General
- Target FigmaSetup.exe
- Size 144.8MB
- Sample260709-kjddeags2x
- SHA256 371ddadf46485dd23b8b9f526988fbf2fa37e57ef1ee710e780961396cac14ca
- MD5 e7f4e6f476a17033d115b5bdf9bd95bf
- SHA1 4073c34f792fa984f7944615721b282d33abbfe2
- SHA512 15a1349dee4bc7581b02f727f36e43939ecc6169aa35df0747e290231ec9905a77321dad5f6c940a26816ee2cd4667e6fd1457b135f16e2e5dc5c6ecc2df3b0b
- SSDEEP 3145728:/1c7GmGDyNLxITfhOZiUlQ/gsymNx6isDw6FsbRrnQIYYmZPI:tcSmHRxOJOd2JX6isDl6RrnQIYYmZPI
- TLSH T165783361CECDC47FEEDE6FFA554D99E0912EFD6D14200111CD833BA29BA30D11A26B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
FigmaSetup.exe
Resource
win10v2004-20260513-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
FigmaSetup.exe
Resource
win11ltsc2024-20260706-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target FigmaSetup.exe
- Size 144.8MB
- SHA256 371ddadf46485dd23b8b9f526988fbf2fa37e57ef1ee710e780961396cac14ca
- MD5 e7f4e6f476a17033d115b5bdf9bd95bf
- SHA1 4073c34f792fa984f7944615721b282d33abbfe2
- SHA512 15a1349dee4bc7581b02f727f36e43939ecc6169aa35df0747e290231ec9905a77321dad5f6c940a26816ee2cd4667e6fd1457b135f16e2e5dc5c6ecc2df3b0b
- SSDEEP 3145728:/1c7GmGDyNLxITfhOZiUlQ/gsymNx6isDw6FsbRrnQIYYmZPI:tcSmHRxOJOd2JX6isDl6RrnQIYYmZPI
- TLSH T165783361CECDC47FEEDE6FFA554D99E0912EFD6D14200111CD833BA29BA30D11A26B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1