Overview
overview
10Static
static
3fudcrypto.zip
windows7-x64
10fudcrypto.zip
windows10-2004-x64
10fud crypto...AX.dll
windows7-x64
7fud crypto...AX.dll
windows10-2004-x64
7fud crypto...en.dll
windows7-x64
1fud crypto...en.dll
windows10-2004-x64
1fud crypto...sg.dll
windows7-x64
1fud crypto...sg.dll
windows10-2004-x64
1fud crypto...st.man
windows7-x64
3fud crypto...st.man
windows10-2004-x64
3fud crypto...ts.xml
windows7-x64
3fud crypto...ts.xml
windows10-2004-x64
1fud crypto...to.exe
windows7-x64
10fud crypto...to.exe
windows10-2004-x64
10Analysis
-
max time kernel
93s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2024 01:46
Static task
static1
Behavioral task
behavioral1
Sample
fudcrypto.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fudcrypto.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
fud crypto/AUTHZAX.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
fud crypto/AUTHZAX.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
fud crypto/BCSAutogen.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
fud crypto/BCSAutogen.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
fud crypto/BCSClient.Msg.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
fud crypto/BCSClient.Msg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
fud crypto/BCSClientManifest.man
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
fud crypto/BCSClientManifest.man
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
fud crypto/BCSEvents.xml
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
fud crypto/BCSEvents.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
fud crypto/fudcrypto.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
fud crypto/fudcrypto.exe
Resource
win10v2004-20241007-en
General
-
Target
fud crypto/BCSEvents.xml
-
Size
35KB
-
MD5
c6696bb4b2e515f2240bea9e998be82f
-
SHA1
88747757c0e8e6f66ba1cf0c559b7d7be4074d2e
-
SHA256
45f763a5258f39a14872b4823b203ccf311bc1bc4e9a3bfeb7e2afdb51cc36ec
-
SHA512
e4139f5b56b012f4601c59c29e11976559f6959722c4b690ed9abfadce3779817f4c97dff05068e6853959aca1f5bc8661c434918c9c5c25160198ef5823a335
-
SSDEEP
768:GD/741Xy3AxbsRKXS2dUmJBe7I+tGB+D0DiPpS3Onq3OCDIq3ONh+q3OYcvq3O6j:GQ+
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\fud crypto\BCSEvents.xml"1⤵PID:3548