General
- Target ForzaCryptoTool (2).exe
- Size 70.6MB
- Sample260623-pskw3acz7s
- SHA256 dc980d73f87af79a6addef21e672f6b8343678224b052e22b2ab75fbced0d559
- MD5 2d4a757a3f7b310344910655e0413463
- SHA1 3eaafaa3dae40c4ff5db7c60bac1c69bec642b89
- SHA512 55be06f9ef74351c7e01e15a89564017e793f7ad63508543ad546ac96d4fe847a9095833e3d4626889d8191e2e05d4066e43563e2617242e2285de52802018ee
- SSDEEP 1572864:AGHpmdNebTSXYElokQlC8cZ7ocnpn0fyqU1aWEUyGgxdnXuM9+:JHEdNebeFQl3cZlnh0fy7oUyGgx1V+
- TLSH T150F72356E2F900E9E5BBC0B8C6575517EBB1345513309BEF12A48A692F37BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ForzaCryptoTool (2).exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ForzaCryptoTool (2).exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target ForzaCryptoTool (2).exe
- Size 70.6MB
- SHA256 dc980d73f87af79a6addef21e672f6b8343678224b052e22b2ab75fbced0d559
- MD5 2d4a757a3f7b310344910655e0413463
- SHA1 3eaafaa3dae40c4ff5db7c60bac1c69bec642b89
- SHA512 55be06f9ef74351c7e01e15a89564017e793f7ad63508543ad546ac96d4fe847a9095833e3d4626889d8191e2e05d4066e43563e2617242e2285de52802018ee
- SSDEEP 1572864:AGHpmdNebTSXYElokQlC8cZ7ocnpn0fyqU1aWEUyGgxdnXuM9+:JHEdNebeFQl3cZlnh0fy7oUyGgx1V+
- TLSH T150F72356E2F900E9E5BBC0B8C6575517EBB1345513309BEF12A48A692F37BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.