515d4a527b61dbf18d67cd236f84ba37e6325601b0099c7e23f3f44525a58b26

General

Target
SonicAcademy_RSA_KeyGen.exe
Size 1.2MB
Sample260907-w277aaaf49
SHA256 515d4a527b61dbf18d67cd236f84ba37e6325601b0099c7e23f3f44525a58b26
MD5 d8843a38b6012deeca8faf61fe2a4477
SHA1 a45f0b047a860795a0ae0b1eb2fde0a18f359524
SHA512 536d20eab3c4ea763f31b71e00cffd4a9e29f132dd3e4b8bba887e33f15f4174a23750420c49e15f4c63ccafdcd7998d35e2c53bc89ad458e1f33c164af8e0ff
SSDEEP 24576:Wo6cLUZxmyg8dOTm7uqX8uIFuI7+qeeiSJhMX2w0rL+lQgeVk1rfEwr1i:WhAixSTb+yiUNX6QgZ1fdi
TLSH
T14B452311B4644AC3E86AC3B600FF96056B3B6E78DA6A5E1B5368BE35F1F371640072D3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  SonicAcademy_RSA_KeyGen.exe
- Size 1.2MB
- SHA256 515d4a527b61dbf18d67cd236f84ba37e6325601b0099c7e23f3f44525a58b26
- MD5 d8843a38b6012deeca8faf61fe2a4477
- SHA1 a45f0b047a860795a0ae0b1eb2fde0a18f359524
- SHA512 536d20eab3c4ea763f31b71e00cffd4a9e29f132dd3e4b8bba887e33f15f4174a23750420c49e15f4c63ccafdcd7998d35e2c53bc89ad458e1f33c164af8e0ff
- SSDEEP 24576:Wo6cLUZxmyg8dOTm7uqX8uIFuI7+qeeiSJhMX2w0rL+lQgeVk1rfEwr1i:WhAixSTb+yiUNX6QgZ1fdi
- TLSH
  T14B452311B4644AC3E86AC3B600FF96056B3B6E78DA6A5E1B5368BE35F1F371640072D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RSARSA.dll
- Size 136KB
- SHA256 13bed07548f65041059f2d93b43719df23c5283d9b8bbddfbf76725a5488595b
- MD5 e8655d19b3dd3efe346d611b4df00f7b
- SHA1 1241a3ca6ad3482ffdefd3a97b114573dc6a8b72
- SHA512 8c6692b0c0a1972deda0eb930016e1c02b129dc56b37db10b4b8e02343e1c4edd0666fef263cfc15887764d88608c12bbe56e0cf17d8368caa91150d029b49d2
- SSDEEP 3072:byDKjHM7jtFjGSzqEmkdiioQy5VHUp4Bnh/f55cYEvd2IuCDfypTDlHWWE:bGK7sjtNqMFiVHU0PcYcYIuCDfyXTE
- TLSH
  T15DD312EDC6A54C36C6DB13B12D8F8ADE8C2D503447BF1FA109011B5F6294664EC1EDEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/keygen.exe
- Size 710KB
- SHA256 8fa29f256dad9db167618f839b1869d2ff48d9d253cb6fbcd9f8cdde585b6823
- MD5 d713927fc8d550ccc0a932eabde94fcc
- SHA1 b137e2651a97105b7603ba3434fdd17b792adb9f
- SHA512 b33a3ede661824e9151b8b4925446247456b016dcce3364ab4ec52556e3f6c24bc815892516233f920789cba45fed572d99dfacde62b2305d0d0256b362d2725
- SSDEEP 12288:7Eb6CmonRVnsQ5ogI/U407L4dTHsCXymCn0sTU5EBtpFgg3MUR:7umonR5fG/U40vIHsCnCdUqjQg3MO
- TLSH
  T12CF4595429DB2DF9D0BFA0FB4D499BB4764E75397A02D4E3B3405B074A242FE0EE1A42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4