General
- Target NewBlueFX 2012 Beta1.exe
- Size 175.0MB
- Sample260717-aaaaaags8p
- SHA256 edecebb1ee75f6be629a36a31c41323d50d387b51aec6e7ae076304279d37c0f
- MD5 1bca6a424b6875969337d6f159968b82
- SHA1 132ab8ce062a1f46835371a21315a71473fee196
- SHA512 9862ebf6a1eb3c601b2d7dc128cc940901ff53f413ed7058da9b585a08182f7fe9ed1f3d2328c7c50b3b724f846085ecf56e5dd1b01cd5340f408a5927d0623b
- SSDEEP 3145728:f3GtpMLiEappTst4JAF73DckSxixv8ovMmOf6M1/ngc1a7T6U/1qQlNu8:eiiEappIgAFUkSxU0sMtfTRngc+6U/1d
- TLSH T1F098335710F76660E19396731C0308A9C8B7691EA7189FEA81B34D8D8CE31CB3BE55F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NewBlueFX 2012 Beta1.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NewBlueFX 2012 Beta1.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target NewBlueFX 2012 Beta1.exe
- Size 175.0MB
- SHA256 edecebb1ee75f6be629a36a31c41323d50d387b51aec6e7ae076304279d37c0f
- MD5 1bca6a424b6875969337d6f159968b82
- SHA1 132ab8ce062a1f46835371a21315a71473fee196
- SHA512 9862ebf6a1eb3c601b2d7dc128cc940901ff53f413ed7058da9b585a08182f7fe9ed1f3d2328c7c50b3b724f846085ecf56e5dd1b01cd5340f408a5927d0623b
- SSDEEP 3145728:f3GtpMLiEappTst4JAF73DckSxixv8ovMmOf6M1/ngc1a7T6U/1qQlNu8:eiiEappIgAFUkSxU0sMtfTRngc+6U/1d
- TLSH T1F098335710F76660E19396731C0308A9C8B7691EA7189FEA81B34D8D8CE31CB3BE55F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.