General
- Target rol-cld-re-201-1-0-1-senki.rar
- Size 23.7MB
- Sample260804-3qj4ms1say
- SHA256 b9b502dbf3ba2d043a8af83bf4bb554f701660c73a4ad365fca8d6d114f26760
- MD5 bf19a1548df0e5a605efbffc89108be7
- SHA1 f6c68dbff798a85be993b77c4814dab74ad18cce
- SHA512 6dc38bf55dc95254ed56a87487b64383b10d1d00c9bcdb5553c9a6a098a2e2e86a0e05185ac2a15d85d6805dc57aaabcdab23ce9848a55b43a1ad736157e3d19
- SSDEEP 393216:OV2FSnfJewN22QRJ/Y8gxnogCyblOyCyw2iJIrPGqsidOdom9a3UbcGh/oBivbwY:vF0MnPJ/bglo+oww2YZ3oeaEb3h/onqR
- TLSH T1C54733D32027FF310D350F6FD28E9374BA938AB440295E50698588799E5F8323EFB5A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Roland.Cloud.RE-201.v1.0.1-SEnki/SEnki.nfo
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Roland.Cloud.RE-201.v1.0.1-SEnki/SEnki.nfo
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Roland Cloud RE-201 1.0.1.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Roland.Cloud.RE-201.v1.0.1-SEnki/SEnki.nfo
- Size 84B
- SHA256 f9f76b82acb50e9512e3aa5259bf5509531112b2ac5f1075356ffae403f43839
- MD5 87110b3dc8b06fe736e5bf3d25b57d33
- SHA1 6de4ffaf7d26508178c51fefe38236189538a618
- SHA512 3e043aa81c6f64303bb4cad88189c13c4dc97184a4c823528e860ae6c1f76cdaeda2a259c3663201f12eadb870be7cd6270b4e47cb0dc3973110908689e79453
- TLSH T1EFA012182059713418A65423626089C34372804614040084F64509142022510487D155
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Roland Cloud RE-201 1.0.1.exe
- Size 24.3MB
- SHA256 2c13a0d52500c4bb91bbe8c59f309df96520884a34ba6e683b74ef0e1a82ea7c
- MD5 e521b117e993b696d921698412485abc
- SHA1 37e8ec4a2aaf16107c29b0cb8cc1273b67dde557
- SHA512 96d504c5d954e599b430bf6bbdf5fc3b8e98b2f0a5255ebbc9c67e1a1448c13a7eea2e222f6918a1361dd841bd9318aaec9f7f0985d61d0211c4adeb22b1d855
- SSDEEP 393216:q1Pf7PCwd7OMfT0vcjbVfiCV20I5WPB2UCgNf5Jvu70RT2RStcX:qBf7jTfoEpiCV2JeB2UCgNRJabStU
- TLSH T11047337BF228A13FC5AA1A3245B386504837BA64781E8C1F43FC794DDB725604E3F696
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.