Overview
overview
10Static
static
3InstallerFFM.dll
windows10-2004-x64
1KeyActivator/Key.dll
windows7-x64
1KeyActivator/Key.dll
windows10-2004-x64
1KeyActivat...n+.exe
windows7-x64
10KeyActivat...n+.exe
windows10-2004-x64
10Locales/Adobe64.dll
windows7-x64
1Locales/Adobe64.dll
windows10-2004-x64
1Locales/Ad...on.sys
windows10-2004-x64
1Locales/Ad...ce.exe
windows7-x64
1Locales/Ad...ce.exe
windows10-2004-x64
1Locales/Ad...te.exe
windows7-x64
3Locales/Ad...te.exe
windows10-2004-x64
3Locales/Po...ls.exe
windows7-x64
1Locales/Po...ls.exe
windows10-2004-x64
1Locales/preloader.dll
windows7-x64
1Locales/preloader.dll
windows10-2004-x64
1Locales/runtime.exe
windows7-x64
1Locales/runtime.exe
windows10-2004-x64
1TradingView+.exe
windows7-x64
10TradingView+.exe
windows10-2004-x64
10TradingVie...er.dll
windows10-2004-x64
1Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09-01-2025 22:53
Static task
static1
Behavioral task
behavioral1
Sample
InstallerFFM.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
KeyActivator/Key.dll
Resource
win7-20240903-en
Behavioral task
behavioral3
Sample
KeyActivator/Key.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
KeyActivator/KeyGen+.exe
Resource
win7-20241010-en
Behavioral task
behavioral5
Sample
KeyActivator/KeyGen+.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
Locales/Adobe64.dll
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
Locales/Adobe64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
Locales/AdobeLocation.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Locales/AdobeService.exe
Resource
win7-20241023-en
Behavioral task
behavioral10
Sample
Locales/AdobeService.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Locales/AdobeUpdate.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Locales/AdobeUpdate.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Locales/Policies/TradingTools.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Locales/Policies/TradingTools.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Locales/preloader.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Locales/preloader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Locales/runtime.exe
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
Locales/runtime.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
TradingView+.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
TradingView+.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
TradingViewInstaller.dll
Resource
win10v2004-20241007-en
General
-
Target
Locales/Adobe64.dll
-
Size
14.9MB
-
MD5
8fd69fe885fb30f1f27e87e0df1d540c
-
SHA1
aa4206a40ea955eed1b98129c2ac456681b28bc2
-
SHA256
24fce0917d27239eac192484e9e33881ce234348c8d73e6b7f16d83639d5bfae
-
SHA512
0691d77ea91537fe429d6cf66a9b28959156e0f4663b9526dd42bfde8eee55861e28af3d7945372122abf187310aa678a8017f03a5dad7e006bb011e8aa80999
-
SSDEEP
98304:uT+EP+UoS0iZSO4cXnHmk59ngwZ/LuBga6bB+vgrhMZIaGrXzSdv279h:E/P+UN5ZSO13Hm83BbB+vgr6ZId
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4784 rundll32.exe 4784 rundll32.exe 4784 rundll32.exe 4784 rundll32.exe 4784 rundll32.exe 4784 rundll32.exe