General
- Target FOX OS PAID (BEST TWEAKS) (1).7z
- Size 39.9MB
- Sample260620-ffqgcads4l
- SHA256 59c4ad45c41952748ed9a4a3b18aec3b86370716567da0d1726da90143c77118
- MD5 e70d0a5b8cdc71522116a60dcaf1b826
- SHA1 e505f15f3ffeb412721aecc58b2021e3196efe4d
- SHA512 c39fe55168555e1d1daf41a1b1c8afd60bedd2645a4674887fba285f7405bd9ef840233897dc0187041832dac9b7c7e2befb18fffcc4180630c1a950ab004699
- SSDEEP 786432:Fb0cpshI5B0xvZ8hjFshMGGWlEoQ6VbmqNFPcW09B9Sd7rKR9qKwNzhyLxGzCDe:aoshOB0ejWMGGWlEoQmPh09B9IaR9Zwr
- TLSH T176973395622B9D92D6EE63C573E34EAB4DA7C0DC7472CDC39B8805E80D470968CEB970
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FOX OS PAID (BEST TWEAKS) (1).7z
Resource
win11ltsc2024-20260617-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target FOX OS PAID (BEST TWEAKS) (1).7z
- Size 39.9MB
- SHA256 59c4ad45c41952748ed9a4a3b18aec3b86370716567da0d1726da90143c77118
- MD5 e70d0a5b8cdc71522116a60dcaf1b826
- SHA1 e505f15f3ffeb412721aecc58b2021e3196efe4d
- SHA512 c39fe55168555e1d1daf41a1b1c8afd60bedd2645a4674887fba285f7405bd9ef840233897dc0187041832dac9b7c7e2befb18fffcc4180630c1a950ab004699
- SSDEEP 786432:Fb0cpshI5B0xvZ8hjFshMGGWlEoQ6VbmqNFPcW09B9Sd7rKR9qKwNzhyLxGzCDe:aoshOB0ejWMGGWlEoQmPh09B9IaR9Zwr
- TLSH T176973395622B9D92D6EE63C573E34EAB4DA7C0DC7472CDC39B8805E80D470968CEB970
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.