e3114f0051b8732638877f5ec423b27aaf3c4b8da0279cb1e531066f3a948d60

General

Target
WavesFactory_KeyGen.exe
Size 331KB
Sample260907-jjclfa1hld
SHA256 e3114f0051b8732638877f5ec423b27aaf3c4b8da0279cb1e531066f3a948d60
MD5 8817ffb2df1fa52aa522658ba52cd7c5
SHA1 c894127903710601e61281a3c34f1f5e0ece97dd
SHA512 74bfc86c4b8fb1d2d3b190fecd4289b4f031dafea5c3818518c863b74f1ed1f4323592829d7a58471a438f0805a3f29388aa63c34a74a2f402fbcbc6430fdf35
SSDEEP 6144:iay2nA8P9tlASRzKW3kM8+MNTmAHPSv4UCLCyazq7Q/adMyGvf4g+:sc9t2SllURhN6AHDCyaid6Yr
TLSH
T11C741262FE9084E3D0B687B058FBC9A23BBB5D058665168B33D5BB3975B3382501B643
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  WavesFactory_KeyGen.exe
- Size 331KB
- SHA256 e3114f0051b8732638877f5ec423b27aaf3c4b8da0279cb1e531066f3a948d60
- MD5 8817ffb2df1fa52aa522658ba52cd7c5
- SHA1 c894127903710601e61281a3c34f1f5e0ece97dd
- SHA512 74bfc86c4b8fb1d2d3b190fecd4289b4f031dafea5c3818518c863b74f1ed1f4323592829d7a58471a438f0805a3f29388aa63c34a74a2f402fbcbc6430fdf35
- SSDEEP 6144:iay2nA8P9tlASRzKW3kM8+MNTmAHPSv4UCLCyazq7Q/adMyGvf4g+:sc9t2SllURhN6AHDCyaid6Yr
- TLSH
  T11C741262FE9084E3D0B687B058FBC9A23BBB5D058665168B33D5BB3975B3382501B643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $TEMP/keygen.exe
- Size 469KB
- SHA256 addc7c7612961e8e7f538919f2ecadb3ea604b8656e9cf2272a0ab9f2fd831b5
- MD5 5921af8dd516fb9fa50c6b3b669f56ee
- SHA1 465473bbe54f91f8daca9c6401789a9b45832e25
- SHA512 8e1c33d03f1f651ec62da97695b411bc144fb185ad7d67b652675d5e890f3912111b68975516902df08ec6df6520c36808c09e2f4fbc7b4c8202ef89f0a84611
- SSDEEP 6144:tPA4GcGvY6Q4rOQonRBVSszRNAOFgT3uapYiWQe4LwOJSAt:tpGVQ4KQonRBVrzRN9RF4LwOJSAt
- TLSH
  T168A4B90B773A4592F8AA1131308F29C3E279DB39231BFCD2A7B1C63564E57863D2B552
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6