General

  • Target

    ForlornAPI.zip

  • Size

    5.9MB

  • Sample

    241023-nvpscsxhpa

  • MD5

    c925571f507805a3ef0b3b211042ee4f

  • SHA1

    f0d7579d8421e94da0dc847dc24c9144870a7cd3

  • SHA256

    6c9c6018c21787baa0c2d7d181967f14ce844e75435594e00dd2d2e0ed2730b2

  • SHA512

    e1ef6402bb157745302157ae18b0a46ef725f8e9fbd803db3a21902d83798c836aa7f471fac0eb83fc88c358b2b19f3bf2436940f02078d8ecaf163fbeb74f70

  • SSDEEP

    98304:xyAgI4bty7ydIzSN6ti7beDxJPhQE/LYEZ/PMyQWjHlSObJEP8A1RrqOztCcE:4AgIwty70IzSN6c7be9JPWE/LL/lFSE/

Score
7/10

Malware Config

Targets

    • Target

      ForlornAPI/ForlornApi.dll

    • Size

      8KB

    • MD5

      e97913c3f255c01c9be36ff7a4d70846

    • SHA1

      f4e380e64cfce8c3e92d3c4fc1b53dde6580e4ac

    • SHA256

      a642b87c2517de5adde3675455a5b10ba0242adb361697fef90b8643d98931ba

    • SHA512

      44ba9e62caabb9e711fb828054d1bfe02370f5965a22da22bba6a7bfbe66dd85b465ed138cbc57410050f7e2ffcc2847456a5e6743fd4584edf3b6f30d736bf9

    • SSDEEP

      96:8qCEqcs9F16c0neRzp+PwiQ35I/4rgge6htC4uo5uvE0uRnmKWoeHekyVq3u3Y6u:VCB6s1UHQ3XoctKo4uNN4yVq+3Y6a9x

    Score
    1/10
    • Target

      ForlornAPI/ForlornInject.dll

    • Size

      6.3MB

    • MD5

      0b6f9ce7b90e1486a35c41f4e70fab35

    • SHA1

      6a6d7c8bc0cd3d14f723971565f473dd29142d00

    • SHA256

      1e51e4be4862f978cb93c33bc066d6043b926e5e142db85ab0b4a0591d3ce4ef

    • SHA512

      07bbcb43e8b4a64a74f3ef9b64d738a9f9efed65fb52d2eaa90adce9917ad79531ddb2c9d6f715095c7697c7ab9d05df1a60861b89b6c8ed9f9079f4e0b739a2

    • SSDEEP

      196608:RHhh1rc05EktXeINkb0s9jVsANC2BVKBsBdqu:RJAJktXTu0iPtAgdf

    Score
    7/10
    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Matrix

Tasks