General
-
Target
ffkg.exe
-
Size
595KB
-
Sample
231118-3drmysfh49
-
MD5
a33436a23f01c4741101d8f3eb1a794a
-
SHA1
c26e493e16c6a7f87d756c66c20edaa4131a756d
-
SHA256
4eb798f61d00aecfe7db1e21647e7730f540e7342d7188aa4ba0b89aacbb3316
-
SHA512
ffd52dd048d9763ca5afa976edf04b718f4eac1e849080fa2f9b509bcf8fccd85ebd65309edc7bfae71550a82777c51f65408b5420e5a2fb651f05d9b64a2e1f
-
SSDEEP
12288:XYkc9t2Sll/gSFBaBQoi0gdfuqPZuWXTIRvV2PM+CkxaIy:XYkcL5uKvjhuWXTIRN2bdQR
Static task
static1
Behavioral task
behavioral1
Sample
ffkg.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ffkg.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
ffkg.exe
-
Size
595KB
-
MD5
a33436a23f01c4741101d8f3eb1a794a
-
SHA1
c26e493e16c6a7f87d756c66c20edaa4131a756d
-
SHA256
4eb798f61d00aecfe7db1e21647e7730f540e7342d7188aa4ba0b89aacbb3316
-
SHA512
ffd52dd048d9763ca5afa976edf04b718f4eac1e849080fa2f9b509bcf8fccd85ebd65309edc7bfae71550a82777c51f65408b5420e5a2fb651f05d9b64a2e1f
-
SSDEEP
12288:XYkc9t2Sll/gSFBaBQoi0gdfuqPZuWXTIRvV2PM+CkxaIy:XYkcL5uKvjhuWXTIRN2bdQR
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-