General
-
Target
0000f3d6e5c85b100c66aa9919c80a35ee62a640eff64450af1ae75a204514e7N.exe
-
Size
242KB
-
Sample
241120-v4r3eavldn
-
MD5
d588e5faa7e5dc5ea313167b75fc5fa0
-
SHA1
f6af4d5b2cb180c548b18c9badfd9eabf0d5a128
-
SHA256
0000f3d6e5c85b100c66aa9919c80a35ee62a640eff64450af1ae75a204514e7
-
SHA512
cbfd204a51aeb9b01f011b47778021a01bb07cc96ed8391953f589d09d0407a5f484e01d3a5e2277a8b5d74ec2e7f425088b789671000fab55b762e810959ce8
-
SSDEEP
3072:cWy50jpjE4Qvt0HzC7XWOTQ5jGNLc0Fw2lQBV+UdE+rECWp7hKYo:cWA0FQl0Hz6XSibgBV+UdvrEFp7hKYo
Static task
static1
Behavioral task
behavioral1
Sample
0000f3d6e5c85b100c66aa9919c80a35ee62a640eff64450af1ae75a204514e7N.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
0000f3d6e5c85b100c66aa9919c80a35ee62a640eff64450af1ae75a204514e7N.exe
-
Size
242KB
-
MD5
d588e5faa7e5dc5ea313167b75fc5fa0
-
SHA1
f6af4d5b2cb180c548b18c9badfd9eabf0d5a128
-
SHA256
0000f3d6e5c85b100c66aa9919c80a35ee62a640eff64450af1ae75a204514e7
-
SHA512
cbfd204a51aeb9b01f011b47778021a01bb07cc96ed8391953f589d09d0407a5f484e01d3a5e2277a8b5d74ec2e7f425088b789671000fab55b762e810959ce8
-
SSDEEP
3072:cWy50jpjE4Qvt0HzC7XWOTQ5jGNLc0Fw2lQBV+UdE+rECWp7hKYo:cWA0FQl0Hz6XSibgBV+UdvrEFp7hKYo
-
Floxif family
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-