General
-
Target
FabFilter_Bundle_Old.zip
-
Size
36.3MB
-
Sample
230609-gj6heabg9z
-
MD5
10d717dc9b35f98eec310205f1b99b89
-
SHA1
79e1788aeaef8e555a14a0541e0a55e17e9de044
-
SHA256
cfd6db8c8772825444dfe37e4855f16beb708bfa73199c2e19ff8f04397ce8d7
-
SHA512
a069dfe6ded4ad607dddb5802239b6b158063c8578f45f1ad7fe623fc53cbc79e3208868c22100b9ea6f275393ffb5a68551259dc8b9925a235e5ff43012cfc6
-
SSDEEP
786432:1Huz20Had3VmRkDjWgoFl8afq+lnQS0ksYDuok3r+WlycQ/AbU+:1Huz28adMkDKrfJlnQjk3yH9Q/r+
Static task
static1
Behavioral task
behavioral1
Sample
FabFilter - Total Bundle/R2R/FabFilter_KeyGen.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FabFilter - Total Bundle/R2R/FabFilter_KeyGen.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
FabFilter - Total Bundle/Setup FabFilter Total Bundle v2018.02.22.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
FabFilter - Total Bundle/Setup FabFilter Total Bundle v2018.02.22.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
FabFilter - Total Bundle/R2R/FabFilter_KeyGen.exe
-
Size
860KB
-
MD5
72be38542e02fee398987398f1f93fba
-
SHA1
376db72305a2b5623e1d548fc4b7853e53329559
-
SHA256
1ff6fce352e865268407d54fdcb1c739b744f6a0dc81e29ff497ae8b7ea2cc4f
-
SHA512
94e81b69bb8ac69eec50c4d6ab768fdba99e07cac4a68910ac35d00d62e2178325ca6761591669891b436c029a2fcb261807db733882f3be490e3576d8893a21
-
SSDEEP
12288:Wo6c9t2SllyLELib6VmssxSsG0S2WSPOr3KNklwPQ9Ujka0KMeCt5GU/xupxBCYI:Wo6cLU8Psx1xISaKNklwPBb0KcJup6
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
FabFilter - Total Bundle/Setup FabFilter Total Bundle v2018.02.22.exe
-
Size
35.8MB
-
MD5
4be6bf4fe06430b35dacf3f84e521ce3
-
SHA1
f42ca2e72149fcba56d9f65c34c9f75cbd5ad632
-
SHA256
8bf6b314a746c442a1ab89122ea32259f4a7e76c2b230c9cc65a98a1b4ccff13
-
SHA512
e03a1b323e20594a9bff0fa6662405a8f4d79915c9c26ad2027a7f59d539b1239443868029578f331955f5ae5b713ee569dc565c90f93f6f277d73de3e73abc8
-
SSDEEP
786432:z8z+ax05rJIxwLDkMKhNOa76YAjKvIMWPjaGYo3HOYHcy8F0deh:z8z+w05GwLYB7hAjKQMGnX18FJh
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-