b07e5355c97b11cd165cd66ded426f93dddf75fe852fcf876cfb03c7dc82330f

General

Target
R2R (2).zip
Size 33.8MB
Sample260729-br5m7aek3s
SHA256 b07e5355c97b11cd165cd66ded426f93dddf75fe852fcf876cfb03c7dc82330f
MD5 db946460fd296420c046a5bd6f14ac03
SHA1 c51c74cc32b9d3d51884ac1b886d652e5ec04dca
SHA512 4ef452eed7339b6a05edfe62de7a06ede17b3a6e0dda23f8ab5d077c4d025cae4cb0ff2bce5977702123e5304f3f09ea96464db76bef8aa192840dc6d1dbcbac
SSDEEP 786432:hAzXrMyzr7hz1w3zfbsQWFKBj8J6nPxmPKlxbMhm5:hMz51GsQl8J6nPxmP8RMhe
TLSH
T1C977332CD678BA72AF4CA37563435F0A9E446F9DE88F157EFF9411E0328714AC54222B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  R2R/Ableton Live 11 Suite.exe
- Size 94.7MB
- SHA256 0c5c7fdf4fbdab5f60a01ac6ae5399111e5fc6bbe3b1a3ff34997bfe1fff58f9
- MD5 ec224e9456302cae299fc59401cf651c
- SHA1 ad27bea3183e2321422e3c45e891400bd6e9f88a
- SHA512 258ddee538bde3a7cb3b6f52bf67edf03a24e4f80db0e3bbbccc0df4a201c361dd03bc13b5bacc6aa694458dcf493361153a150a76612cf397fd400baa4cead5
- SSDEEP 786432:Otmeq74CorfbmBG0dPpCyydZFBqMDiKnGjmkxM1myjXQdicJXPZmm:OtmPOfbmBsYASLqrQwcb
- TLSH
  T186288D5A717D41DEE176C078C2D68D07EAB23C5503288FEB12A5872A6F2FED44E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  R2R/Ableton_KeyGen.exe
- Size 1.1MB
- SHA256 72c96f7e2f4823bb9f28944c96aa1b737be20edd52ca97b699085d3498e4ab74
- MD5 5137f6c1b6fec54e3c4fce6261905dd6
- SHA1 2acfa6961576086cb34376222cca49027b77871d
- SHA512 762ccc51cb1f361ec9d44971015bfeef346f5dc0162d241f6e052bcd4ddb201655342fc21a3e8fe12243e678638e086f0c403eb01a6e52530f89f08f29e3e4a4
- SSDEEP 24576:scLyLVBj7bonifxHi8nnM6+uRCy/4cZTKRZiKx9j1zp9KtyUHW:sAOsif1TMC1wcZTK+KZzxUHW
- TLSH
  T1623523152F60D887D8AA67B71DEF46623277BE608817165F2BA8733960F33412D2E1C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Executes dropped EXE
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral2
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $TEMP/R2RLIVE.dll
- Size 701KB
- SHA256 33339fd831b14d39514593cf7494ba1985df6e32dbef166b70d94ebaad78cd3b
- MD5 4ce264468be29f6504eb745d11aa1d5c
- SHA1 072b84cbbdfa4ee945319dd338e171c2078df455
- SHA512 e85885be024b39c6ebb1bc041fcce8545f6266fc26ebb1d2890e3c3a94d987397d67230634c3b973ed9e097ed591ba6577bb7f1cca50ffcd73564db04e3c1dbd
- SSDEEP 12288:0UEARqlP7Vu7N8Oe/6Wi4MhgmIk2xxaoy9kFDH+AYrdshhunRgyGN/o9aWEnLiiG:0U9AlP7Qp8t/6WnCgTwrlRg1vLy2C
- TLSH
  T159E49D13FA81D9B2F5DF003960B7677F8A369D108729CAD38BA178258D312D0663F789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $TEMP/keygen.exe
- Size 469KB
- SHA256 2ef24cb81741bcdcce8fdae0812ecb86a334b0a98160b4c068d2b59913c3896d
- MD5 88fb2efaef130c7256bf703580a414a7
- SHA1 e45068c6282ea2b279767be11dfe35767ec2f9f9
- SHA512 33b5740b568a0c986ca15f6adc08a73e92269225f976776cf424d0e3cceac1eb89e0e26e58fbd3d25bac4ae31f4bc8b9d5a20c9c7c2808c2c24807120c62eb42
- SSDEEP 6144:tPA4GcGvY6Q4rOQonRBVSszRNAOlsR1GGoIbqUJX8xrW3P0++:tpGVQ4KQonRBVrzRNC1v6kc++
- TLSH
  T151A41A6D17DBDC3BC56A06B622625FB4030A19088BFFEAC716444EFE508FBB5417DA42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5