a9b242032721fb841e821c65f9a2faf818233be1a1affe594e7e0dee91e442a1

General

Target
Waves_Keygen.exe
Size 1.0MB
Sample260811-rdahwsvbkg
SHA256 a9b242032721fb841e821c65f9a2faf818233be1a1affe594e7e0dee91e442a1
MD5 3f52b63c2909e62481deaccc3241cf8b
SHA1 8f41a3c6fb79f5bc5818ef5f07d403beca0fd753
SHA512 97748da5697aa7e7cd6f8cebff46f8bb4424cc3459c58f70d4227df0d4164663c7b9610fee0288dc72167c4bfc0ebb7fd51346154a77efabdcd847259d1b5439
SSDEEP 24576:G4UBE4DvjvgYkWCZ8USmGJGOVfYFbQJemoD:vUqUjPkWBsGJGsibQJe7
TLSH
T136351206269000F6DE7C09B7F49BBA364DFA5E268598A18A9FF0734844F3DB19E0FD50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  Waves_Keygen.exe
- Size 1.0MB
- SHA256 a9b242032721fb841e821c65f9a2faf818233be1a1affe594e7e0dee91e442a1
- MD5 3f52b63c2909e62481deaccc3241cf8b
- SHA1 8f41a3c6fb79f5bc5818ef5f07d403beca0fd753
- SHA512 97748da5697aa7e7cd6f8cebff46f8bb4424cc3459c58f70d4227df0d4164663c7b9610fee0288dc72167c4bfc0ebb7fd51346154a77efabdcd847259d1b5439
- SSDEEP 24576:G4UBE4DvjvgYkWCZ8USmGJGOVfYFbQJemoD:vUqUjPkWBsGJGsibQJe7
- TLSH
  T136351206269000F6DE7C09B7F49BBA364DFA5E268598A18A9FF0734844F3DB19E0FD50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2ROPENSSL.dll
- Size 718KB
- SHA256 a03c381df4a4366ccb4adfb16905ddb1f21acd02b325a2c56670428994904b84
- MD5 fc931742500771148d7309413218f50d
- SHA1 09b30320edd1ec262ac57c0d78650473319597d5
- SHA512 51b6dbc48118ce61d0d5a699e0af9cdbda7175c6d4701d60ded26bba32cfde29edf44225f1da6d2726a5801937daaa240343d263fb8f85804840524d82888450
- SSDEEP 12288:4lGlqzQGI84YP44TQ2NvGP0LqDFitIVljf7nS0dYh2g1pLLAMkMMgvW0wtrudq1O:4lGlqz7IEP4nGvGP0L3J1k4+9tRI7
- TLSH
  T15DF48D03BA81D8B2F5DF013A60B3577F4D369D254769CAD38B9078668D722D06A3F389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/bgm.it
- Size 270KB
- SHA256 edd5692a6cfd7cc7499989a92b52690311162920375688c86ccaebfb82e214ab
- MD5 e5f0fb9378b3438c07d7501bbddc364c
- SHA1 aac3281fcb4414f8d2e23fdc9a6a630d9a580208
- SHA512 a0d6cba2f7c0477722b8f6ed0a424887fcd2b939fadd732e20072a8269ec88dd6f32526ad975d9723485c75285041e9a5c6359e33af6c847bc11179316f02827
- SSDEEP 6144:+P44/iWz8OlcoBsRkz+1xprwgbm5H5XZCwpsFDUTm+izsnPb+QoHL:tuJz8GmGNWgHB4gsFM5/PMr
- TLSH
  T1464412295FD38A6BCB98A530234F70CC413006CF3B6BF5B4EA85285E195FFE2169DA51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  $TEMP/keygen.exe
- Size 558KB
- SHA256 c688c18ba20fc7f841ef937d0bc4bdb17dc1d9fa13f2d3dbd367a622f02c2241
- MD5 e4cf90f4a718ff66efaeae9106664449
- SHA1 bc6c639077d99d1d085baa93d08e7bc078873437
- SHA512 ba0f7deb3fc014f4b4771559a138a7e9a0a211ecf24e5289a9ff578e491479a4b6d8777288757c766509a843e1bc24c21d469dda6a9c65da788a7376634226ff
- SSDEEP 12288:ic/kEPDonR6Y436vRpFs0ZOysGQN+zbWQOGsGLCz/5VnnvaAz:ZLonR6Y43aShFPN7GvuxBiAz
- TLSH
  T1AAC4CF8372E5D53AFF8652F66E3546018BB59A08C72BD2E3E2881F4FCDA25E15B31305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery
behavioral5

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5