a7b61500d7a9ed4c5fd463a477d665c1243c5505c826241f3acfd5ad5156637d

Sharing

Copy URL Twitter E-mail

General

Target
CredlandAudio_KeyGen.exe
Size 700KB
Sample260812-jqbbyscn9t
SHA256 a7b61500d7a9ed4c5fd463a477d665c1243c5505c826241f3acfd5ad5156637d
MD5 4e7967d4d02b045a279c32ad836b46d9
SHA1 493ee48cb759dd7d0d987776e8e3299d5102b003
SHA512 5e28abbf822ea4d33f9537ba965d9e5bfd8dd5c43f49200b7bca1a5fed87b796972398b7244acd157e78c7fe5337bb6f93486f42afe3a01e24fac61408986b29
SSDEEP 12288:XYkc9t2Sll/pS3XmuyY756WvJKIwNsOgLYzFBDO9v7yhvYqsgHE0G:XYkcL5AHPydDw8i9Dyeqlc
TLSH
T180E42303FE7480D3D9774B7168FF861A2E39BD26C926168BA399B73D6633241502B347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  CredlandAudio_KeyGen.exe
- Size 700KB
- SHA256 a7b61500d7a9ed4c5fd463a477d665c1243c5505c826241f3acfd5ad5156637d
- MD5 4e7967d4d02b045a279c32ad836b46d9
- SHA1 493ee48cb759dd7d0d987776e8e3299d5102b003
- SHA512 5e28abbf822ea4d33f9537ba965d9e5bfd8dd5c43f49200b7bca1a5fed87b796972398b7244acd157e78c7fe5337bb6f93486f42afe3a01e24fac61408986b29
- SSDEEP 12288:XYkc9t2Sll/pS3XmuyY756WvJKIwNsOgLYzFBDO9v7yhvYqsgHE0G:XYkcL5AHPydDw8i9Dyeqlc
- TLSH
  T180E42303FE7480D3D9774B7168FF861A2E39BD26C926168BA399B73D6633241502B347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $TEMP/R2RDEVMKG.dll
- Size 270KB
- SHA256 e2166f6e709420a126985d0540a5ee29daf5353f817316ebdbf29a4871a02623
- MD5 da742279eddf4dc5015f6b9eed396364
- SHA1 13cd1b8fd4bb85fe205d6bf2aeb512ff29ff5db2
- SHA512 e3deabc3eeb7c0aa48838543e561c0fdd1cfc1eb625d015ca22376d5e24d856b145279d00ebb3f352ebfb8b83c3245f04924e878561807b96fa4be73664f6af4
- SSDEEP 6144:Is/WOhJYU66G16WyO8hvzbhmJQdLvqzTBqZi0X3l:vWOO76S6b/9z/LqzT4g0X3
- TLSH
  T19244AE01B480C032C6BE02314AB5EB755ABEB9700BF1D9DFAF941E6E4F725C1972265B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $TEMP/keygen.exe
- Size 498KB
- SHA256 e918838e49c7259f6e9b8bfdf3d22e5ef2631ee0a8dda97aeeff3ed7b8ba8560
- MD5 20f5ce1b9a9f0ddb89eee2ac92b21fc9
- SHA1 9e380265a1ef99ba14550c4261ad3f76ff0693f8
- SHA512 67c25d6addb8fb3638e64783e329086a21e43a71838b52a1d9125becac840b8a6373d8d48efc8f6ea6e37ddff3b2f8fb096b0a12e596453afe55bec3306cd9bb
- SSDEEP 6144:pcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOGEWfQ+FxV:pc/kEPDonR6Y436vRVW4EV
- TLSH
  T192B4D90AD55185EFE4F5433C11C67609C814637C8A27E0FFC2E72ABA4479B9B01AA5EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8