Overview

overview

7

Static

static

3

R2R System v1.5.1.exe

windows10-2004-x64

7

R2R System v1.5.1.exe

windows11-ltsc_2024-x64

readme.txt

windows10-2004-x64

1

readme.txt

windows11-ltsc_2024-x64

1

TEAM R2R R...2R.txt

windows10-2004-x64

1

TEAM R2R R...2R.txt

windows11-ltsc_2024-x64

1

TEAM R2R R...CA.cer

windows10-2004-x64

1

TEAM R2R R...CA.cer

windows11-ltsc_2024-x64

1

TEAM R2R R...ST.exe

windows10-2004-x64

3

TEAM R2R R...ST.exe

windows11-ltsc_2024-x64

3

Resubmissions

23/08/2026, 19:43

260823-yfkj7svtb17

23/08/2026, 19:39

260823-yc2djsan317

Sharing

Copy URL Twitter E-mail

General

  • Target
    hd0tjxi-ter2r151.rar
  • Size 24.2MB
  • Sample260823-yc2djsan31
  • SHA256 fb03782ee09e6a8d87a0d4ad29a3b4ad07a043868d04b8d90103a168516978a2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstallerpersistenceransomware

Malware Config

Targets

    • Target
      R2R System v1.5.1.exe
    • Size 24.9MB
    • SHA256 850d0e5838ca5398ba931f43b2eb819d1ed8aba850626be749af10cb54fc0cf6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryinstallerransomwarepersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2
    • Target
      readme.txt
    • Size 7KB
    • SHA256 c951d82319d5a03f5470d222a57083d444d523d08b9349e6ca45f805ad52d17d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    ransomware
    behavioral3behavioral4
    • Target
      TEAM R2R Root Certificate/R2R.txt
    • Size 287B
    • SHA256 e2791fabc4c6055e529342951990d2e3950cc8a2f1d1cb6bac81924a4e48df45
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      TEAM R2R Root Certificate/R2RCA.cer
    • Size 795B
    • SHA256 01ac2c00831f13656d61ac5ce2bcc0d9364e769ce7f4196969ff360bfc5c581c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      TEAM R2R Root Certificate/R2RCERTEST.exe
    • Size 15KB
    • SHA256 c7142fc351a4d2ee9d1e7e1a394d7b323f966f5f6e082feadb812525058d4319
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks