General
- Target LennarDigital.Sylenth1.v3.0.75.Incl.Patched.and.Keygen-R2R.zip
- Size 96.8MB
- Sample260706-1emdhsbx9x
- SHA256 5d5a3ee47d0b347fdaff898c41c8b639298f6b46e427c3b0f3c6a0b6dd9aac9d
- MD5 7e6199b10d8ac2a6b3233064f1743667
- SHA1 41a1fde0f6eb5f1bc1b30486e59f70fc32edd887
- SHA512 62dfad9c8047ab0744d161616019159908144a1bb50add70ac7f3c2ff19193b12e8d728b68b96178c2311ee6cd79aad1f6d9282aa0194df4bf4e1b38b8524574
- SSDEEP 3145728:6I85KaW9KkGcAjZ3TX1pIUh/PdrAicIooCWnhtSkEN:K5KaW0t1jXfHndIRoZg
- TLSH T13728333150A7CD0523DE7AE502B9360E13A6206DF9E9CE3AEBFC5A94519376140F8D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
R2R/WM_Sylenth1.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup Sylenth1 v3.075.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
TEAM.R2R.System.v1.4.2-R2R/R2R System v1.4.2.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
TEAM.R2R.System.v1.4.2-R2R/TEAM R2R Root Certificate/R2RCERTEST.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target R2R/WM_Sylenth1.r2rwm
- Size 600KB
- SHA256 cf113009fe6a6b4056b9dc62bb70a2da999aecdbd46fbf62347e966af5b9f79c
- MD5 ef80e6a026ac108845d0d02841d75799
- SHA1 fe49f31a7843bbe796a5922daa936806edf1f768
- SHA512 80db916963776f6416bb6bfd400acc0c22c616bcff1345d35a681cc7cf6ab161e45204743c821d58e2d746ed499207ca3e7462f592eb345e9645690d41646bf8
- SSDEEP 12288:fm2JtN8cQOR+sfBbvtPD/jWZW4Juav15kdsbY45N8XnV5/w9phYeY:fbtN8cQI+YlvMZEelzSnV5/w93a
- TLSH T15AD4234233AB53CCD7E25E399BA3181DDFB8706440CA2E6FE7580AA50CC35BE1645B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Setup Sylenth1 v3.075.exe
- Size 76.8MB
- SHA256 8ab1f0faf8ac173e10f1aca7408927fb0fa4e3ff9c90f57abbfcbb8b121977b5
- MD5 92633ec0d925fda7303041db50fda36c
- SHA1 a3281dcd4ea0ae849c56324628e0aadece42ed4f
- SHA512 770d8d54df229fe5d0c698191973ce6ef8a63acfdf28e3768b620c156b4f73dbd2d15c9c8ed8729af7d6542e4525da4e050a8dc36e516cd5a95a0889548ba5f7
- SSDEEP 1572864:ONKn0ouMUYLCc1ApNdtruOsDz+FzGsv+KiTuhWU0N0CjU0Fua6YL:saTL1kdaOsDWhjiTqn0CCjxBP
- TLSH T1A50833E35E8757B9C0F30633269362447495F63C6DE10816EAF5E804EFE0B35158BBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target TEAM.R2R.System.v1.4.2-R2R/R2R System v1.4.2.exe
- Size 24.7MB
- SHA256 857c5e766d34da596b23e6efd0abda756a34f0829419b1fe755638bba56603b9
- MD5 6517264fae1fa9a6a022f92474e375fa
- SHA1 46bacf1fb4981c7912649db1f4625b898f4bcb59
- SHA512 a39292ed06f0b9e49109352e7a9013b993e68448852a7208b653d3e8655166eef0230c467a545e1f87999a85c21a7953e638b87fc86c809edf18a61bcb9a5048
- SSDEEP 786432:DmwVXsR7xJNLSXXg8ZkdP2vlcuzB+4LhYN/uTszqs:yw9ivkg8ZkdOvlcuzB+8Q/Is
- TLSH T18447333FE28B963EE06D6B363576A214493B7A3469164C1796ECF48CCF261700E3D687
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
-
- Target TEAM.R2R.System.v1.4.2-R2R/TEAM R2R Root Certificate/R2RCERTEST.exe
- Size 15KB
- SHA256 c7142fc351a4d2ee9d1e7e1a394d7b323f966f5f6e082feadb812525058d4319
- MD5 3300094d1ce825bb9c08ab40a123e8ed
- SHA1 2f8efb0fa20fed8104eab0cc8b3c2771c97e5b67
- SHA512 9489e787c5344f82fcaa6a27f4761962403f96d1f4406b42301cf7ac2163453c0605f33466bdeea87b3a86a356497407c423f0a3449916f73a7b626dc5ba009d
- SSDEEP 384:DYIIq01gHwHLU9SP64NySkhIqDcg4eCvdg:Dl1YY9y6qLkcguK
- TLSH T14262F8C2B30809D6DD5C46305C17DA284F38BE161D91162B32BEFD6B6DB7B94781E272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10