General
- Target file.exe
- Size 698KB
- Sample260519-bgswmsay8m
- SHA256 bb6d31239a6a4db0a50d8411ef2cc1c91ec60abe92f456c273c6ec290c294d7e
- MD5 69a6636f8d09ef6776e7082dad115749
- SHA1 821f7f81757bd51a03c4d8d518175d18f41169a1
- SHA512 27d72b71eee3e291b6f6a3c1c8a1a13a624d679b0f4ed983bfc28e19335433586f3750d6cf51b4bf4164ed8452d38746a786f4571b67d8c94cf67650ee64dfcd
- SSDEEP 12288:bCcF6foKvcdQ7HDKj/I5pSItElq+gbj1QaSeanfGQ9Sj0X+j86j:96gK7HOj/KSqXbjhaf+YX+jJ
- TLSH T1A7E4024123B9FF07D5A61FF84930D3765379AD98B822D2468EFA7CDBB8297402D41293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10ltsc2021-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
fuery
C2
-
http://take.takemetotheriver.top/
-
http://hey.wtfomginc.top/
-
http://ds.emailmeanything.sbs/
-
http://top.realslimshady.xyz/
-
http://92.dmrdjmejuah.icu/
-
http://real.kabgagk234d.info/
-
http://set.setmeasdomain.cyou/
-
http://omg.itsjasonborn.today/
-
http://oh.whatisyourname.buzz/
-
http://let.mebeyourfriend.digital/
-
http://if.youwannabemylover.life/
-
http://make.mydaymakemyday.info/
-
http://iahfi.visbxskagt.com/
-
http://laf.oahgsfwklg.top/
Targets
-
- Target file.exe
- Size 698KB
- SHA256 bb6d31239a6a4db0a50d8411ef2cc1c91ec60abe92f456c273c6ec290c294d7e
- MD5 69a6636f8d09ef6776e7082dad115749
- SHA1 821f7f81757bd51a03c4d8d518175d18f41169a1
- SHA512 27d72b71eee3e291b6f6a3c1c8a1a13a624d679b0f4ed983bfc28e19335433586f3750d6cf51b4bf4164ed8452d38746a786f4571b67d8c94cf67650ee64dfcd
- SSDEEP 12288:bCcF6foKvcdQ7HDKj/I5pSItElq+gbj1QaSeanfGQ9Sj0X+j86j:96gK7HOj/KSqXbjhaf+YX+jJ
- TLSH T1A7E4024123B9FF07D5A61FF84930D3765379AD98B822D2468EFA7CDBB8297402D41293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext