512 b575a7a9f66c796f25d312d19960257966b694140edf8285e420e70c4233de4f0288564d29edcdfb04db96644d58a3b0be49385de354a68bc32bc5f5a819a255
- SSDEEP 6144:icmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOXEOAaZDCt/qPFo:ic/kEPDonR6Y436vR+OZiSto
- TLSH
  T1DFD46E45DF00CEFFF9B1B23E04A93996C9146F28461265BBF2EE0BF598BD28011E91D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8