Overview
overview
8Static
static
3R2R/R2R.nfo
windows10-2004-x64
1R2R/R2R.nfo
windows11-ltsc_2024-x64
1R2R/XLN_KeyGen.exe
windows10-2004-x64
7R2R/XLN_KeyGen.exe
windows11-ltsc_2024-x64
8Setup Addi...2.1.7z
windows10-2004-x64
1Setup Addi...2.1.7z
windows11-ltsc_2024-x64
8Setup Addi....1.exe
windows10-2004-x64
7Setup Addi....1.exe
windows11-ltsc_2024-x64
8General
- Target R2R.rar
- Size 16.9MB
- Sample261022-2te4esf18s
- SHA256 898849ac9ffd6f847d1470442f7a4d15345f5a71c44f5f39b8f66b35fc98f5aa
- MD5 ec4b76a541a263b6fe9d5318dbfd1518
- SHA1 0e17fac8ec40c73345389ad08e2b616d51c26bd4
- SHA512 39902701a6987337625df0adafdc36410c0b72424852d722e69f32e44a2ec97ec8899c359c3d970ddc8ad8a58a9619afa47df7f1e91ee001a129dcd6f6b5388b
- SSDEEP 393216:8yhkaUkAHkafyeOB19cSzijWUVXb8XPtIR4/HftFHoGIjseFQn:Vh9UkAByeO3OSzi6l2Gn/oGIjsWQn
- TLSH T14507335A7010297ED7F8D4B79A0F6CAFF7D92592E0E41B0E68530B59C30AF29E1616CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
R2R/R2R.nfo
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
R2R/R2R.nfo
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
R2R/XLN_KeyGen.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
R2R/XLN_KeyGen.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Setup Addictive Drums 2 v2.5.2.1.7z
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Setup Addictive Drums 2 v2.5.2.1.7z
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Setup Addictive Drums 2 v2.5.2.1.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Setup Addictive Drums 2 v2.5.2.1.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target R2R/R2R.nfo
- Size 6KB
- SHA256 22f9d4ce9ad49cbdbae0581c8ff5c300cfc168be4c7653f02201962669ccdfb8
- MD5 d4eb01444011162963ede56a37bba780
- SHA1 3cc6699b0875062f93559016a1584fe954a5b600
- SHA512 c3a563b146cb9d5445a396bbcbd4f3a4043e27c037b1593b0eff95396da6abb309371dec348d3753e74ac84fdaecf65969046a90515b7f81623a60a9545924b8
- SSDEEP 96:rHMH6DNLnJsAKwzfkTBu4lC6J4VrH0rVFEdj:r59nJsAiBTYXVbyO
- TLSH T13CC171208121ABA0B51382B71D1822C4F2DAD64E3D3929E872DFDABBFB57D34517835D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target R2R/XLN_KeyGen.exe
- Size 799KB
- SHA256 0727f0747bbdc0ba30ae6b8ffdd568244c246fd3c794089379c11d53fbf260f1
- MD5 a2beab5ab9e3325e28caff996455e384
- SHA1 b294dbb724464c2d295a72a3c1ec32ce8c67dd72
- SHA512 8ee1fbe4fb6d9d9d41300c8fbd07dbbf5ddad0e5a23fc82aca8c86e6f74e932f46d7b8bf66417025e89ea4f3b0c19e4c591fa2093029a05a55455e543183af1b
- SSDEEP 12288:3c9t2Sll4hOQXpouVFn9OciibEgtUSdpJvaUUbx6ls86y9Mx:3cLGR3HAciiptUkvanAs81+
- TLSH T162052350BBD445A7D46D43791573EBD1BBFA7F201266020BBBED3F3E10B2282911A687
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Setup Addictive Drums 2 v2.5.2.1.7z
- Size 16.2MB
- SHA256 a1012c59bb4e9e4aefaf599f178729560e04dfbbdb978610c7c0657acc7065c4
- MD5 4250f2cfd90ca1b26350adc9bfee8502
- SHA1 45c9dd345810b15a209d781b22490581f9db00d3
- SHA512 42a2e75edfb88633d1723f69d3097ef2b1b793e809554c7075992a50c649dcff53fd7766a851c14220ce7351cd4ae785132a0328e62acee5f7c05e477eaababb
- SSDEEP 393216:oaUkAHkafyeOB19cSzijWUVXb8XPtIR4/HftFHoGIjseFQ+:xUkAByeO3OSzi6l2Gn/oGIjsWQ+
- TLSH T10707335A7110397DD2F8D4B7860F7CAEB7DA2892D0E45B0FAD520B59C30AF29E1616CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Setup Addictive Drums 2 v2.5.2.1.exe
- Size 192.9MB
- SHA256 df23c1d8b59343a91ff199d73d2e9367d4e0d787ef9a46ed58de13cdc764b063
- MD5 9c9f0a8adcfc003c18519668606f64c7
- SHA1 5d2bc2726f3dd3c28e1d2a1b15b8be267a837904
- SHA512 c084c95905b32f907bf017077567675adfe8c7159e8a818498a55772840ac13f858e40cbf037dd6db5ac2d74d843bb4695ed3e1e6a18585d6060546451309897
- SSDEEP 786432:yDalzGWlfqemrYPZtUnsFo4LymrYPZj+5t8qLrdjmrYPZzG1PAMQLcqtmrYPZpNN:yDaLfqD8PUj4LX81+zLrdU8FnLcqe8j
- TLSH T143A8494662AB45C4FDFBEE3099F656579633BC056F3084CF02481B3A2D336E09A76762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.