General
- Target Florence_app.exe
- Size 71.4MB
- Sample260529-gr889sdv8j
- SHA256 6e858243653f1eaa772f8bee29b68d939dd895201ee2c5a5317acbbcc2d5c9d3
- MD5 e5f8898b4a9a0444f10900e16e5a04ea
- SHA1 da70343e6e5072cd5acd6e86a6fe7b41abc52cde
- SHA512 4531b5b1eacda49b41707fa831ddd67e75f06dfda6304b5ac81fccbe3e6865f041ab6e1875aea6ac237bef3a0bbd171ad1e93595665b6b916638171c44f2f6f6
- SSDEEP 1572864:QTIAkFo+JhhaOqbgA64vEOc4t3dErLuy+DYTlO6ktzLLvc3gf:Qncj4TcORPEPhlOZtzXvc3
- TLSH T114F7334553923291F12F467FC97E862472F23A164BE4406F2BA09FEA3D671D16CAE321
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Florence_app.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Florence_app.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
Florence_app.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Florence_app.pyc
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Florence_app.exe
- Size 71.4MB
- SHA256 6e858243653f1eaa772f8bee29b68d939dd895201ee2c5a5317acbbcc2d5c9d3
- MD5 e5f8898b4a9a0444f10900e16e5a04ea
- SHA1 da70343e6e5072cd5acd6e86a6fe7b41abc52cde
- SHA512 4531b5b1eacda49b41707fa831ddd67e75f06dfda6304b5ac81fccbe3e6865f041ab6e1875aea6ac237bef3a0bbd171ad1e93595665b6b916638171c44f2f6f6
- SSDEEP 1572864:QTIAkFo+JhhaOqbgA64vEOc4t3dErLuy+DYTlO6ktzLLvc3gf:Qncj4TcORPEPhlOZtzXvc3
- TLSH T114F7334553923291F12F467FC97E862472F23A164BE4406F2BA09FEA3D671D16CAE321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Grants admin privileges
Uses net.exe to modify the user's privileges.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
-
- Target Florence_app.pyc
- Size 24KB
- SHA256 505d2d83e7f9dbabfb085d6e3911857d5279ea4a1cf7d51ed0d3d53dec7bf5de
- MD5 8abe27462e6c0b4e3d2080842bb86fd2
- SHA1 e9df7a9efa9d2df5328e7512b0bbfa5946a2945a
- SHA512 d5c3a97c32aa1b218d02ec5944a47653610763bfc2092a440adbca2178a51f752d47d507f01f0a7795fb94bc0d0c44ffd32444b7016dd0ccda44e3699566fb95
- SSDEEP 384:XrskWIjJk7DvTTdoVnN0zSJfAPLbteCgCa6b6khU:VWId8oVN04oPt6M67
- TLSH T1B3B21ABCC9103657F898F07471CF99897726E2C96106E75BE430D8BC3CA9B279926B4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Privilege Escalation
Account Manipulation
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1