General
- Target FADE.exe
- Size 6.5MB
- Sample260722-yzdk1abh92
- SHA256 c1574135396acbdc56fdb195a5daf4f53a5b130ac1f6ad5856aad6d0b593b28e
- MD5 fa94485ba363fdde8fcd01b29cb32034
- SHA1 1239109f3a98e2afcfe5d820ff34504a307612c0
- SHA512 91e48f44f6b07e3b3d74800fbba9546128588d49d9121b42175c3565824b6402702c44d415f16028bdbcbbe2596d4bea3fd7f6a3a92df6b0c845ebdbfbdbe759
- SSDEEP 49152:mW6YULSNvcredAEnPWi+YPHKVw2ZGUD5nOfNdoyVokqGUD5nOfNePHKVw2:mWSo+YPn2fFOfbsFO0Pn2
- TLSH T19D668C03F706D249C952AE346A7D637F5A70F425BF3A125BB5C91F34D8CB5808C68BA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FADE.exe
Resource
win11-20260513-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
FADE.exe
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target FADE.exe
- Size 6.5MB
- SHA256 c1574135396acbdc56fdb195a5daf4f53a5b130ac1f6ad5856aad6d0b593b28e
- MD5 fa94485ba363fdde8fcd01b29cb32034
- SHA1 1239109f3a98e2afcfe5d820ff34504a307612c0
- SHA512 91e48f44f6b07e3b3d74800fbba9546128588d49d9121b42175c3565824b6402702c44d415f16028bdbcbbe2596d4bea3fd7f6a3a92df6b0c845ebdbfbdbe759
- SSDEEP 49152:mW6YULSNvcredAEnPWi+YPHKVw2ZGUD5nOfNdoyVokqGUD5nOfNePHKVw2:mWSo+YPn2fFOfbsFO0Pn2
- TLSH T19D668C03F706D249C952AE346A7D637F5A70F425BF3A125BB5C91F34D8CB5808C68BA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.