aa70d9b189ab966e25f9e913ed33601b2b7a20fc78b61d500157ef18fe8b70e8

General

Target
TEAM R2R - R2R System v1.5.0.zip
Size 24.4MB
Sample260621-lc5pradv4s
SHA256 aa70d9b189ab966e25f9e913ed33601b2b7a20fc78b61d500157ef18fe8b70e8
MD5 9c16e0e691e8a8e6f8d26574f9e7b9c6
SHA1 bf7beae7e8ccddeddc7d842a6e95da63668d5099
SHA512 a76afa33f9f020246d70817444a42d190432b360c92a2f696180015ab7d8ecbf21f097da489c7e69c634e2c046a940589d09138dd6fddb8b7babb6aed000c462
SSDEEP 786432:C32E/vUp5/rj/43dssP/V5ylw+gapXagFF13tqUF5qwxq9XFr:vE3e5ECsPN5gTZak19qcUWq9Fr
TLSH
T1124733B3B9528BBDE54559A19148F7FA0AA0330EECDE962CC91CB78053244D4E86ED1F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  TEAM R2R - R2R System v1.5.0/R2R System v1.5.0.exe
- Size 25.0MB
- SHA256 dbae303dd98efd87958792933781a22f17f58ea2a70521a5e8a93f329cfc7c39
- MD5 46effc61c65ef9474feeab18d9205710
- SHA1 1e9df6974976b97ff984e8df1f0009b6271d9707
- SHA512 5f2012971d2f2b27eb908f8bacabd793cfb3cf72b5ca9fd0f08454d63e2d2d1f6353a0d1bf2a62d185d45962e937523676bd0d237ca8263fa259cc7e5500fa09
- SSDEEP 786432:JhmwVXsR7xJNLSXXg8ZFPvKpSMLktXYiRP/h9uUm3OkxoZcqt:qw9ivkg8ZtvISNYK/Puveqoqqt
- TLSH
  T1B447333BF28B953FE0692A357576E260493B7B21A8568C1696ECF48CCF350B01D3E647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer persistence ransomware
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1
- Target
  TEAM R2R - R2R System v1.5.0/TEAM R2R Root Certificate/R2RCERTEST.exe
- Size 15KB
- SHA256 c7142fc351a4d2ee9d1e7e1a394d7b323f966f5f6e082feadb812525058d4319
- MD5 3300094d1ce825bb9c08ab40a123e8ed
- SHA1 2f8efb0fa20fed8104eab0cc8b3c2771c97e5b67
- SHA512 9489e787c5344f82fcaa6a27f4761962403f96d1f4406b42301cf7ac2163453c0605f33466bdeea87b3a86a356497407c423f0a3449916f73a7b626dc5ba009d
- SSDEEP 384:DYIIq01gHwHLU9SP64NySkhIqDcg4eCvdg:Dl1YY9y6qLkcguK
- TLSH
  T14262F8C2B30809D6DD5C46305C17DA284F38BE161D91162B32BEFD6B6DB7B94781E272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2