General
- Target FRST64.exe
- Size 2.3MB
- Sample260706-2z8b6ads4w
- SHA256 b4b2dd947278938acdfbf83b9a3c0da82f3689b085b4339b06584ca135255882
- MD5 f9d4316d795134171a1a23885221383d
- SHA1 49bdf4384da84e2fe9ab9ddcb4a1c6e084940121
- SHA512 9525eafc0cf5b24a3d8c47080c87773a2480718e94f0018822dacb0308ffbdfe23dcc4b0c2b8242d20c085942482514532c694f8de795b46fc4c7d5ad47d0524
- SSDEEP 49152:q1H4jR2TYrQbDTruvIbN7SH3tUJXvcjuJqfc24Ik0ZD5FJ9X+:HUOIxSaXvGuuc3IRZD5FLX
- TLSH T159B5E00573B401DDFEABE1768A17C50BC7B278050677865F06A1AB766F33B712A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
FRST64.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
FRST64.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target FRST64.exe
- Size 2.3MB
- SHA256 b4b2dd947278938acdfbf83b9a3c0da82f3689b085b4339b06584ca135255882
- MD5 f9d4316d795134171a1a23885221383d
- SHA1 49bdf4384da84e2fe9ab9ddcb4a1c6e084940121
- SHA512 9525eafc0cf5b24a3d8c47080c87773a2480718e94f0018822dacb0308ffbdfe23dcc4b0c2b8242d20c085942482514532c694f8de795b46fc4c7d5ad47d0524
- SSDEEP 49152:q1H4jR2TYrQbDTruvIbN7SH3tUJXvcjuJqfc24Ik0ZD5FJ9X+:HUOIxSaXvGuuc3IRZD5FLX
- TLSH T159B5E00573B401DDFEABE1768A17C50BC7B278050677865F06A1AB766F33B712A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Modifies boot configuration data using bcdedit