e5338f0d9bdf9e098fe24121ff9d06c6eeadfea7c29d1ddd6883449e2d4b2d65

General

Target
SIR_KeyGen.exe
Size 460KB
Sample260924-k1xtda1hmf
SHA256 e5338f0d9bdf9e098fe24121ff9d06c6eeadfea7c29d1ddd6883449e2d4b2d65
MD5 11c9fd0206d5e4804882d32d75af679d
SHA1 8247508f0d8b3942a3e4e937e78e6667d0dc5eeb
SHA512 e0b56ae29bffe9ac169b2f9bb7e88c111995f6cf38ec06b27ba65e817d0c270768d955bb033cdf473703d2f74710e7628a209bc9ec8e4ab08bca0477bfd0a6eb
SSDEEP 6144:98LxBV2nA8P9tlASRzKW3Ztns1q1YcA1ticGsx7W6TknlFamGRqCKJvbi7MDhUyf:cc9t2SllJts1fnU5GvyQYve7uSU
TLSH
T12BA41243E9A104D3D4A7A3B050EFEA7133BBBD76CA6317475699BB3629B23431123943
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  SIR_KeyGen.exe
- Size 460KB
- SHA256 e5338f0d9bdf9e098fe24121ff9d06c6eeadfea7c29d1ddd6883449e2d4b2d65
- MD5 11c9fd0206d5e4804882d32d75af679d
- SHA1 8247508f0d8b3942a3e4e937e78e6667d0dc5eeb
- SHA512 e0b56ae29bffe9ac169b2f9bb7e88c111995f6cf38ec06b27ba65e817d0c270768d955bb033cdf473703d2f74710e7628a209bc9ec8e4ab08bca0477bfd0a6eb
- SSDEEP 6144:98LxBV2nA8P9tlASRzKW3Ztns1q1YcA1ticGsx7W6TknlFamGRqCKJvbi7MDhUyf:cc9t2SllJts1fnU5GvyQYve7uSU
- TLSH
  T12BA41243E9A104D3D4A7A3B050EFEA7133BBBD76CA6317475699BB3629B23431123943
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RSIRKG2.dll
- Size 54KB
- SHA256 24863ef03b9e2d59a86d13cbb1cf11b71f15f27ccf991b66f9ca529cc4ad34a9
- MD5 860ceb6259942f4c214ba91502a37f37
- SHA1 e6e9c7ae2072e279c6d54d0e01c98b735f000386
- SHA512 9286aeb0535bc9aa18b4fe24e45ae159c64cf394e3dbe52a01defab079b4f46cb8b9699a402aa57e4c667ce0c642cc64ad56b9943492ccfc29edd617db65f19b
- SSDEEP 1536:wCwPU8M17FS8oJW2QGGMnToIfWP6krIgr9:+ynSFQngTBf2Ugr9
- TLSH
  T188438E017A6285B3C3584330EDE5EA35A3FF66551EE059D62F9ABB081C7AA6173103CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/keygen.exe
- Size 491KB
- SHA256 e43e891422899a8585b7d400cd48b96faeb75b9295cfde77ff1f0e4351a19444
- MD5 d28b75b09e347c90996985a656cc61a1
- SHA1 45b1de4870b12e226d356fd7d3a5973968688cc2
- SHA512 2f0bfe50336d7a40cbde6a593ed50afbe54aeb0776c06555c0f5436c08c7fc4207d770002b52acf130f39be23f98633efbf0c1bd9dc1b4e72d200008272a9583
- SSDEEP 6144:bcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOIon2gH6urmJpX8P9:bc/kEPDonR6Y436vRYJpI
- TLSH
  T1F4B46F50569180BBF7DF0339E8636E06C23E061C43E2DEDFD2DB0E8D54952EE25E1A5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4