17bfda2d300d5321642789fd5b826318735766d5e5d5c9b2e7c93e520ad87881

General

Target
KeyGen.exe
Size 708KB
Sample260930-tf4wmaca65
SHA256 17bfda2d300d5321642789fd5b826318735766d5e5d5c9b2e7c93e520ad87881
MD5 e4ad77c21fb6497dd469e9e50036832b
SHA1 9275ac1286c9ecec3e704d8eea4708295dee1819
SHA512 1a4addaaa94aedfc57378c393443ae67240ff0852fd9a1fa4e44a12832505ae0d6c256f419cd677dc3575b196b68d4b688e4b8291267523a58359ca8e5d10d43
SSDEEP 12288:XYkc9t2Sll/3Mn6WeH3lgoN8YWo/Pv7vnXvWNqTf6WfydeLPwsgjrPO9:XYkcL53Mnmr4E7n/WNqundIwsg+9
TLSH
T1F0F42351EA5945C7C8A30B7114BFAE5232BA9E390AB3274B1359BB3DF4F3351121A783
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  KeyGen.exe
- Size 708KB
- SHA256 17bfda2d300d5321642789fd5b826318735766d5e5d5c9b2e7c93e520ad87881
- MD5 e4ad77c21fb6497dd469e9e50036832b
- SHA1 9275ac1286c9ecec3e704d8eea4708295dee1819
- SHA512 1a4addaaa94aedfc57378c393443ae67240ff0852fd9a1fa4e44a12832505ae0d6c256f419cd677dc3575b196b68d4b688e4b8291267523a58359ca8e5d10d43
- SSDEEP 12288:XYkc9t2Sll/3Mn6WeH3lgoN8YWo/Pv7vnXvWNqTf6WfydeLPwsgjrPO9:XYkcL53Mnmr4E7n/WNqundIwsg+9
- TLSH
  T1F0F42351EA5945C7C8A30B7114BFAE5232BA9E390AB3274B1359BB3DF4F3351121A783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral1
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $TEMP/R2RUHEKG.dll
- Size 3KB
- SHA256 940f041a89d78bf62b32771023553f9f3b867d58dd87af679508fff6ed0e9144
- MD5 abcbaa94b4d828f5c3080c5ddbbbf403
- SHA1 42f8010079fb6222f97557fff9377a7276189968
- SHA512 24799c073c878f9d2fbf0b8e01dbe0abcf183b950dd991e7a504cfb5f1d370edc558896b7a4607271569bd2fa512b5d76e6f94155955da5bf67e0a8a12a75465
- TLSH
  T149712073B7B646B6EF39473D1643F69C62F9312013299B48678310963C64CC2752BF55
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/keygen.exe
- Size 554KB
- SHA256 b98872bfda93afc1c34ead787762425db922b557b5526e8d0b1e10a4bbeb0b57
- MD5 ba7e85562433a89ce3fab455644b3d44
- SHA1 d84aa7a4128af9ca4b535d17f498f2e70bb5879c
- SHA512 4edcfa12c003215bd4f983ffe879fcd336f0cd167ef0708f8e28d7eec6db245c59324026821d020de8df7f0a711737a5b0ec56c48e0de7bfc0d3a91272524dad
- SSDEEP 6144:bcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAO06/lDuy:bc/kEPDonR6Y436vR1/Ey
- TLSH
  T1C2C45D4DEAB185EFD8F2133B044A2AF4E5A1A32D6751D0FF92E325B443753E6C4246E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4