Overview
overview
7Static
static
3Keygen.rar
windows10-ltsc_2021-x64
7Keygen.rar
windows10-2004-x64
1Keygen.rar
windows11-ltsc_2024-x64
1123d123.txt
windows10-ltsc_2021-x64
1123d123.txt
windows10-2004-x64
1123d123.txt
windows11-ltsc_2024-x64
1Resolume_KeyGen.exe
windows10-ltsc_2021-x64
7Resolume_KeyGen.exe
windows10-2004-x64
7Resolume_KeyGen.exe
windows11-ltsc_2024-x64
7$TEMP/BASSMOD.dll
windows10-ltsc_2021-x64
3$TEMP/BASSMOD.dll
windows10-2004-x64
3$TEMP/BASSMOD.dll
windows11-ltsc_2024-x64
3$TEMP/R2RRESLKG.dll
windows10-ltsc_2021-x64
3$TEMP/R2RRESLKG.dll
windows10-2004-x64
3$TEMP/R2RRESLKG.dll
windows11-ltsc_2024-x64
3$TEMP/bgm.xm
windows10-ltsc_2021-x64
1$TEMP/bgm.xm
windows10-2004-x64
1$TEMP/bgm.xm
windows11-ltsc_2024-x64
1$TEMP/keygen.exe
windows10-ltsc_2021-x64
3$TEMP/keygen.exe
windows10-2004-x64
3$TEMP/keygen.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
44s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 22:15
Static task
static1
Behavioral task
behavioral1
Sample
Keygen.rar
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
Behavioral task
behavioral2
Sample
Keygen.rar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Keygen.rar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral4
Sample
123d123.txt
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
Behavioral task
behavioral5
Sample
123d123.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
123d123.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Resolume_KeyGen.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
Behavioral task
behavioral8
Sample
Resolume_KeyGen.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Resolume_KeyGen.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
$TEMP/BASSMOD.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
Behavioral task
behavioral11
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
$TEMP/BASSMOD.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
$TEMP/R2RRESLKG.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
Behavioral task
behavioral14
Sample
$TEMP/R2RRESLKG.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$TEMP/R2RRESLKG.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
$TEMP/bgm.xm
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
Behavioral task
behavioral17
Sample
$TEMP/bgm.xm
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
$TEMP/bgm.xm
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
$TEMP/keygen.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
Behavioral task
behavioral20
Sample
$TEMP/keygen.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
$TEMP/keygen.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target Keygen.rar
- Size 820KB
- Sample261014-16kc8stsb1
- SHA256 827644c05ae17a8c625962206fd6d10461f112ff61dc552aebec21a1933ff4b1
- MD5 078f40297b767b1863e44ab18a302c42
- SHA1 7ab076d78e1b2d21c8476191ee02f9643f2e50d8
- SHA512 346dd1fb2309e56c7be8d8667bdcd65a37f29c60a0e9dfc7c10c3d313b42c0584168dd93cc37dfe9e706d858f57fc9035b2d21a3f99ebbe47dd7b2bc07fd0e50
- SSDEEP 12288:1/vA7dUVUwUfvZ3Zi1OXLN93zyMaMDR3xxLL+EXwSH2dKf2L3OlhclN3kXXzbz:1/vWdUV6MSj32gNPKEgSH2Ef2TO4N0Xj
- TLSH T19205239B026CBABE957E529872C3F757199468803877B7715C069B33049F2F1E1EB930
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2728 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2728 7zFM.exe Token: 35 2728 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2728 7zFM.exe