General
-
Target
r2modman-3.1.45.exe
-
Size
77.0MB
-
Sample
241119-egbh5s1apq
-
MD5
1444b0a413b5a950bcdb41069dba15f5
-
SHA1
01dce10bfbba8d196237e577ca7ac80ff7bdef3a
-
SHA256
38489bae8a9c1bfa391f1c71f3b132ffbea81a8c70189bbf0c842c49dff3fd48
-
SHA512
6d59e4044e25b445651dda9c6613329d9b858da6f78ac367483ff7c18f9380268011d90d189d1707a23497c86a208a940b9d3955503043ca26ba05905b7b016d
-
SSDEEP
1572864:+JkWM9n4eDJDdaliSFfsgYu3mSvkHBwwjoBStIT7LMaOgZl7:GP0dDja4SFf6u/x1MST7oaNZl7
Static task
static1
Behavioral task
behavioral1
Sample
r2modman-3.1.45.exe
Resource
win10ltsc2021-20241023-en
Malware Config
Targets
-
-
Target
r2modman-3.1.45.exe
-
Size
77.0MB
-
MD5
1444b0a413b5a950bcdb41069dba15f5
-
SHA1
01dce10bfbba8d196237e577ca7ac80ff7bdef3a
-
SHA256
38489bae8a9c1bfa391f1c71f3b132ffbea81a8c70189bbf0c842c49dff3fd48
-
SHA512
6d59e4044e25b445651dda9c6613329d9b858da6f78ac367483ff7c18f9380268011d90d189d1707a23497c86a208a940b9d3955503043ca26ba05905b7b016d
-
SSDEEP
1572864:+JkWM9n4eDJDdaliSFfsgYu3mSvkHBwwjoBStIT7LMaOgZl7:GP0dDja4SFf6u/x1MST7oaNZl7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-