General
- Target FzFz.exe
- Size 16.8MB
- Sample260627-ttt9cact3q
- SHA256 90e25946ed05b98de4719e55f4d1537c50bd5b32348de8e20a0d70036a0c27ab
- MD5 d5c3e943eeb4cbe6e1478cbd7beec2ee
- SHA1 283d86ba842ef80cf661b91d5fc8a38f81dc2098
- SHA512 cd49f930e028fd8fa21d2e104c89445ebbfe08144f81891d88488771af625c2cc6f807b00ebb86043fe74e004be6b87339392c118a50cbdf47a84d592c2650bd
- SSDEEP 393216:hZqpoKm9ql9nP8bATr6tZq5XyOHsxtEDweFXdRlw9:bqp2qfPOar6tZq59wt7eJi
- TLSH T154073345ABC50577E8D3A13C5DB2CAA1F2E1B9B51B628DBF175123363F73290443E688
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FzFz.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
FzFz.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
FzFz.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
FzFz.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target FzFz.exe
- Size 16.8MB
- SHA256 90e25946ed05b98de4719e55f4d1537c50bd5b32348de8e20a0d70036a0c27ab
- MD5 d5c3e943eeb4cbe6e1478cbd7beec2ee
- SHA1 283d86ba842ef80cf661b91d5fc8a38f81dc2098
- SHA512 cd49f930e028fd8fa21d2e104c89445ebbfe08144f81891d88488771af625c2cc6f807b00ebb86043fe74e004be6b87339392c118a50cbdf47a84d592c2650bd
- SSDEEP 393216:hZqpoKm9ql9nP8bATr6tZq5XyOHsxtEDweFXdRlw9:bqp2qfPOar6tZq59wt7eJi
- TLSH T154073345ABC50577E8D3A13C5DB2CAA1F2E1B9B51B628DBF175123363F73290443E688
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1Tasks
static1
pyinstaller
Score
3/10
behavioral1
defense_evasionpersistencepyinstallerspywarestealer
Score
7/10
behavioral2
defense_evasionpersistencepyinstallerspywarestealer
Score
7/10
behavioral3
defense_evasionpersistencepyinstallerspywarestealer
Score
7/10
behavioral4
defense_evasionpersistencepyinstallerspywarestealer
Score
7/10