Analysis
-
max time kernel
158s -
max time network
40s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24/12/2023, 23:57
Behavioral task
behavioral1
Sample
Fighter FX 8.0/FighterFX.dll
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral2
Sample
Fighter FX 8.0/FighterFX.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Fighter FX 8.0/FighterFX.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral4
Sample
Fighter FX 8.0/FighterFX.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Fighter FX 8.0/Status Checker.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral6
Sample
Fighter FX 8.0/Status Checker.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
General
-
Target
Fighter FX 8.0/FighterFX.exe
-
Size
313KB
-
MD5
3222aefcbaf8872829769afa0373651d
-
SHA1
27b9dadea195224e7c6437802cf5b5465aec2b02
-
SHA256
626b8debd9128cd51f3df16d55e0a6be8614f2baf26e607a86220f275e1e494c
-
SHA512
06774c794abb41344c2143e5fe2ce22710cd5131a4c9addb653a51923100c0d0a2606d1603f818fa5539340edee7c0f38730bc7a0374cdffa6b28af872c7f0ca
-
SSDEEP
6144:XaXSR7RjTSpK+rllogRDppAdMYdzc80lhWMMSWleflaSWwskf4ho:qXs2KolQdldYgjSweflwwskfA
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe 2960 FighterFX.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2960 FighterFX.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2960 FighterFX.exe