General
-
Target
FiveM.exe
-
Size
5.0MB
-
Sample
250113-3nq46s1jdv
-
MD5
357b5269f142658d15f2ee3f0ff949f4
-
SHA1
cfd0b2e11701095ed8e38c54c9a275125f989e9c
-
SHA256
2ed4cfb162f0e3294823b18e6198465181c56e2d362b37f439c35f57fb92617a
-
SHA512
3305293964364a9b72f30434834e8313883df8c125a40a4730b3795b27cdfe8deae5ebcfaa72f060b5e609764bb46c5a9872738fb691badee9106d78d1468498
-
SSDEEP
49152:aOjPWNYQnU9fL9qbD1hS29mcC8Nwc8wN+O7ghsm/746YJZPjW/fgUOXdmjYeL9Hq:nnoDwcKheknnKXthTqXXLyb1TFx
Static task
static1
Behavioral task
behavioral1
Sample
FiveM.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
FiveM.exe
-
Size
5.0MB
-
MD5
357b5269f142658d15f2ee3f0ff949f4
-
SHA1
cfd0b2e11701095ed8e38c54c9a275125f989e9c
-
SHA256
2ed4cfb162f0e3294823b18e6198465181c56e2d362b37f439c35f57fb92617a
-
SHA512
3305293964364a9b72f30434834e8313883df8c125a40a4730b3795b27cdfe8deae5ebcfaa72f060b5e609764bb46c5a9872738fb691badee9106d78d1468498
-
SSDEEP
49152:aOjPWNYQnU9fL9qbD1hS29mcC8Nwc8wN+O7ghsm/746YJZPjW/fgUOXdmjYeL9Hq:nnoDwcKheknnKXthTqXXLyb1TFx
-
A potential corporate email address has been identified in the URL: [email protected]
-
Drops desktop.ini file(s)
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
-