General
- Target Abi's FFlag Injector.zip
- Size 294KB
- Sample260719-ebjbssa19l
- SHA256 8a6e254e2eea506d6fec6460dbbcc8006a75e14821777f862e6202b08ac704af
- MD5 8b90194b62317bf8a06cc92b578c6a85
- SHA1 7b02c3623ffda9a346fcb4bbc9268b81fe429e4e
- SHA512 af0cb10241dc8836c0442571355585a30c307dc0746320d50c721f58c0d8d4fd8e9775a02e9d1afea92ebd1c90cc0aa4630d2b309d483b7ca40e63dd33c75f54
- SSDEEP 6144:Thk5i9QhVAlMxXWx4nLiNqDjrts8z0HdRxEcwI2nMXdfL4:2KQhKlGkoiijtIHdvEcwIdNfL4
- TLSH T1FD54237AAAA0F90BED02257E463C53CC7104138D37827D91AA4D7AE6E2C797365AC712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fflag injector.exe
Resource
win10ltsc2021-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
FlagEditor.html
Resource
win10ltsc2021-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
System.CodeDom.dll
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
runtimes/win-x64/native/WebView2Loader.dll
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Fflag injector.exe
- Size 74KB
- SHA256 40d28faa1ed4dffb98523b7d33e0af8cdf95af63b622fcea1d24283edc11b209
- MD5 54b52576f63e205ba48326ed4a6edd3e
- SHA1 11eba4d9068d863a75432bd6df0d602082f05cfe
- SHA512 0eb728b53f1ed7724f6621c546e8a1b52f5d2f0efc0f762074dcb5db65dcb3f0a6aa545a584ca96059184789291437e5df7084185a3ae4b3fc144c7e6095f311
- SSDEEP 1536:FFmVvdmqNgosgcOBuge0NOlf9VEseDxX/dJpftETQfMOsRH85zsdoHZsbq0zwwVY:zSvd1NaNLeDx1LtETQfMOsRc5zsdoHmo
- TLSH T16D732B4173F92917D2BE9AF95935120287F2F12B3422E3C97CCD74DE1AE2B804952B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
- Target FlagEditor.html
- Size 19KB
- SHA256 d2c34c09ccd28fffaa024cf260f4e8da0dc4557ebc51b35535e1b0ee202f17ce
- MD5 bb603638274a8176f59c8fa566468f24
- SHA1 ff193379bf4a8715391fd45605532aa7634a4a8c
- SHA512 387b878cec385851a9018449a8a98d65e32f72720b9547e386551add5e0b7f71f082b2aae43ed5d6ff458689e91a43fae619c439ea24abac2da6f466523d64c6
- SSDEEP 192:5EnNpUFEsvrLSDcaWiLH9rGVBQQc9my2r0BySprlvoAKJlTppZomijCFE8VTq0XF:XzvUlbrlvoDTpz1ijCFE8VTzXIa5j5V5
- TLSH T1E692701AA61122398977E3BADFE3830CFB71151B660192587EDC92011FB1E5582E7FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Microsoft.Web.WebView2.Core.dll
- Size 681KB
- SHA256 3c6831b6178b299d951017c3d7bf323b57cab1b7039af277526b88e3116259b2
- MD5 e716aaf11102568bb78c8dd61e4c8926
- SHA1 24cd53f5fb474fe2e6bdaced8c2feab113e64082
- SHA512 52b433579c4d0bdc9d3e2a916857c8b0c066caa36ecedea59151302230d9bb65b601b736ad657e628613594a35e9054f6d72e113ad39c74200d55f153d50813c
- SSDEEP 12288:pJ4dCXzRKX4EcJupbSRi461R1VarP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNI+:pJ4dCXzRKX4EcJAD1RbQg
- TLSH T1EDE4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 f9fb385db61724794c8a122504e34f07335b83844f301eaa9fc853bcde14fe85
- MD5 8a3be67344f2d7916ff7b4e9650a9afc
- SHA1 68be9defe04241488ed4614091e3c3934d55a2d3
- SHA512 4b45fd3dbe2c3ca9365398fa2272b86f8936679c1bbf6986bab88bc7a0377c62aa0deb778245d55d1b21820d04132f1643b1a904fdcdfaf360b7c6872a91b6bd
- SSDEEP 768:uGQNb2vIYymJ22Mss+5NQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSx7:u5b2vLbNQ+ZDgcEST3p4JjrjaeFSUyaH
- TLSH T154033B4083ECC517E6EB6F78A8B4416107BABEC27DA1D7A85D84F1EA0C73BD055113AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.CodeDom.dll
- Size 33KB
- SHA256 e733e2626089bb2a6b61891d73c8a331c908b41283e3fc9de90eb2cb911d8da8
- MD5 753965970213f3ba4619c4f881b0f7d6
- SHA1 64539dc33368da5b71d899aa239765390b41ecf8
- SHA512 76c70ec260acc67205c15c3dedd2acba33db37bc21b19b5056d4f3427d211bea2a8ed3a9cbfb574f17d53a53e6e4bf9b32ec801c24379a835caddbf9e3d67c7e
- SSDEEP 384:hqwpvR+BU3i82PR3P8f41AE2YifqNUBxehzsCtZ7U6rtk2iByyvWQQuWKT/hljH/:h/vS825UQSE2YVhzZeC6TDjVz9zX
- TLSH T1B6E23B2557EC07BEDEAB0B3069B7C1961FF5A3D33821D31E164894091FA2BC89532B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target runtimes/win-x64/native/WebView2Loader.dll
- Size 159KB
- SHA256 12f7708910e1aac5cc9ac43603d122f1d2e770ae2651830a07ef8b3117f28c55
- MD5 e08c7255be2fe5b2c0991b3161589181
- SHA1 6bbfea42b7fbe29fbd830f09e754f027f69f2a50
- SHA512 65b620065c0fcd6ed51066d18b40129b26c90d7908ffc6d579ae72204573ca49ca39ab0cf4d1205e85de35988f055cd4be3c9270159b8dc4907be366df49bf7d
- SSDEEP 3072:VT3DhbXErY+deJmnFA5fYFvfBBY11U9yTT3nkFEtJYDUWycML:jUrNOWFCYFvfBuFncEtJNWM
- TLSH T15EF34B4773E500BBE177C27889674A46E776B8111B60AAEF03A443791F23BD0AE3D761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10