General

  • Target

    FPSUnlocker_x64.exe

  • Size

    57.1MB

  • Sample

    240823-jtl8mavfkn

  • MD5

    042a9c355c8cb771eb7be07ded4c0f30

  • SHA1

    0c89668954744ae7deb917312bdbea9da4cc5ec7

  • SHA256

    9ea9cfb9c5da423b4c2f6ab49277765df102a456888faa52a6f95bfeb46b4a57

  • SHA512

    6f16a33eeb69fc2b6fe8e2b7856470a6fa202b8a95aef840b8583cd5cdab871cfeae9a5c9512a9667236bd9ee3c0defe1e1f09153079b11b8aa5fe3c15e8c9ac

  • SSDEEP

    786432:kg10nRYHJvP/39aB7vvPToG6LGJd1HjIUS0yTdH7KFcWZk6Qgoqs1jRyBMLYXTF8:kQ0upvdaN3PT9uGZ3NUbYzIPLMP0

Score
6/10

Malware Config

Targets

    • Target

      FPSUnlocker_x64.exe

    • Size

      57.1MB

    • MD5

      042a9c355c8cb771eb7be07ded4c0f30

    • SHA1

      0c89668954744ae7deb917312bdbea9da4cc5ec7

    • SHA256

      9ea9cfb9c5da423b4c2f6ab49277765df102a456888faa52a6f95bfeb46b4a57

    • SHA512

      6f16a33eeb69fc2b6fe8e2b7856470a6fa202b8a95aef840b8583cd5cdab871cfeae9a5c9512a9667236bd9ee3c0defe1e1f09153079b11b8aa5fe3c15e8c9ac

    • SSDEEP

      786432:kg10nRYHJvP/39aB7vvPToG6LGJd1HjIUS0yTdH7KFcWZk6Qgoqs1jRyBMLYXTF8:kQ0upvdaN3PT9uGZ3NUbYzIPLMP0

    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks