General
- Target FC26_NOTACRACK_v1.0.136.57334_Showcase.7z
- Size 360.5MB
- Sample260709-a79reabs3p
- SHA256 c690f3a1ea865837ea46da903cd10bb125b9523d064acd343d200fd83fe08adc
Malware Config
Targets
-
- Target FC26_NOTACRACK_v1.0.136.57334_Showcase.7z
- Size 360.5MB
- SHA256 c690f3a1ea865837ea46da903cd10bb125b9523d064acd343d200fd83fe08adc
Score1/10 -
- Target CryptBase0.dll
- Size 93KB
- SHA256 3e87682118e593f334ba665826e2a6ab85ba460f2e1fe95b173a7199863ad454
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FAKE/Activation64.dll
- Size 2.9MB
- SHA256 9ec7757f3ed9e647ce22f30f0800038ede7adae5760bf8b670f4cf5fb7493fe8
Score1/10 -
- Target FC26_Showcase fixed.exe
- Size 428.4MB
- SHA256 c7988bd040d1e9506bd6445f219ad13a1adb3c889eec8e3030408198bd430006
Score1/10 -
- Target _EAAC/FMM/EAAC.dll
- Size 15KB
- SHA256 ae5d28cc8ddae6d7d5a9f725130f0f8b6144d4e687250f16ab3ade8b2df1ba82
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target out.upx
- Size 38KB
- SHA256 f1ee5c7a42c14b2b3481905283600f32fce8e8dc60d012a08fe589270d7a3791
Score1/10 -
- Target _EAAC/FMM/EAAntiCheat.GameServiceLauncher.exe
- Size 103KB
- SHA256 ac082c20ec43656aec797a97ac2bf3b0db4089cbb52a3173196d299fa01cf448
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target out.upx
- Size 125KB
- SHA256 9883d9e806a9726e7e054a78431927c9bd4ab074320abe04c5edab7a8de0cb43
Score1/10 -
- Target anadius.cfg
- Size 3KB
- SHA256 d7a013680e4d7cba78382a2e574b2ba1779456aeac648d229e8a145ce8c95d6d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target anadius64.dll
- Size 678KB
- SHA256 9e420c3aae5ea26410f0bf578f86c47e51e36ff770b9e2a28b5eaee46aed786c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bypass.bat
- Size 2KB
- SHA256 071c35e0915d00b1077d65ae64312d89e208560449ca48a35bf3fc3580982321
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.