Analysis
-
max time kernel
94s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06/09/2024, 08:30
Static task
static1
Behavioral task
behavioral1
Sample
FireFTP v1.0 汉化修正版/HAP-FireFTP-1Fix-jd.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
FireFTP v1.0 汉化修正版/HAP-FireFTP-1Fix-jd.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
FireFTP v1.0 汉化修正版/非常世纪资源网.url
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
FireFTP v1.0 汉化修正版/非常世纪资源网.url
Resource
win10v2004-20240802-en
General
-
Target
FireFTP v1.0 汉化修正版/HAP-FireFTP-1Fix-jd.exe
-
Size
1014KB
-
MD5
a7f2e1567b1699bbae9e9b687f70c6b7
-
SHA1
20aaccb6ef34d5a21bd88f87579604e053014eea
-
SHA256
dd7177b27344e61f0939b1278b3aea029a78d81fc71e7fc8922012f7cbbb966d
-
SHA512
9482f91e138d3eb200b4f64d1de17448f445992c2abdbfada211f0d4b41b8d38eb185cf66c4c9fac4e303ca1d217049e9dd04ee0127d6ffef1f845cd9650130f
-
SSDEEP
24576:KPDm6PCX6FfIaddes/vJ5g0NAGXzSoox8N3r3fMFM:Sy2CX6HveM5ggrXzS0N3bfiM
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language HAP-FireFTP-1Fix-jd.exe