Overview

overview

10

Static

static

3

_12991ee15...07.exe

windows10-2004-x64

10

_12991ee15...07.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    _12991ee152aeccaadf10634e11017eab2ecf13b3853272a46a7f7e8c5dec2507.exe
  • Size 947KB
  • Sample260423-xavybaev2m
  • SHA256 12991ee152aeccaadf10634e11017eab2ecf13b3853272a46a7f7e8c5dec2507
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
fuerydiscoverypersistencetrojan

Malware Config

Extracted

Family

  • fuery

C2

  • http://let.mebeyourfriend.digital/

  • http://if.youwannabemylover.life/

  • http://make.mydaymakemyday.info/

  • http://iahfi.visbxskagt.com/

  • http://laf.oahgsfwklg.top/

  • http://smachrie1.weinerbuyout.top/

  • http://sackless2.backspacersasine.sbs/

  • http://recondole3.compositesclosetful.xyz/

  • http://dietaries4.permeatedicelanders.today/

  • http://epanadiplosis5.misdateswampanoag.cyou/

  • http://invoke6.escrimesesquipedal.digital/

  • http://bordrage7.kafkaesquebozo.info/

  • http://stacher8.disequilibrationaproctous.top/

  • http://scoliidae9.

Targets

    • Target
      _12991ee152aeccaadf10634e11017eab2ecf13b3853272a46a7f7e8c5dec2507.exe
    • Size 947KB
    • SHA256 12991ee152aeccaadf10634e11017eab2ecf13b3853272a46a7f7e8c5dec2507
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryfuerypersistencetrojan

    • Family: Fuery

      Fuery is a trojan written in Delphi.

      trojanfuery

    • Adds Run key to start application

      persistence

    • SmartAssembly .NET packer

      Detects SmartAssembly .NET packer.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks