Overview

overview

7

Static

static

3

FnPuller.exe

windows7-x64

7

FnPuller.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FnPuller.exe

  • Size

    16.4MB

  • Sample

    240715-wdnsqssbkq

  • MD5

    bedc28d5ba8af8459f85d57a8b3b9f9a

  • SHA1

    a2eefb7bda74ad01cef606390593a1ebfc2e1709

  • SHA256

    db0d623ba3e20c740268c11638f22a96d9a4453dc8f1dc54839da993cca59abd

  • SHA512

    726d98ee61ad7108bb0d82217bb9ac392e3279204bc1a83c01c9c4c6fd119861ee387820d9c0f03b7d7762f742b60dd562185ebbf29926c687d06e190d8516eb

  • SSDEEP

    196608:E0NpUXDB2Mi0sKYu/PaQZXGnOrzGsyHHICEB6yBC+K6kHWMbgdOLv0zGil64ofxI:MXoQZXGOrzGseICEBRB8RD07DofTESV

Score
7/10
pyinstallerspywarestealerupx

Malware Config

Targets

    • Target

      FnPuller.exe

    • Size

      16.4MB

    • MD5

      bedc28d5ba8af8459f85d57a8b3b9f9a

    • SHA1

      a2eefb7bda74ad01cef606390593a1ebfc2e1709

    • SHA256

      db0d623ba3e20c740268c11638f22a96d9a4453dc8f1dc54839da993cca59abd

    • SHA512

      726d98ee61ad7108bb0d82217bb9ac392e3279204bc1a83c01c9c4c6fd119861ee387820d9c0f03b7d7762f742b60dd562185ebbf29926c687d06e190d8516eb

    • SSDEEP

      196608:E0NpUXDB2Mi0sKYu/PaQZXGnOrzGsyHHICEB6yBC+K6kHWMbgdOLv0zGil64ofxI:MXoQZXGOrzGseICEBRB8RD07DofTESV

    Score
    7/10
    upxspywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks