Overview
overview
7Static
static
4R2R/MusicL...en.exe
windows10-2004-x64
7R2R/MusicL...en.exe
windows11-ltsc_2024-x64
7$TEMP/BASSMOD.dll
windows10-2004-x64
3$TEMP/BASSMOD.dll
windows11-ltsc_2024-x64
3$TEMP/R2RMLKG2.dll
windows10-2004-x64
3$TEMP/R2RMLKG2.dll
windows11-ltsc_2024-x64
3$TEMP/keygen.exe
windows10-2004-x64
3$TEMP/keygen.exe
windows11-ltsc_2024-x64
3Setup Real...03.exe
windows10-2004-x64
7Setup Real...03.exe
windows11-ltsc_2024-x64
7General
- Target 9w4v15j-ml-re6.rar
- Size 14.2MB
- Sample261022-3ef8lsbg49
- SHA256 d25acaf301f0e0b407385b925a568b26e9e301117d345e45ffe5b91b3f381692
- MD5 7de12eaef7306973da0ef469ee351023
- SHA1 a2ee041c6b988990af159adf386d17b666e9d3bd
- SHA512 b4f92e1be1e3f4ee005590d4d36aeabd881ca03f960ca8a6e8f8a7cf5f8d3607e5bae29a5753b756eef037f55e3593c9b93fa59dd0649c9e1919309c15f54273
- SSDEEP 196608:z7wjn4JsgPUHWvvTQpopcxTtBEvnbMdVUbThvEsH/TP8qSL27U/azCotqeZocWJ3:fw8JsGmoOaMobm4j8qq2o/DeZoc8
- TLSH T1C9E633AA45C0026162E7957F8A60A1EE5FAC36D920C35FF4BC0C7814DB23B6BD159F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
R2R/MusicLab_KeyGen.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
R2R/MusicLab_KeyGen.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$TEMP/BASSMOD.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$TEMP/R2RMLKG2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$TEMP/R2RMLKG2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$TEMP/keygen.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$TEMP/keygen.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Setup RealEight v6.1.3.7603.exe
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target R2R/MusicLab_KeyGen.exe
- Size 1.2MB
- SHA256 56e65ec9e9cad3e20e41ca137cdec5f4812eb51d09ac5365bbb30fd47f2be0d0
- MD5 07abab88a1a15b6b23fcd6f35210a5b5
- SHA1 41bfffadb7bdcc3615bd4c64bbda31f205176477
- SHA512 21c9d42d82f5df5d1badaa85ea744b5ffd8c408eb031a00eacc7b6c33e68d8b1524da1a99762b6d02ccec00d9428d3b7874fc3cb040b56d4d0dbfe248f472d17
- SSDEEP 24576:XYkcL59DXxdrOBwflQ6FH8slPmsLGrVM4Rmt5h3Nf5hNKLjplyj/0ERgEQ:okAnP2qlL8EOFVRmZ32HyI+gJ
- TLSH T11B452356BE45C987D4E64BB450B78D057EFBACA04E93284B17887F38BB73361503B24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/R2RMLKG2.dll
- Size 53KB
- SHA256 b1988ce789a28554ad3ac703119f3e4f97ea35392a57a81182457eff0ef47068
- MD5 a8d9fc6f62f36ae866eebe064c0f6731
- SHA1 7c322453403196c1a62225cd5df13205df6c4336
- SHA512 53580388f1ec4a8c5c10d26efb5a0d83a012ebf8a637d19b641a4db9db55d76f854d057d774d5f3125e0e76e595957934ea51e1e4ff4ba3465a0e8499b131cee
- SSDEEP 1536:fOx2XTfr1KpIJWuXcfK15tf2eBWiB5EX2fJla/YAC//9uog:pUyuIPa/YAeu
- TLSH T19433E711B592F3B2C5622679335A476B0F7EF4202262D8D797FA0EC58631B83CF59782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/keygen.exe
- Size 493KB
- SHA256 eb4f17da51acc170a33cdcf1a1b4a444cea4befde3c1fd5e7f16ebd4d1f124b4
- MD5 1c449bf81f0fa89098c1095333ad0f12
- SHA1 31633964607f34280f27421cdb46c894ec9e0f5d
- SHA512 8a0e90117e03a3845dc311e989891d4bdd25ede0618f8fc46e92e46b123ae5a9e8a24050629b796373dcde66d7d583de5c3285b860b498570c30ea7e5aafe5f1
- SSDEEP 6144:pcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOuEXH3CpZAh/ht62ge8W3L:pc/kEPDonR6Y436vR1nCF+L
- TLSH T172B45E11D19289FFE0F4833DA0DE7218D0A2637DC263E4EFA2CB046955761AF15A83E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Setup RealEight v6.1.3.7603.exe
- Size 24.7MB
- SHA256 b3a594d9296cd5335a7ad0e00e3f11857cf706c3e1b2860870786129704ddb29
- MD5 68e26bbe966c792bcddef5400ef0c106
- SHA1 82ac191e64ac59bea52971793e091cada06d58df
- SHA512 7b1edea650278e6f6665f89fd3157057d4f7fc100cd9f11e3265b74effc99d2be73376d33746fb38c28117881b0dfeb6650b970e4585f678273d0cc9cc317dfb
- SSDEEP 393216:pDVrUz8C3CXoeeyspA8D0EKcKX2sveiEZG+lhbACzI:zrUQTYefspHgEKcKX2RiePbACM
- TLSH T18B47AE07766402B4F066913889978D12D67278710721D6DB32FF4E5AAF3F7E38B7A212
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.