General
- Target KORG_Keygen.exe
- Size 741KB
- Sample261002-seq3pssdpb
- SHA256 bfe0a21c1bf736669a948a013f91c2ffee36a54010cad3a2b439cb08156e0659
Score
8/10
Malware Config
Targets
-
- Target KORG_Keygen.exe
- Size 741KB
- SHA256 bfe0a21c1bf736669a948a013f91c2ffee36a54010cad3a2b439cb08156e0659
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $TEMP/R2RKORGKG.dll
- Size 234KB
- SHA256 3266c314d75cdebaf95a8c395a9c3874c6884f252179f8da82958d443f88fc71
Score3/10 -
- Target $TEMP/bgm.xm
- Size 493KB
- SHA256 f4e6e08e4a8d34aba80d7d1f98163088aef9635fcc72203248381b6e7fa20440
Score1/10 -
- Target $TEMP/keygen.exe
- Size 542KB
- SHA256 9d9ec5440d650dbe72528dd6450a815d6da5db5aa3db9849f213e276be7f8109
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.