General
- Target IK_Multimedia_Keygen.exe
- Size 431KB
- Sample260910-l4eyea1fqb
- SHA256 7aa7df9e468b053347bc480832633f929335d2ac3c975ceab5d1151a85e66fcf
Score
8/10
Malware Config
Targets
-
- Target IK_Multimedia_Keygen.exe
- Size 431KB
- SHA256 7aa7df9e468b053347bc480832633f929335d2ac3c975ceab5d1151a85e66fcf
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/R2RIKM2.dll
- Size 6KB
- SHA256 f0daf110506df054c349be136157fca6b534bc36b6029fbd112ce9fea5772bce
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/keygen.exe
- Size 604KB
- SHA256 213c390e325bf4d981f5193a17ee5fb975ea290a9bff15c33848ed597306f632
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.