General

  • Target
    crack.zip
  • Size 918KB
  • Sample260922-ppqcdaed46
  • SHA256 384eb1ca2ff09a02e2980e27b9f619d9e605eb832585b2b954ee990053049bd4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      crack/Spectrasonics_2048_KeyGen.exe
    • Size 984KB
    • SHA256 53b654b94187818feb15d1aa74673f64fff1fd9b1fc0d4d5eebf3d41faed1965
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target
      $TEMP/BASSMOD.dll
    • Size 33KB
    • SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $TEMP/R2RSS2048.dll
    • Size 80KB
    • SHA256 cb052f8872ccb66822c7948fd08674fa2675dce2d1078911ce84401e65de4321
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      $TEMP/keygen.exe
    • Size 498KB
    • SHA256 dcff5d66415d66b1e6cf4d53d50c5cfcff063d40a1e0d2cafe902b2c6fac18fe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      crack/Untitled2222.rtf
    • Size 501B
    • SHA256 e7ef0cb2e0ea0de31c9f580aa2076509ef2f29acfc614588324767bd75251ad7
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks