Overview

overview

7

Static

static

3

Release_FH...64.msi

windows10-2004-x64

7

Release_FH...64.msi

windows11-21h2-x64

7

Release_FH...up.exe

windows10-2004-x64

7

Release_FH...up.exe

windows11-21h2-x64

7

Release_La...er.msi

windows10-2004-x64

7

Release_La...er.msi

windows11-21h2-x64

7

Release_La...up.exe

windows10-2004-x64

7

Release_La...up.exe

windows11-21h2-x64

7

Simulation...4B.pdf

windows10-2004-x64

3

Simulation...4B.pdf

windows11-21h2-x64

3

Simulation...8.docx

windows10-2004-x64

1

Simulation...8.docx

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Launcher & Simulation software for FH-2050-5050-5550_v6.40 64bit.zip
  • Size 46.0MB
  • Sample260530-pellfady6k
  • SHA256 52dadbe93ad22132b1f62856e5059d8f01281e8dc1c1634beecec3774a6b1c7e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwarediscoveryransomwarespyware

Malware Config

Targets

    • Target
      Release_FH(x64)/FH Simulator_x64.msi
    • Size 43.4MB
    • SHA256 2e6fd030d905914ad69ad288f88451d934cd44951e4b9ca69851f5f53c36bae4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2
    • Target
      Release_FH(x64)/setup.exe
    • Size 466KB
    • SHA256 7a1e25df384972e312f84323fc501ccae05ea425a7776f57beffc33b8fdabdd2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3behavioral4
    • Target
      Release_Launcher/FH_FHV Launcher.msi
    • Size 553KB
    • SHA256 34a09c28f623d1048711a38e14de0e09178e97940dd0c8146bb7e646b2acc90c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryransomware

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral5behavioral6
    • Target
      Release_Launcher/setup.exe
    • Size 370KB
    • SHA256 4f590f0b3e2118b48736949c6a630858347e766052edbeaf41b1dc18bc8d63ad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral7behavioral8
    • Target
      Simulation software_v640_64bit/FZ_FH_FJ_Launcher_Instruction_manual_S2D-175074B.pdf
    • Size 273KB
    • SHA256 4aae09dc1bb677601c0db881d2056dd4e4f00b12986d2df4d9f2a2e686692cd4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral10behavioral9
    • Target
      Simulation software_v640_64bit/How to use simulation software_201808.docx
    • Size 3.9MB
    • SHA256 accf42a23e7a663f3dcb07f0a7c1ad7e1856a25f0942a8937fbe6d1d81fd1fa1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks