Overview
overview
8Static
static
3crack/Spec...en.exe
windows10-2004-x64
7crack/Spec...en.exe
windows11-ltsc_2024-x64
7$TEMP/BASSMOD.dll
windows10-2004-x64
3$TEMP/BASSMOD.dll
windows11-ltsc_2024-x64
3$TEMP/R2RSS2048.dll
windows10-2004-x64
3$TEMP/R2RSS2048.dll
windows11-ltsc_2024-x64
8$TEMP/keygen.exe
windows10-2004-x64
3$TEMP/keygen.exe
windows11-ltsc_2024-x64
3crack/Unti...22.rtf
windows10-2004-x64
1crack/Unti...22.rtf
windows11-ltsc_2024-x64
8General
- Target crack.zip
- Size 918KB
- Sample260922-ppqcdaed46
- SHA256 384eb1ca2ff09a02e2980e27b9f619d9e605eb832585b2b954ee990053049bd4
- MD5 8e51b6152d577265d006e42327b2510a
- SHA1 b247147bd326f5be05bdcb3a2dc0ed13fe3fe7b9
- SHA512 6270e1c1d733ce4f4c14267f88b1c5cf81c382ba16dbdbe1c02ecdafc6377874d7ef97d7984cc197614b453f897184cb8916b59be504553a36c135d4588df41d
- SSDEEP 24576:BRly7WQ8ERJmRDg0H6UIj4ix+Gl3Ylw+QrJq:BjyrR8DgvkiAGVYmrJq
- TLSH T1181533DC28EDB485E18D52E8E25F1357CA649BD88A437C174F7AAF2FFC308C18199589
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
crack/Spectrasonics_2048_KeyGen.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
crack/Spectrasonics_2048_KeyGen.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$TEMP/BASSMOD.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$TEMP/R2RSS2048.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$TEMP/R2RSS2048.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$TEMP/keygen.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$TEMP/keygen.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
crack/Untitled2222.rtf
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
crack/Untitled2222.rtf
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target crack/Spectrasonics_2048_KeyGen.exe
- Size 984KB
- SHA256 53b654b94187818feb15d1aa74673f64fff1fd9b1fc0d4d5eebf3d41faed1965
- MD5 ff3ef20b9f9cc9dbdf38eb1cea294670
- SHA1 00931b6167fc4bc7b7a4f879854af3fba1082d93
- SHA512 6cbd31974c24b99bab8b519aff9dd65dff0e3062177bb73b0f4c15def4007c9e942b65e9aac90b5b65b21f508adbd238cd663624b6c9ffc6441e532558b1c9c1
- SSDEEP 24576:B4LcL3lJPuBWigE3JcDDM0H64ExawPuGl3YdwMQZhG:WLA1Ruh3uDMBMwWGVY+fhG
- TLSH T1D7252354BDE49493D46A03F4D5BF85235B79BF68CA62390B07A9B73EBC72282410F642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/R2RSS2048.dll
- Size 80KB
- SHA256 cb052f8872ccb66822c7948fd08674fa2675dce2d1078911ce84401e65de4321
- MD5 86a55609ce310b5acc2045d08a5e8e90
- SHA1 3bd0aca4db0df91b86238d1141eb243771a6bd65
- SHA512 7863d5a3f8b2286a194e7c71aed5a9c1c3126e1fedc5c4d0ad5bd40ddfa244df1590fd42c5bf9795164790012387f97291f1494eb45f4776344d167f22713581
- SSDEEP 1536:vO3Bu94BGEAVEuDEgg4mQvpS4gvTLxM0:6u9PpKYI
- TLSH T18A836C60B5D2AA72E01A267D330B5B571F7FF6340552D097DBE80D4A99B22C3CF2A193
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/keygen.exe
- Size 498KB
- SHA256 dcff5d66415d66b1e6cf4d53d50c5cfcff063d40a1e0d2cafe902b2c6fac18fe
- MD5 160bf91594bddc7601ae6e97ddbba09d
- SHA1 f2f8df8b9e0de82adb7c1dfa00245d5ca017177e
- SHA512 a0d87575d3bb489aaba648bbb0dcf0e514fde14f6c47d82390cb600c08d71f12c0f60487d6fd7efc915e033175214cdda0dfe43e10bf63cc02d5403b28f5792d
- SSDEEP 6144:icmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOSEXn7qVkjvBTyfiZXjKrf1U:ic/kEPDonR6Y436vRBXn7dbfOL1U
- TLSH T10DB4D80A8D91D9ADF9D70B3404C36D19EC39627C2B5890EB83E3173B7529BB601E15BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target crack/Untitled2222.rtf
- Size 501B
- SHA256 e7ef0cb2e0ea0de31c9f580aa2076509ef2f29acfc614588324767bd75251ad7
- MD5 68fa9ef42bb65cf9e4ae97c96e90b883
- SHA1 9d94040dfb4a06b0c7866d1b79ade2949009d590
- SHA512 e915f2eb5dc4746d708d3351128b96fec0eff786e3081679583f76324d5dbfcd0ba829947ed8aa184e82454eb47b8eaebb0b89ed9bb0e63c8f6572eea699c33f
- TLSH T12DF0057BC040D17162C7B03D9450897D56564351D142ADD6F82017F596210E83BC5947
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.