Overview

overview

10

Static

static

3

a64edb19e7...d7.exe

windows10-2004-x64

10

a64edb19e7...d7.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a64edb19e71549fb9248b27b58f911a4a1e8cd8b8e4adff93ecfb7e15a3cdad7
  • Size 1.1MB
  • Sample260122-sj1spsey9g
  • SHA256 a64edb19e71549fb9248b27b58f911a4a1e8cd8b8e4adff93ecfb7e15a3cdad7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
foudreloaderprinceofpersiadiscoveryexecutionloaderpersistence

Malware Config

Targets

    • Target
      a64edb19e71549fb9248b27b58f911a4a1e8cd8b8e4adff93ecfb7e15a3cdad7
    • Size 1.1MB
    • SHA256 a64edb19e71549fb9248b27b58f911a4a1e8cd8b8e4adff93ecfb7e15a3cdad7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    princeofpersiadiscoveryexecutionfoudreloaderloaderpersistence

    • Detects FoudreLoader

      princeofpersia

    • FoudreLoader

      FoudreLoader is a loader attributed to Prince Of Persia an Iranian threat group, written in Delphi.

      loaderfoudreloader

    • Foudreloader family

      foudreloader

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks