General
- Target FRST64.exe
- Size 2.3MB
- Sample260620-tmv73afy6r
- SHA256 f67939b10f74aefba409e4e97e0d1a7a1b408ac53e6a9f7e320dbe104442365d
- MD5 393bb89ec9c7f1fec24e524b17077454
- SHA1 6ffe2bc39bffc72606c9aa6f3dd1ef3e190e3d38
- SHA512 c380867680998e3a79ec29560d27d3adf1938885e33b3345589643bfb3b226b4d5d19d6413ee6e0ea225b680184b08b4fbfcf1472fa2d6a90085d7a80fb40cd6
- SSDEEP 49152:11H4jR2TYrQbDTrbZnOg4Ay31HdOu4Ik0ZD5FJ9X+:4UhnJ4A41HdOvIRZD5FLX
- TLSH T1D6B5E00573B441DDFEABE1768617C50BC7B6B8090637865F02A16B766F33B712A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
FRST64.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
FRST64.exe
Resource
win11ltsc2024-20260618-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target FRST64.exe
- Size 2.3MB
- SHA256 f67939b10f74aefba409e4e97e0d1a7a1b408ac53e6a9f7e320dbe104442365d
- MD5 393bb89ec9c7f1fec24e524b17077454
- SHA1 6ffe2bc39bffc72606c9aa6f3dd1ef3e190e3d38
- SHA512 c380867680998e3a79ec29560d27d3adf1938885e33b3345589643bfb3b226b4d5d19d6413ee6e0ea225b680184b08b4fbfcf1472fa2d6a90085d7a80fb40cd6
- SSDEEP 49152:11H4jR2TYrQbDTrbZnOg4Ay31HdOu4Ik0ZD5FJ9X+:4UhnJ4A41HdOvIRZD5FLX
- TLSH T1D6B5E00573B441DDFEABE1768617C50BC7B6B8090637865F02A16B766F33B712A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Modifies boot configuration data using bcdedit
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1