General
- Target BIAS FX 2 Plugins Pack (64bit) v2.6.0.exe
- Size 917.5MB
- Sample260524-splkzagz7j
- SHA256 9e4914311dfb2bb06a23db4349589f31478a42a38826930d4d8dddcd6a47786d
- MD5 35e23794ba0cd7c8d6669878fdb2b0b5
- SHA1 15a12da10bb181fc0a6f234b5320b4ac220cf3c1
- SHA512 359057fed06fea9b38ae95a153f7627b66fd53396c5fc8095fb5450d57c396701902c4d5862f2feb19d192ca2ffdd2ba80232fdd20597a9274c37341dd55d566
- SSDEEP 25165824:+5k255NzJRk2pCRhOmoiHb+kEmBK3H12L1l:+6UNFRxCRhd6ZmBeHoL1l
- TLSH T19EA933967A5F612FE16A953506672331C8F3F1A37E09881327F50480FFC9C5A287EEA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
BIAS FX 2 Plugins Pack (64bit) v2.6.0.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
BIAS FX 2 Plugins Pack (64bit) v2.6.0.exe
Resource
win11-20260513-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target BIAS FX 2 Plugins Pack (64bit) v2.6.0.exe
- Size 917.5MB
- SHA256 9e4914311dfb2bb06a23db4349589f31478a42a38826930d4d8dddcd6a47786d
- MD5 35e23794ba0cd7c8d6669878fdb2b0b5
- SHA1 15a12da10bb181fc0a6f234b5320b4ac220cf3c1
- SHA512 359057fed06fea9b38ae95a153f7627b66fd53396c5fc8095fb5450d57c396701902c4d5862f2feb19d192ca2ffdd2ba80232fdd20597a9274c37341dd55d566
- SSDEEP 25165824:+5k255NzJRk2pCRhOmoiHb+kEmBK3H12L1l:+6UNFRxCRhd6ZmBeHoL1l
- TLSH T19EA933967A5F612FE16A953506672331C8F3F1A37E09881327F50480FFC9C5A287EEA5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1