Overview
overview
8Static
static
7FPC411/FPC.exe
windows7-x64
3FPC411/FPC.exe
windows10-2004-x64
3FPC411/Model7.dll
windows7-x64
1FPC411/Model7.dll
windows10-2004-x64
1FPC411/Model8.dll
windows7-x64
1FPC411/Model8.dll
windows10-2004-x64
1FPC411/Model9.dll
windows7-x64
1FPC411/Model9.dll
windows10-2004-x64
1FPC411/Scr.dll
windows7-x64
1FPC411/Scr.dll
windows10-2004-x64
1FPC411/ins..._x.exe
windows7-x64
8FPC411/ins..._x.exe
windows10-2004-x64
8$PLUGINSDI...ay.dll
windows7-x64
3$PLUGINSDI...ay.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3Flash9e.dll
windows7-x64
1Flash9e.dll
windows10-2004-x64
1FlashUtil9e.exe
windows7-x64
1FlashUtil9e.exe
windows10-2004-x64
1FPC411/新...��.url
windows7-x64
1FPC411/新...��.url
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23/07/2024, 04:46
Behavioral task
behavioral1
Sample
FPC411/FPC.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
FPC411/FPC.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
FPC411/Model7.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
FPC411/Model7.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
FPC411/Model8.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
FPC411/Model8.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
FPC411/Model9.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
FPC411/Model9.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
FPC411/Scr.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
FPC411/Scr.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
FPC411/install_flash_player_active_x.exe
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
FPC411/install_flash_player_active_x.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/NSISArray.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/fpinstall.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/fpinstall.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Flash9e.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
Flash9e.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
FlashUtil9e.exe
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
FlashUtil9e.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
FPC411/新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
FPC411/新云软件.url
Resource
win10v2004-20240709-en
General
-
Target
FPC411/FPC.exe
-
Size
592KB
-
MD5
35a3c06e213ff4017b91cc7c0668a532
-
SHA1
f2ebc49175b93d06466370b2a65640accafb4d08
-
SHA256
bf12c11db993d3224fcfa5c47d1e4c550dd74b3be083932bea5597c0b0da203f
-
SHA512
0a128f6a5a14ec6f5ab67ac94d0f2970637879116b249b599e08259edc9fd5cdb5c90966c09a0378d784ebe348adea39dd614a7eb3053f0fff7408b1ef1e4937
-
SSDEEP
12288:nOTMM1IKwMnoQN5dVhf9ZYYQ/vBTN52I50opU8tFYfTcc8uzvY:nO5ZwpcpeXBH2I5vOL8uzvY
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2396 4796 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\FPC411\FPC.exe"C:\Users\Admin\AppData\Local\Temp\FPC411\FPC.exe"1⤵PID:4796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4796 -s 8602⤵
- Program crash
PID:2396
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4796 -ip 47961⤵PID:4792