General
- Target FMmain.exe
- Size 106.5MB
- Sample240608-vmlt3adf2z
- SHA256 9db95e638d73aee4722aced1f2483535335b4f619dae5ffab47890eb28696f9d
- MD5 f9bafd15e364680161b0498c8678f35d
- SHA1 b6afa35adbeb520ec5594db897f3d5742aff4eab
- SHA512 70194427fccd3ac292870883f3bdcedd6f90b33f8cbb50ad6833b40639e42150b0a4707903e403a1d03b67f7f5ad6753a4182ff6111315abe3052470cdb825d3
- SSDEEP 3145728:d/dukp4gwPvP+4tG5YwUSC++uy65C4H0jpJsq:dEJgwPXjtGagCMy2CY0jTs
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Behavioral task
behavioral1
Sample
FMmain.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
FMmain.exe
Resource
win10-20240404-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
FMmain.exe
Resource
win10v2004-20240508-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target FMmain.exe
- Size 106.5MB
- SHA256 9db95e638d73aee4722aced1f2483535335b4f619dae5ffab47890eb28696f9d
- MD5 f9bafd15e364680161b0498c8678f35d
- SHA1 b6afa35adbeb520ec5594db897f3d5742aff4eab
- SHA512 70194427fccd3ac292870883f3bdcedd6f90b33f8cbb50ad6833b40639e42150b0a4707903e403a1d03b67f7f5ad6753a4182ff6111315abe3052470cdb825d3
- SSDEEP 3145728:d/dukp4gwPvP+4tG5YwUSC++uy65C4H0jpJsq:dEJgwPXjtGagCMy2CY0jTs
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL