General
- Target Forza.Mod.exe
- Size 9.2MB
- Sample260630-bfzykabv9w
- SHA256 e299a47ad46062cd9c93eda4b4fca56124ad6ffac2ce3f855506eee94588d1a0
- MD5 259686d48920b69f239b615c506c5ce0
- SHA1 3e992a4642e1d412af875573689d9888f7d4f5e4
- SHA512 f0bc7be0d0806856bc9783737796358c12bd25a40231239fffeab06f077a4126405390345fd631eebb6e9ea5c158cff9604e40cdfc088402aa7ce8c7a5cdd41e
- SSDEEP 49152:mnFIJkJb53asggM2bq7mTv+iru6gaDFHCUljX45t2gQlOgXyReN4DhNSwkm2XyPR:4Ng51+KsDlOxuUhNrUy89zP7XW/P1dF
- TLSH T153A64C14D358C523EB774E784B1288E1DA3068A64311F9CF1BEDAA394EC77C626B7523
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Forza.Mod.exe
Resource
win10v2004-20260513-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
Forza.Mod.exe
Resource
win11ltsc2024-20260629-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target Forza.Mod.exe
- Size 9.2MB
- SHA256 e299a47ad46062cd9c93eda4b4fca56124ad6ffac2ce3f855506eee94588d1a0
- MD5 259686d48920b69f239b615c506c5ce0
- SHA1 3e992a4642e1d412af875573689d9888f7d4f5e4
- SHA512 f0bc7be0d0806856bc9783737796358c12bd25a40231239fffeab06f077a4126405390345fd631eebb6e9ea5c158cff9604e40cdfc088402aa7ce8c7a5cdd41e
- SSDEEP 49152:mnFIJkJb53asggM2bq7mTv+iru6gaDFHCUljX45t2gQlOgXyReN4DhNSwkm2XyPR:4Ng51+KsDlOxuUhNrUy89zP7XW/P1dF
- TLSH T153A64C14D358C523EB774E784B1288E1DA3068A64311F9CF1BEDAA394EC77C626B7523
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL