Overview

overview

7

Static

static

3

fldigi-4.2...up.exe

windows11-21h2-x64

7

$PLUGINSDI...em.dll

windows11-21h2-x64

3

flarq.exe

windows11-21h2-x64

1

fldigi.exe

windows11-21h2-x64

1

uninstall.exe

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fldigi-4.2.05_setup.exe

  • Size

    6.6MB

  • Sample

    240514-x3gw6acg54

  • MD5

    2967b3cd5d6e93af3785b03ae64bc977

  • SHA1

    bedb329986179e5a137f25e465a43ddf4b1ea326

  • SHA256

    0d2aa550e3d4a067756104651411ba28400c760c1c359ea4e0096907a045d3c3

  • SHA512

    4928fb757b444864cac44ed8dc370a3f02f306857319fb7c970edc6fa0cf3e72ba4cfdba463b6aff5b962b5601549cc997e411fa8f0b7048bb8c740c3098c2fd

  • SSDEEP

    196608:XLthEjCMvo/df+HGi+8gn1sDyeQHRXNVrBn8wlxKvi:hhEWMva/1n1Xe+RXPrBnflxKa

Score
7/10
discovery

Malware Config

Targets

    • Target

      fldigi-4.2.05_setup.exe

    • Size

      6.6MB

    • MD5

      2967b3cd5d6e93af3785b03ae64bc977

    • SHA1

      bedb329986179e5a137f25e465a43ddf4b1ea326

    • SHA256

      0d2aa550e3d4a067756104651411ba28400c760c1c359ea4e0096907a045d3c3

    • SHA512

      4928fb757b444864cac44ed8dc370a3f02f306857319fb7c970edc6fa0cf3e72ba4cfdba463b6aff5b962b5601549cc997e411fa8f0b7048bb8c740c3098c2fd

    • SSDEEP

      196608:XLthEjCMvo/df+HGi+8gn1sDyeQHRXNVrBn8wlxKvi:hhEWMva/1n1Xe+RXPrBnflxKa

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

    • Target

      $PLUGINSDIR/System.dll

    • Size

      29KB

    • MD5

      26c8a92678f1b970ac2a700bb844c309

    • SHA1

      c821a5980c31b0b35f1505cde836d6769f45e3a3

    • SHA256

      2a7b5d1cab96a5280b0694d0ed54510129626a1ba36a51bd34d546972b7d18b8

    • SHA512

      fba6e371853fd6c27097eb7cce7ffc59d71e4f0a9b5e55de06472d094b70c44a409bd82f39d9a27a814e826ab8468c59e947401a3c3ead1f057cbac236588860

    • SSDEEP

      384:icchls/EvE2XYBVtQQA+S4n+7g6ZxlU7RfYkvIZMIwwH3Y9pyWediASIo:dmHckOVih+S/Fxq7v4H3YCoASIo

    Score
    3/10
    behavioral2

    • Target

      flarq.exe

    • Size

      3.7MB

    • MD5

      de0f20ce958d501c96de056c8ea6cb59

    • SHA1

      add93ebb9b26f4f5a21125d908e35ce077e41e3c

    • SHA256

      24e2762efa001fa46d711d05335a837929593df571a4a11cae665320890a9d18

    • SHA512

      70393810cecf5eab812df2f7f50c34e84ca4781cd97a31261bb42749218a09651d6cfbe6e42fd69d1dffeb9303d9970022465237fa59172beacaf55a6ea83d04

    • SSDEEP

      98304:/EUmC7xoJANEPFtaQE7JkOXRwiW725aXS4wXcf+IYZKp6VcBAUZLX7F:MUmi6ikFtq7DVcVr7

    Score
    1/10
    behavioral3

    • Target

      fldigi.exe

    • Size

      21.5MB

    • MD5

      96756feba7815427ac6d0e0700ea2dea

    • SHA1

      f61095ad03ee9e4fed14ca47235dcef89b77e2a3

    • SHA256

      ea1ed9b4af4a3eb996cfbc72c7f0ac6d6abb41869a8a4824d9e02dc81d84b6b2

    • SHA512

      15505daa7aacb875074029db9f5721a42ccd1dda1e9ab32515673cebda66f253dbf298a249e5804f6abb0897f9a016c91a9e32458f320362bf9db151fd666a70

    • SSDEEP

      393216:WWV4fgqNYzrlY09Udoo2Mxd/+Xjp5X+7v/tW:W+agKYX609Udoo57o5mv/I

    Score
    1/10
    behavioral4

    • Target

      uninstall.exe

    • Size

      88KB

    • MD5

      a3cafef00777a9c71750cf1dc13b9462

    • SHA1

      b7050ab4d8733a0e26a9b7d5c463daf01f71fc93

    • SHA256

      29952c776c620ca8689039364712c828eaf001fdba894e001d3a95e9681e5ef2

    • SHA512

      638d8f2722cc9c93cee643df2975733aa025a450aebbcd11cedeb77a619e7e220539311dd539979f482c9848187ebed4660d6435380c73243894feb261271bb9

    • SSDEEP

      1536:cPJ95o2++/qtHWCBwdO2LFL65H9BHTpRICbAf+5Ug4LHwxYhtxagmmzk:cPJ9q2+CqBz6OIxUjTpRIkAf+5UjfIgk

    Score
    7/10

    • Executes dropped EXE

    behavioral5

MITRE ATT&CK Enterprise v15

Tasks