0023c6ae9243384f941d23ec0668a0d68f5c8dc55d6c70306b4d2639e266c6a4

Login
Reports

Overview

overview

Static

static

R6 Externa...en.rar

windows10-2004-x64

R6 Externa...en.rar

windows11-ltsc_2024-x64

R6 Externa...R6.exe

windows10-2004-x64

R6 Externa...R6.exe

windows11-ltsc_2024-x64

R6 Externa...R6.exe

windows10-2004-x64

R6 Externa...R6.exe

windows11-ltsc_2024-x64

R6 Externa...sample

ubuntu-18.04-amd64

R6 Externa...sample

debian-9-armhf

R6 Externa...sample

debian-9-mips

R6 Externa...sample

debian-9-mipsel

R6 Externa...sample

ubuntu-18.04-amd64

R6 Externa...sample

debian-9-armhf

R6 Externa...sample

debian-9-mips

R6 Externa...sample

debian-9-mipsel

R6 Externa...sample

ubuntu-18.04-amd64

R6 Externa...sample

debian-9-armhf

R6 Externa...sample

debian-9-mips

R6 Externa...sample

debian-9-mipsel

R6 Externa...sample

ubuntu-18.04-amd64

R6 Externa...sample

debian-9-armhf

R6 Externa...sample

debian-9-mips

R6 Externa...sample

debian-9-mipsel

R6 Externa...sample

ubuntu-18.04-amd64

R6 Externa...sample

debian-9-armhf

R6 Externa...sample

debian-9-mips

R6 Externa...sample

debian-9-mipsel

R6 Externa...sample

ubuntu-18.04-amd64

R6 Externa...sample

debian-9-armhf

R6 Externa...sample

debian-9-mips

R6 Externa...sample

debian-9-mipsel

R6 Externa...sample

ubuntu-18.04-amd64

R6 Externa...sample

debian-9-armhf

Analysis

max time kernel
30s
max time network
29s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 22:36

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

R6 External Cracked by papaTren.rar

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral2

Sample

R6 External Cracked by papaTren.rar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

30 seconds

Behavioral task

behavioral3

Sample

R6 External Cracked by papaTren/SlopedR6.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral4

Sample

R6 External Cracked by papaTren/SlopedR6.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

30 seconds

Behavioral task

behavioral5

Sample

R6 External Cracked by papaTren/SlopedR6.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral6

Sample

R6 External Cracked by papaTren/SlopedR6.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

30 seconds

Behavioral task

behavioral7

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/applypatch-msg.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

30 seconds

Behavioral task

behavioral8

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/applypatch-msg.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

30 seconds

Behavioral task

behavioral9

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/applypatch-msg.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

30 seconds

Behavioral task

behavioral10

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/applypatch-msg.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

30 seconds

Behavioral task

behavioral11

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/commit-msg.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

30 seconds

discovery

Behavioral task

behavioral12

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/commit-msg.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

30 seconds

discovery

Behavioral task

behavioral13

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/commit-msg.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

30 seconds

discovery

Behavioral task

behavioral14

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/commit-msg.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

30 seconds

discovery

Behavioral task

behavioral15

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/fsmonitor-watchman.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

30 seconds

Behavioral task

behavioral16

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/fsmonitor-watchman.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

30 seconds

Behavioral task

behavioral17

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/fsmonitor-watchman.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

30 seconds

Behavioral task

behavioral18

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/fsmonitor-watchman.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

30 seconds

Behavioral task

behavioral19

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/post-update.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

30 seconds

Behavioral task

behavioral20

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/post-update.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

30 seconds

Behavioral task

behavioral21

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/post-update.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

30 seconds

Behavioral task

behavioral22

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/post-update.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

30 seconds

Behavioral task

behavioral23

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-applypatch.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

30 seconds

Behavioral task

behavioral24

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-applypatch.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

30 seconds

Behavioral task

behavioral25

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-applypatch.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

30 seconds

Behavioral task

behavioral26

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-applypatch.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

30 seconds

Behavioral task

behavioral27

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-commit.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

30 seconds

Behavioral task

behavioral28

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-commit.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

30 seconds

Behavioral task

behavioral29

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-commit.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

30 seconds

Behavioral task

behavioral30

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-commit.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

30 seconds

Behavioral task

behavioral31

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-merge-commit.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

30 seconds

Behavioral task

behavioral32

Sample

R6 External Cracked by papaTren/imgui/.git/hooks/pre-merge-commit.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

30 seconds

Report Analysis Logs

General

Target
R6 External Cracked by papaTren.rar
Size 5.9MB
Sample260819-2jnb2svdph
SHA256 0023c6ae9243384f941d23ec0668a0d68f5c8dc55d6c70306b4d2639e266c6a4
MD5 1030b020b74bfff708688f74580fd4db
SHA1 562814a4e790299ab828d22cc1c4a82aec97df06
SHA512 b2bb398de0d37461fecd1353ce1d3656631bd382e5a831200e2a6c388b32ae68348c11b9c3ca8458f94429e344cb5262091b2b70b7d521374f59eaad5a9054d5
SSDEEP 98304:DMnWWuYOAToJlMBW3BWEqnaQSmuY2LQV8g4QF46IvoOP4uB4M7pLC2W7R12Dz:AnIBu8n9Yd63Q/AiMNLxyUDz
TLSH
T102563355F6122003263B45C2D7BC4351A69BA22B81FDA6FECAFD877D68F052197E034E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3804	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3804	7zFM.exe
Token: 35	3804	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3804	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\R6 External Cracked by papaTren.rar"
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3804

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads