Overview

overview

8

Static

static

1

fdm_x64_setup.exe

windows10-1703-x64

7

fdm_x64_setup.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdm_x64_setup.exe

  • Size

    34.0MB

  • Sample

    230226-w3tehshe9t

  • MD5

    ca2ead342a22fcd891f73f99cba91005

  • SHA1

    6e6470b49e9e9791acc6854b3d3823e97b058407

  • SHA256

    3212aa98f6c8d67aa997a074578010b36d3df5d1a6d2055f5434ba8632fc260e

  • SHA512

    39e8e285f3bc169ce3306cecf7a06317a93126dfce2d128acbb0a82d693d98ba0297601e258e4fa48ab8d2f235c6f8b5b648b48f15c02022e22893095a470bc6

  • SSDEEP

    786432:5fzVFV7zFAsPBoyK32MlH8CSC9xSWEjh/dlCBS1Y/qemqa:/fWyKGMlcnelEdlO0YLa

Score
8/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      fdm_x64_setup.exe

    • Size

      34.0MB

    • MD5

      ca2ead342a22fcd891f73f99cba91005

    • SHA1

      6e6470b49e9e9791acc6854b3d3823e97b058407

    • SHA256

      3212aa98f6c8d67aa997a074578010b36d3df5d1a6d2055f5434ba8632fc260e

    • SHA512

      39e8e285f3bc169ce3306cecf7a06317a93126dfce2d128acbb0a82d693d98ba0297601e258e4fa48ab8d2f235c6f8b5b648b48f15c02022e22893095a470bc6

    • SSDEEP

      786432:5fzVFV7zFAsPBoyK32MlH8CSC9xSWEjh/dlCBS1Y/qemqa:/fWyKGMlcnelEdlO0YLa

    Score
    8/10
    discoveryevasionpersistence

    • Modifies Windows Firewall

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks