General
- Target FyreMC-0.9.6-x64-Setup.exe
- Size 105.1MB
- Sample260628-1ec5vaew9t
- SHA256 509a1890bf620db2b93c056f891c9077f926ea191d2a63d91ea8ef80f4c52673
- MD5 08deb36c00feb214222e236440e60b55
- SHA1 8f9e4d6dc05eeca77c2deeea7162a9bf68fc9c60
- SHA512 a56d2e4a683bcb3d44534234d3b81f1656d1b4ae744b2cd770b494f3667648495a6c7e87112098555e285b18f9023e145bf20b217ee064c634ff59e8abecbb33
- SSDEEP 1572864:yM7DOSm7w+x02+lONe9ByecfpRujUhRA4VVSGzmayzqv3arDpPj28i6Rqm5Q8XT8:yMHHvOq0D8UZCzOEBj2NIqCT/oQby
- TLSH T1493833117B95857BF31B68324BE6E69B18653A2BB8F1364B03583757BC33240CB1F85A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FyreMC-0.9.6-x64-Setup.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target FyreMC-0.9.6-x64-Setup.exe
- Size 105.1MB
- SHA256 509a1890bf620db2b93c056f891c9077f926ea191d2a63d91ea8ef80f4c52673
- MD5 08deb36c00feb214222e236440e60b55
- SHA1 8f9e4d6dc05eeca77c2deeea7162a9bf68fc9c60
- SHA512 a56d2e4a683bcb3d44534234d3b81f1656d1b4ae744b2cd770b494f3667648495a6c7e87112098555e285b18f9023e145bf20b217ee064c634ff59e8abecbb33
- SSDEEP 1572864:yM7DOSm7w+x02+lONe9ByecfpRujUhRA4VVSGzmayzqv3arDpPj28i6Rqm5Q8XT8:yMHHvOq0D8UZCzOEBj2NIqCT/oQby
- TLSH T1493833117B95857BF31B68324BE6E69B18653A2BB8F1364B03583757BC33240CB1F85A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.