General
- Target FiveM_b_check.exe_pw_infected (1).zip
- Size 327KB
- Sample260708-fdks3sa13t
- SHA256 e542b794183ca6a9c4106dbe8f7e906c7df4f350f588434aa8f70477aaa656dc
- MD5 b278e4fe058c1d6dd2c77f115508c6ae
- SHA1 b7ac6023b6e7f24a498a54675fa4bcc73c0942da
- SHA512 c9de16bbaaa6f82fc575e6480e1729dfed9ef0bb6619ec4209c6744731fd788775b07865fb21645854bf17b8d174ae26dc5edd1a9115c9966e8fff55b9447334
- SSDEEP 6144:aLU5HzmfU0Y4ClrdN5GiNwZPLtEcoyvTAnWjYAhz8jKpR7WW8HQe:a4VKfU0YdxzNcov09h4jE8HQe
- TLSH T1626423BFA06FDDC70EE34E6ABC413DEC5265540A8961229022313C892B9EF93CD5DD79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FiveM_b_check.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
FiveM_b_check.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target FiveM_b_check.exe
- Size 678KB
- SHA256 06be962804d3fb024fc63d10ad4dd427024f57d0abf796514a4628f7a1d3e3b1
- MD5 f84cd959a1289b0d1a18c4604cccb066
- SHA1 ab55987ed3e90801a858ec41e3d4af2328b2f09e
- SHA512 419abe904b337eb49f2c79940397e4b4883ec7865a880cc5d75cfd3df1be2ed9d6de6dea042ea94369a3d414e008c7f0cd793f7caa9eb73ddfec79b84aa359c9
- SSDEEP 12288:g5hDvArXw0yKVmw7IK+UnJxF5mY1RdYblCVRJgSqKf3J2nBInkjvo:g5hDvArXw0yKVm0IKHnJxiY1R6ugrKfc
- TLSH T1A6E47C4EA2FC01A9E066D13CD1665267B5F23C5747E08FCF63D00C685FA3AD16ABAB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1