Resubmissions

22/10/2026, 22:55

261022-2v37msyt4l8

22/10/2026, 22:52

261022-2te4esf18s8

General

  • Target
    R2R.rar
  • Size 16.9MB
  • Sample261022-2te4esf18s
  • SHA256 898849ac9ffd6f847d1470442f7a4d15345f5a71c44f5f39b8f66b35fc98f5aa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      R2R/R2R.nfo
    • Size 6KB
    • SHA256 22f9d4ce9ad49cbdbae0581c8ff5c300cfc168be4c7653f02201962669ccdfb8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      R2R/XLN_KeyGen.exe
    • Size 799KB
    • SHA256 0727f0747bbdc0ba30ae6b8ffdd568244c246fd3c794089379c11d53fbf260f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Setup Addictive Drums 2 v2.5.2.1.7z
    • Size 16.2MB
    • SHA256 a1012c59bb4e9e4aefaf599f178729560e04dfbbdb978610c7c0657acc7065c4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Setup Addictive Drums 2 v2.5.2.1.exe
    • Size 192.9MB
    • SHA256 df23c1d8b59343a91ff199d73d2e9367d4e0d787ef9a46ed58de13cdc764b063
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks