Overview

overview

7

Static

static

3

fnafmv1.1.7.exe

windows10-2004-x64

7

fnafmv1.1.7.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    154s
  • max time network
    131s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/07/2026, 00:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    fnafmv1.1.7.exe
  • Size 190.8MB
  • Sample260706-ae1yssct2q
  • SHA256 b53da088f2f73ce51543920eab9dee535f7e10f2fe09fe27f3b97ddb1639fbc0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 28 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry class 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fnafmv1.1.7.exe
    "C:\Users\Admin\AppData\Local\Temp\fnafmv1.1.7.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4732

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        DRPC.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\DRPC.mfx
        • Size 861KB
        • SHA256 163f8e16167f79bf88a4175af056d31256775b6c68f33e00528f26585e4d0354
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Get.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\Get.mfx
        • Size 305KB
        • SHA256 b339ba20b3341cf3da19301eada3370f59e193513a06c90f401f19aec774e757
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Lacewing.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\Lacewing.mfx
        • Size 215KB
        • SHA256 50fe75b79197c5cff2d7f256ffff8d9f9d58e66c90f9fd00fd7aa4688c7d2e5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Perspective.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\Perspective.mfx
        • Size 15KB
        • SHA256 090925a4cd961f22b1ecd2fba4ce04ab063e26507a1dc09b1d6a40c4860a8777
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clickteam-circular.mvx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\clickteam-circular.mvx
        • Size 28KB
        • SHA256 671a01a39fa56a32fc0a43b16038d3077202734a7beacd50d73439011a74a4cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ctrlx.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\ctrlx.mfx
        • Size 44KB
        • SHA256 3407eb12f6bacec5ebd4df96ff3fd34741a3919fd46c2ec527364c5f1e753a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcclock.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\kcclock.mfx
        • Size 108KB
        • SHA256 58588b5e12d0c5629ee481ad7ed9e8b4d6798cfa83004aecaa600a6924bc97e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcedit.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\kcedit.mfx
        • Size 32KB
        • SHA256 b38ad01ad8a22f3f553530b000d6d061356601d308e6a79284605c30cb0674ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcini.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\kcini.mfx
        • Size 330KB
        • SHA256 5af175ffb932fb653873dad095dd40f2ab8d3fb56f287213c21bb68652ddad2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kclist.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\kclist.mfx
        • Size 32KB
        • SHA256 57d8f859ecf57eed8f2fdc3271ec1d57c879899a527d77a80c9f45b1377742f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmf2d3d9.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\mmf2d3d9.dll
        • Size 1.5MB
        • SHA256 bddda991185a9e83b9855a109f2fcfa78cd2d5402e9db344c6ec77f6ce69a0c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmfs2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\mmfs2.dll
        • Size 768KB
        • SHA256 763ef4484ba9b9e10e19268c045732515f0ac143cf075e6d1ea1f5adcc77633b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mp3flt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\mp3flt.sft
        • Size 24KB
        • SHA256 81c9a9459a8e124793addf142cd513945d6fe600e1d67f74897898d7570e56b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        oggflt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\oggflt.sft
        • Size 130KB
        • SHA256 9e589f86317d840df9bb74f6ee20c24ca65afe58f4009740382f63a0f5531941
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        parser.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\parser.mfx
        • Size 30KB
        • SHA256 9813631f63f79fbaa741094786d4b13c34515ec4a33c0d4e88b75a20973c887c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        txtblt.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\txtblt.mfx
        • Size 36KB
        • SHA256 09a214d9738946b14c4470ea95b45de41641e5d69b7559dbf336f7b4624859b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ultimatefullscreen.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\ultimatefullscreen.mfx
        • Size 73KB
        • SHA256 fd179783ff6e6eb0959185087f33ed4a1b256e58762d9817bcb16888e20f7058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        waveflt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrt6F6A.tmp\waveflt.sft
        • Size 8KB
        • SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4732-59-0x0000000003AA0000-0x0000000003BB2000-memory.dmp
        Download

        memory/4732-52-0x0000000001BC0000-0x0000000001BCB000-memory.dmp
        Download

        memory/4732-45-0x0000000003520000-0x0000000003570000-memory.dmp
        Download

        memory/4732-38-0x0000000001B40000-0x0000000001B7B000-memory.dmp
        Download

        memory/4732-85-0x0000000003C70000-0x0000000003C94000-memory.dmp
        Download