857a29c1cebd08296907a264f3566c6c6ba36c75b72ebd03c5ee26f6302494f7

Resubmissions

09/08/2026, 22:46

260809-2p542swhmb7

09/08/2026, 22:43

260809-2nhx5aep2x7

09/08/2026, 22:39

260809-2kxbcaen8w7

Sharing

Copy URL Twitter E-mail

General

Target
Output Portal v1.2.1 WIN-R2R.rar
Size 107.9MB
Sample260809-2kxbcaen8w
SHA256 857a29c1cebd08296907a264f3566c6c6ba36c75b72ebd03c5ee26f6302494f7
MD5 808a94ec28037083b4b1bb64db73f840
SHA1 df7915f86cccfab862b0f04e361d9c18f065aad7
SHA512 ea5faa7bdec2ed9e72253bb3f51fe295dec3be44dd327d8face0f951ba07adfd36f9db6df8a7726a31df56c9125cef2694fbfbaad27f45ed7d5b7083d21ed7cb
SSDEEP 3145728:m8uCidqpC3nQF9lPU92aPgez8XB2t0IvVU4SQb:mNCNIXQxPUTPgzRavVU4Nb
TLSH
T1E74833B363C743815B58A84E2FE3B885E07BD66A73024984FD9B1D4F10BD44B9648F6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  Output Portal v1.2.1 WIN-R2R.rar
- Size 107.9MB
- SHA256 857a29c1cebd08296907a264f3566c6c6ba36c75b72ebd03c5ee26f6302494f7
- MD5 808a94ec28037083b4b1bb64db73f840
- SHA1 df7915f86cccfab862b0f04e361d9c18f065aad7
- SHA512 ea5faa7bdec2ed9e72253bb3f51fe295dec3be44dd327d8face0f951ba07adfd36f9db6df8a7726a31df56c9125cef2694fbfbaad27f45ed7d5b7083d21ed7cb
- SSDEEP 3145728:m8uCidqpC3nQF9lPU92aPgez8XB2t0IvVU4SQb:mNCNIXQxPUTPgzRavVU4Nb
- TLSH
  T1E74833B363C743815B58A84E2FE3B885E07BD66A73024984FD9B1D4F10BD44B9648F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Output Portal v1.2.1 Incl Keygen-R2R/MORE DOWNLOAD.url
- Size 131B
- SHA256 a1d232d3cbf684078abfb4cd49d060371666bc3dc9085d7e8fccd90a72000605
- MD5 3da759e257c7b7602264742c5787f889
- SHA1 2e5ecd0213f27d1f0cd587bf9092d8fe162f7715
- SHA512 4aea3a21c5a0f7887abf3681243d7a9bdcb88a8447383d3f5e57360a4876616ecb326510bc5f53d4a803fc56a93917ed72b9a873cffaea4566245af94a027b24
- TLSH
  T191C09B6F4105C549E741655550F0F414580F796508D1D05C5168DF8B9D580D5D54577B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral2
- Target
  Output Portal v1.2.1 Incl Keygen-R2R/R2R/Output_CR_KeyGen.exe
- Size 749KB
- SHA256 1ff9294afabf3cb4b61670abd50e253a0ee878e533293bde60b2a1ced34e5869
- MD5 4f68d134394ba001f944d7274af3d380
- SHA1 9736a8a08de260ae03df023675c3cf39c759f2fc
- SHA512 86bdbc54c80c400ad43961ef274865ad497b9e2368839fb88b84da5c3348c2f72d796cd678ad717e4f08f688284f5c627cd91ea68b2de7b6f4a0f63c2b4aa904
- SSDEEP 12288:XYkc9t2Sll/vXr9fIUfMJfaoJzBG1Y8aW4O/Z18yEJK+AigMJlt0FOBH4:XYkcL5vjMJXZBG1n/Z18yEJK+wMJlwa4
- TLSH
  T1DEF42340BB98844BF8AB0731997B8A203A7ABE6E8ED651CB53C07B1DB473351560F707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral3
- Target
  $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $TEMP/R2RJUCE.dll
- Size 242KB
- SHA256 674a6eafb277261cd6959a4145329ab8b612fe5948fc8daf064192498fa65f92
- MD5 90a452c84f7f2b5ca5a61bccaaa17e92
- SHA1 3fb5829be5db5af55ee4043f0dce7f9253d800dd
- SHA512 41304120d3b2d0489fa82c13abce47fca967c6415e28c05382c0c567a167ff400f7d58b843afdfcc33227d4caa8fbb32af38fa7175fd066631fe1bb82615975b
- SSDEEP 3072:BsUYsLox8+vwJMcr7HKKQnpkrsvPmp55kIlzjjrfFO75Ag0Fuev/TBfoxzV7i94:n0x8fO0KD2AvPmbeQNcAOe3TBgDtDc
- TLSH
  T1BD34AE007491C4B6CABE053048B6EB655BFDB8200B70DDBB6B944E6E0E39681D7727B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $TEMP/bgm.xm
- Size 620KB
- SHA256 e386ff4d04afd77a9be93a8591606aa3d67e067c1da40a57a1ad9d255e38a613
- MD5 62f5bd0ddf24713f168193b7ac4f1060
- SHA1 d86df52d3ca6954b1d1c8c876c57f7fa77d68fa2
- SHA512 58fd29bc39485b6c0a1659ea7cf08fd92311946afea54323cf4f01b68347a35fdcd7b1744aa956da8604fe091de149c8733545ef1b9b19081e10b3ad536c718c
- SSDEEP 12288:McP1fKlr1Lof88aewDU0kxmNQJIIt8e2O9fcGqNXDybnZaN2d74H8u5VFs/:M46ofleZkxEQJIIt8e2O9fKXDybnZaNS
- TLSH
  T1F2D4E8027B01E541D4762D764C2D4F999322FCCD6F6AA35B36C6BF1BBAFA2C29C01245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  $TEMP/keygen.exe
- Size 491KB
- SHA256 c4c81270316396493d689feda96cff009d483803a43969d89734191972e8b4bf
- MD5 b7a0d2a3cc5f085ecf92aa825b7ffe10
- SHA1 a1bc7ec71149911f1805d0120b1be59e70c9912c
- SHA512 0b9cd151c23444a5d5d68197773a5abaee8b6ca831b448e98167b53054d5612896e79d1b6f509a196a62ddb5e8c0a51c4ba9fa36ca0a16d2f4163aac3b7c470e
- SSDEEP 6144:bcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAO5Rv0oWrc+:bc/kEPDonR6Y436vRN0oWH
- TLSH
  T1EAB4095AD19148FFF4FB233E15CB2609C932A27CD326E5DF93E3057684612EE106C6A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  Output Portal v1.2.1 Incl Keygen-R2R/R2R/R2R.nfo
- Size 6KB
- SHA256 7b0f66fff08f3ff39f50cb9199ecd47686915870f5bc827dc58e4f0142b3783f
- MD5 27f7819e84d5ee7ba67c4cf43c79956e
- SHA1 b8464fb58df72aa2348188308d7da84b3991c951
- SHA512 597f495e26031f04d4f911111a601778ff845bee4b9ff0dc6d8e752089a35240433f5208a7288cf9c96fc6807845c267484b88e02adf28dd0501948433396f5d
- SSDEEP 48:r68NzATPKg6Dbx7/54MhIUAS3fkAKnQVs9wfsDTbuUDy3RDxCWjEHRPj646rvRJr:rHMH6DNLnJsAKwzfkTZulCWE+0rVFEdj
- TLSH
  T15DC160208121ABA0B51382B71D5822C4F29AD64E3C3929D872DFDABBFB57D34517835D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Output Portal v1.2.1 Incl Keygen-R2R/Setup Portal v1.2.1.exe
- Size 139.1MB
- SHA256 00ee7e1b2a1a11e0c9b8b750484b9a60ffb41baea16a34339f2e71ff6b25ef2c
- MD5 f51215458c4ed86bad7b0df6d46724ff
- SHA1 c29f5b9d8dcf73fa8e4344900687227fadfa2b56
- SHA512 50576d687412ddd237ef94a8f5542fa18d500dda641bcc865e0a3b06d4c10e11fb6a2e6bde729d4bc40de662562e906579b230f63f0a3fb0d923821c1d34b468
- SSDEEP 3145728:+g3bu9LmQ2Qs1V0XXlnej9/nW3rmQ2Qs1V0XXlnej9/nW3njmQ2Qs1V0XXlnej9I:jwLmnCHleZ/nWbmnCHleZ/nWzmnCHle6
- TLSH
  T1346801B1F1E48651C225C43E96D30905E93275E6532025E7F2ACB93E2F36FD62B372A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9