General
- Target RC 20 hein.zip
- Size 162.7MB
- Sample260824-lkla3svgrf
- SHA256 37eaaa5513481a5ad9ab7a44693cf26e92e8dd0757cba9acd4d2e6afc3fe51ee
- MD5 03daba10144ca5f87646bdd36311acd6
- SHA1 21a7ac8c2879f8d1b415a45f30ac7977c49fe632
- SHA512 818c62735b208b0e8ffbce23112956b9964b09c4ac1454381a6269e088440b65705dfe5ec9a8701307220888be51f1ca2bbeb1baad10cba01a18a3db073306e9
- SSDEEP 3145728:EgzJNq1CdAEMtHlpAOoaImKQKd0W2ltEusouM3pMrIs73q1gPY+aSSKRxuldnJB:EWjq4qEMllm/mnU0HELouM3pQIs21gPe
- TLSH T1738833DEC67885CBE97B3C349670D859D9D2ACB2E343CC7AD85907B9D8E72E1345200A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
RC 20 hein/R2R/WM_XLNAudio.dll
Resource
win11-20260513-fr
0 signatures
900 seconds
Malware Config
Targets
-
- Target RC 20 hein/R2R/WM_XLNAudio.r2rwm
- Size 549KB
- SHA256 40d3f73fa7ff9fea998bb027161b60975d38889900ee130c0cd900cd9c10bbfd
- MD5 b11d3ff71dfb1c05127aca2eca7923cf
- SHA1 8a5b5e2ef72d41e7af4e45aee58a9d0545291acb
- SHA512 ed646b3d00e49d394884cade7c97b875b71799c65fc529c1d7179310a2e6aae8cdcfd35ee2a4189e5fe8ff6188b673cdd42160bf1b8c28574a4a3c39bb6423cd
- SSDEEP 12288:NHLPYu5qLPdH7H4SoDrJMUenx//xhm0emlzY12m:dAL1bHODrJMHDmzCq2m
- TLSH T18DC42307F7F15510F097BAB8B436161D867331628DCBABBA5680F67E71A1B888484F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target RC 20 hein/Setup RC-20 Retro Color v1.5.2.1.exe
- Size 269.5MB
- SHA256 f69dfd170e02c105a92b0c95611d82460b0dd72e821317085a0a0bd7330a2df6
- MD5 27b147679317dabe03193f7873f34652
- SHA1 11866f42783f2f631243d7e3557600997b10e8a2
- SHA512 45a888581855346ffa871e2dca455aa4e2f73b266cf5ff462f7b2a55cc3b5fc812ee1e8f19226285ffb86b79df2a527373b37401b0c69d27fc0e811dcdc35305
- SSDEEP 3145728:NpUu8sPw8oXySqc9Eg+h5CXfkoWxFc/QyZ0QjjAvXwq8dN:DUuZwfyB+E/CPkoWxFeQy5jYgqi
- TLSH T108D8BE4666BA04C4FDFBEA34D5E65A17D673BC056F3085DF02441B2A1E33BE08A76722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.