General
- Target FoxyVisuals.exe
- Size 209KB
- Sample260622-pxlddsct8v
- SHA256 fcc706e6e4fd7e9d8da53851392923937a9ae4def4e7cbf2b56fdf40a7a8a334
- MD5 c0479f83f7af3e3eb0fa810b591725dc
- SHA1 e58ffb0768d5f466ad52372e586f917605d98203
- SHA512 5a35b5c73b8c422f38d58ca1ca9f706a15aa9fa69db85f3f5bf5d0d9e71cf6fd9912d694fc02a6d7b991df12d1cdd457c86910dec4d9c0b56f2e5ad969138693
- SSDEEP 6144:vEhfGkHBdZJnRtjUlx9aygCSCpMW90KImQijnfbyL:0++dnj
- TLSH T105244C98136AC93DC2BE27BED0A611060BF0B217D503E75CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FoxyVisuals.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
FoxyVisuals.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target FoxyVisuals.exe
- Size 209KB
- SHA256 fcc706e6e4fd7e9d8da53851392923937a9ae4def4e7cbf2b56fdf40a7a8a334
- MD5 c0479f83f7af3e3eb0fa810b591725dc
- SHA1 e58ffb0768d5f466ad52372e586f917605d98203
- SHA512 5a35b5c73b8c422f38d58ca1ca9f706a15aa9fa69db85f3f5bf5d0d9e71cf6fd9912d694fc02a6d7b991df12d1cdd457c86910dec4d9c0b56f2e5ad969138693
- SSDEEP 6144:vEhfGkHBdZJnRtjUlx9aygCSCpMW90KImQijnfbyL:0++dnj
- TLSH T105244C98136AC93DC2BE27BED0A611060BF0B217D503E75CAFF8A0E66D37711A715A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1