9b6d7e13e08b0f506af79eeb569eab90697849ffe29753b5cc41bab5d7981e39

Resubmissions

17/04/2026, 16:12

260417-tnmx3scw2l

17/04/2026, 16:10

260417-tmlzdsft6w9

Sharing

Copy URL Twitter E-mail

General

Target
Fz1.1.9.zip
Size 18.5MB
Sample260417-tmlzdsft6w
SHA256 9b6d7e13e08b0f506af79eeb569eab90697849ffe29753b5cc41bab5d7981e39
MD5 03279d2106a5e8bc5db4dcd85e3c86f4
SHA1 acd94c2d9154a859841dde032824c923a307d589
SHA512 177c242772e976bbe5b76e090a36944829234d727d0c8c58b37200c0def7d640c60b05ab05bbca880dbeafe7467509777211429bdbc9af8233a753bba8f4a93b
SSDEEP 393216:AsgwYxuZ/sk98VkuKCgMnG56RfuV4nCXhf4qtmtQShaOP25wSmTydL:2pxuZ/MyrCxakOx4qsdaO/tTyt
TLSH
T1721733F9E0EC2CE685E9DC3020F49E6654349E37FB5BA319480CDB9BC819E916237725
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  Fz1.1.9.zip
- Size 18.5MB
- SHA256 9b6d7e13e08b0f506af79eeb569eab90697849ffe29753b5cc41bab5d7981e39
- MD5 03279d2106a5e8bc5db4dcd85e3c86f4
- SHA1 acd94c2d9154a859841dde032824c923a307d589
- SHA512 177c242772e976bbe5b76e090a36944829234d727d0c8c58b37200c0def7d640c60b05ab05bbca880dbeafe7467509777211429bdbc9af8233a753bba8f4a93b
- SSDEEP 393216:AsgwYxuZ/sk98VkuKCgMnG56RfuV4nCXhf4qtmtQShaOP25wSmTydL:2pxuZ/MyrCxakOx4qsdaO/tTyt
- TLSH
  T1721733F9E0EC2CE685E9DC3020F49E6654349E37FB5BA319480CDB9BC819E916237725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Fz1.1.9/FluxusZ.exe
- Size 3.7MB
- SHA256 5f534c354c52b3cfe111e715226799c6db8ffb5906e3bd275d341b1d35414bd5
- MD5 04d3cd0a539c898cde7da10b44b331ea
- SHA1 ce79b707397f9c84ccb0277e1bfe7ec35ece9ac0
- SHA512 71a9bb9920d9e322dac53a8442cdf005973156d463185c5e1e281bb9480b2441bff8aa974a664e7cb98c34835bc171dd794a6c1b1006827a1aad510e660c57d9
- SSDEEP 24576:YXxcBWwh9iQSoyZwh2piEppR4Dpu21/j4F9iOMIvTFH1J8xNe8MBBty0MbqxxZbO:uQfp2IYsY21/j4FVL2eBBty0PNnMjX
- TLSH
  T148067C1233F88A25E2FA6F75E47606108BF5BC46BA7AD34F694472AD0D737809D90363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery defense_evasion
- Downloads MZ/PE file
behavioral3 behavioral4
- Target
  Fz1.1.9/Module.dll
- Size 14.2MB
- SHA256 7def081958aff89d50e9c19cbc295fee5fd72ed1e24340c72ce1aaa77c967c00
- MD5 2327db3fb62af87b08af808dd70e1bda
- SHA1 9ef6806cc9ae1ff001303e8f446d40a2c75ee21c
- SHA512 4db9ac3a83e795226a1313a8ecb81b34cc0ebc3d0ae467f065ea0cb998d7f63f4df279e5eafb6d4494976a8d230fd75c443b8824cf2b23d14e02295535d6b02c
- SSDEEP 393216:HsJxFM+c5/gCIRYfzP2G9KZt8jRPRL96vWF0aGdK97yYr:HsJM95/xjfzuqK6PP
- TLSH
  T113E633352F615874E2FC6BB8DB0D08845B0281F7936FB9460E2FAB9F14E2DC92A16D51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion themida trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Checks whether UAC is enabled
  defense_evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral5 behavioral6
- Target
  Fz1.1.9/WebView2Loader.dll
- Size 157KB
- SHA256 86545b66cdb0603bc26b626fb9ad610cb6e71f28d468f5ea66df23b03dda96d5
- MD5 ff3ab627947e2c1c58f13694a8651c7f
- SHA1 280e4cb1c735b3ee7cfedc82a5bfe7c134a89d90
- SHA512 45a167e90716a08abf79f76fba42681cc8bc76f0087f62d028350c5d28e79b922dc1bc799b0dd0a086e7add20c17b9bd6a355674d7f1b0854f217432e4c7d555
- SSDEEP 3072:lKpb6T599mlMpgeMiqa5agdTl0RflJGhaTcZYEtJomT+JJg7yl:uGf9m9XkagdTlMvEtJKJg8
- TLSH
  T10BF35C57B3E510B7E07BC27485A34A42E772B81157609AEF0364467A1F23BD0EE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Fz1.1.9/blake3.dll
- Size 82KB
- SHA256 74db4e698c0bf7295326f512492fd0456eed0becb57e257bd714e34fb7ebfa68
- MD5 64ed4a221d9ac51c88807895e4a44f05
- SHA1 ace55ca410de447dc2ecfc7005a4d556958d7035
- SHA512 1d544fad5713d4b0a4e28a427d3056f5daba655b43de0429ce3218faf7e3a825b7ecfe9ad3f684e700e4b5140f909b79a728cc1366754241999b471e1be2225a
- SSDEEP 1536:p/W4jOj0LznrrBHyjGYBzkJR3Mxv+DRe:p/rB7r16p5bv+Ds
- TLSH
  T11C83FA2CB06B84C4C86776B8C2BA5735EF28A7AC1158E7E5238B46D53E537E42E34CD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  Fz1.1.9/libcrypto-3-x64.dll
- Size 5.1MB
- SHA256 3dbf860add5c00e03ab3cbdd85910736b0ca94fd9c7a79977d0371f566b0492d
- MD5 08a6c64a7c8f315e48925828d6b569e7
- SHA1 aaf5b18ccfc3a9de1e19e785f5a1f9956b5060f3
- SHA512 faaeacbf36e1fe1988136572b9c123427423f837acd831c2ec641a600fbce6e4907e7f0a0a8e5a1088a7fd3b8b1fd6f7d9dc4dd623aab85fc96df65ab4641750
- SSDEEP 98304:oz2IpT6rGoMrrrIWxkEFg9b+Sqr2k1CPwDvt3uFlxCu:oz2IpTqMrrrIWxkEutxk1CPwDvt3uFlF
- TLSH
  T15E368D69B6BC0049E87681BCC2836227EB71B92567B057DF6A2846F90F23FD1177E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  Fz1.1.9/libssl-3-x64.dll
- Size 848KB
- SHA256 476f237a445fc952415adee26c1b4dc96fb4f0c0ad93ae871f116c8595ad4bc2
- MD5 26966b4b56376abc354d6e91e345c9b6
- SHA1 51f18a40d7d45981dfc8666102798d6b629239f7
- SHA512 d66171190016061936e1cfea2b283187ee668dc303710fd21b1b6736b704dfd2e97a05b8f382e21b3213de93197d4cb45033934198abea5de5847425a2ce9f7a
- SSDEEP 12288:cwHu1bNE+GU0CG114fw8Z3cqJVqJPr4/D2NOUAmjd:cwmCM0CQ1D8TJVAPMr2NOUA
- TLSH
  T12B054C65BBB8119CD862D17C86D35213E6F6F4163370EAEB0B248A392F637E1263D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  Fz1.1.9/lz4.dll
- Size 122KB
- SHA256 b8543977c65b0d9c4a2e26d5cd267e291f48d14eac8b14f5b7d2652f6463ec08
- MD5 269cce928e75bb2a20538b93a6f0ebdf
- SHA1 d75425849fe38902312c7c469dd2fa086d5c217b
- SHA512 dc805f20f4976c17f3ff3df806886140249841c2fdde2321a150e3fc2bba153308ac9ddae6db16f32d466ff223a210d3039230ba9a365dc94e5c4773726564d2
- SSDEEP 1536:lehL/xH91jtJ7FkVF32RumoaP5oqu7AC3oO1Iz87W1wytUkYR2UsxIkj1nMPiPJg:lGBkeRnhAJ3Z1UNw8i2jxIkj1nMWC
- TLSH
  T147C34B87F7D501DCE11285BEDA96874AEB36B8545301EBD7C798CA723F06E908D32392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  Fz1.1.9/xxhash.dll
- Size 45KB
- SHA256 2d2ad2bffa90cf0eda5b4ecb90262997e40da8c417272810b027a309d4ff329d
- MD5 742f3574062640843afbb5888a7d7ec1
- SHA1 bd94ab0d3231f12c90e223a6873127fe28167e41
- SHA512 c8ea65f44b31d106e47632b8755577e367364b61651d7790c218fbde7b2f600cf19dba08f76201c79948fa5f7edba107d6b75a61645dcc477fda9e057b366097
- SSDEEP 768:FzF3psFdYNOxsAzQHanTE4ykhBSIqaKAZp7UtaJ6aE5A8Ed3nF:FR3pMYsf3TPXxp7AaLE5A8A1
- TLSH
  T11D235B4BDC240D88ED57EBBCC27B47CAE9EA3A1C735159C7C6A7248819933C05B7A681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  Fz1.1.9/zstd.dll
- Size 640KB
- SHA256 4bee45973f2cb6a4383add9bf2f9cc326085d865127cee37ebb739cc56c970e3
- MD5 6c02a48a211f6ec107e2142a0b2cc58f
- SHA1 975b6904ccaa7c369491cd27654c09d7b470d6b7
- SHA512 248c7ba4f38b6811adb77f2e88164b4ed2580e7af63713150b0d36bde5419be6763db51da014b88023cb87d5fbd2f4007522647dd42149ad89ccd9127f14bde6
- SSDEEP 12288:zNsgANkkk4OUooDXg5FBP22/5qsGt1WbNJFimQRwtpNC:ZKR0LN22/5qsE0bNJFimQw
- TLSH
  T1CDD48E83F29592ECD02BD139C6565363EBB67C4513006AEB83A0EF653F13AE55B34386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Identifies VirtualBox via ACPI registry values (likely anti-VM)

Badlisted process makes network request

Checks BIOS information in registry

Themida packer

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19