General
- Target FN Cleaners_[unknowncheats.me]_.zip
- Size 81KB
- Sample260720-nnjb1aay5t
- SHA256 292e3bb7d04e2037c045a424f7eba41036d6f6a7d1535bf43b2e034494185b69
- MD5 5b42249bcc44daf5cf06c2bb87c1c326
- SHA1 e6aa939dcc422055ce22e0d2eb6eee78223ac838
- SHA512 b04d60901eafa979139f2269e9b9482e2e14028debc085be406abd38d4fc8b0c3bc753ab291c0152d12702232efb76671b5ea6a9fc8087f0e8b3bed15075cf6e
- SSDEEP 1536:nyF0Fj/LTeWkce+U4m2+HZtwaksr1bztNzY0uoRrKjEmfgvqJw:cumWkce4ufJJpbzHuoRrK2r
- TLSH T15B8312CB9CE4A0C4E45E62B9E9228AFB2048594CCE7407272F3C5D396D3855D6CAD4D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
FN Cleaners/clean1.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
FN Cleaners/clean1.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
FN Cleaners/clean2.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
FN Cleaners/clean2.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
FN Cleaners/clean3.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
FN Cleaners/clean3.bat
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target FN Cleaners/clean1.bat
- Size 579KB
- SHA256 9fa1a9cb82e9731cba045d93ce8720a78eac7e48e0c88c1a76f46e3536a2341e
- MD5 5512c5dce702c3564581f40032ef877c
- SHA1 3c3b98500b82df4ebfb80bfd20c7399ef029f2d5
- SHA512 9541dec6b3fe149c24065d481e21f3943d94646b6b7ccff31643a70a1e2c6f89272a5047e63d49dfac9e07aba9dd5b4215544a6a04b1fbfdd197db7017f6cbe8
- SSDEEP 1536:iYLmcHjAkpYLmcTzg8gxDRnvplQL5LvLpLjLwazhztzhzo:iYScHNYScTzg8glRnvpWzhztzhzo
- TLSH T162C4654027248011D5B3364DE66FB8296F6DF18F71E06AC711EEBB0DD89B91CC2752EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory
-
- Target FN Cleaners/clean2.bat
- Size 265KB
- SHA256 a3c1a9061c4caddfa5023640eb8c33c3c99859320a8c3164e88facba9166bf35
- MD5 ce55c0703b6be160771e927ba9de028f
- SHA1 144d8889c6d21de0121e189ff3a3d9f607875faf
- SHA512 a71678d1aa93a98c82721b351bb52aa339d374070aa85bb2a5782ee499823234d9bfdca1736c14dcba3626365059798275a6e55864cb7253a1895c91e4b82fdf
- SSDEEP 1536:gwNoZxBOz2oofaCWfr3PwUWgM8361L5LvLpLjL5Gzf4oH9Gzf4gH9c:gLfaCWcUWgM+4oH9q4gH9c
- TLSH T1F744B0926219A632E867108CC3EF855E38B8D08615E137B251F5EE0CD98B83C557BEF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Stops running service(s)
-
- Target FN Cleaners/clean3.bat
- Size 22KB
- SHA256 8e43a6e232e9842777d3fce8c552bf942359757e6af092595c98ae101ee0e94d
- MD5 fbd3ebe26a823f86ae2deed72df613b9
- SHA1 ac360161007807aff1577ca90edc57b21c3d14c3
- SHA512 2def0b5306711a7806cdfe58196877cda39f3b0bcc5786776d9164f28310dfd85cbf922dc1619f2bba3dfa5c84a5701d1b948042e0af28b6af5c4c893ce045f5
- SSDEEP 96:tVeN1ZifiB1ifIXi4C4AySST5bWV7oJnJdwTK4hS9X4V4j4V4z5Rg51fH84f/vWo:KZifinifILh9aswTthIIhU0
- TLSH T175A28FA1BFD1E237AD5B421E037EDF1A45AC8C49128412702772BE49E28E43C65F1EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Windows Command Shell
1System Services
1Service Execution
1Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1