General
- Target File Fahrenheit.Indigo.Prophecy.Remastered.zip...msi
- Size 1.6MB
- Sample240613-lvbjmatdkf
- SHA256 54da67354ca45596f98a3cea115bf32a8d2c252a0473080f25fe1d7bd9bfa153
- MD5 28d28b44624c4e00fb5d3e96c9637c3d
- SHA1 806c432fc90b27fa99844747a8259e81fac68543
- SHA512 08cbbcbb11dbf3aa663c1614f13ac2cfd846aaecd7a31c977a6f538efbaa4bec3e3d20383af68d723f81c892d6156ff91115d82b3e1d962af3767e6b9a0b9771
- SSDEEP 49152:CfeRc/f9r84jEHYDgS5u7v+ycFTzn795k0zjjZ:7VHYDgrSycl
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
File Fahrenheit.Indigo.Prophecy.Remastered.zip...msi
Resource
win7-20240611-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
File Fahrenheit.Indigo.Prophecy.Remastered.zip...msi
Resource
win10v2004-20240508-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target File Fahrenheit.Indigo.Prophecy.Remastered.zip...msi
- Size 1.6MB
- SHA256 54da67354ca45596f98a3cea115bf32a8d2c252a0473080f25fe1d7bd9bfa153
- MD5 28d28b44624c4e00fb5d3e96c9637c3d
- SHA1 806c432fc90b27fa99844747a8259e81fac68543
- SHA512 08cbbcbb11dbf3aa663c1614f13ac2cfd846aaecd7a31c977a6f538efbaa4bec3e3d20383af68d723f81c892d6156ff91115d82b3e1d962af3767e6b9a0b9771
- SSDEEP 49152:CfeRc/f9r84jEHYDgS5u7v+ycFTzn795k0zjjZ:7VHYDgrSycl
- MD5 SHA1 SHA512 SSDEEP
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.