General
- Target FireFox-uninstaller.exe
- Size 20KB
- Sample260729-pkafcswtcs
- SHA256 8ea0168c63dadbd2184dad1ecdfac0d6f213607b9dd9e65d0dcfd0314548921c
- MD5 fd7c261fdc4d9cdc7f8017a005467a91
- SHA1 183a16813658210aa11f2a94eb4eed989b84999a
- SHA512 dc9df5c088e2f71d4e2e3dfc0e16afe6a51ffb763d958cabfbae4bb7e4d29836e89a3266e12e2c337e6ced466c238fec757350e993b1387a657a73e5845c9090
- SSDEEP 384:HW+T8nGAnH4W7Y3Ebl0dbU5k9Vng6LBA0:2IAX26Ty9tgkK0
- TLSH T12392D701E7FF0390F1BF0BB958B62385CA71B4CAD812C79E0658915C0EB2A41AF65F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FireFox-uninstaller.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
FireFox-uninstaller.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target FireFox-uninstaller.exe
- Size 20KB
- SHA256 8ea0168c63dadbd2184dad1ecdfac0d6f213607b9dd9e65d0dcfd0314548921c
- MD5 fd7c261fdc4d9cdc7f8017a005467a91
- SHA1 183a16813658210aa11f2a94eb4eed989b84999a
- SHA512 dc9df5c088e2f71d4e2e3dfc0e16afe6a51ffb763d958cabfbae4bb7e4d29836e89a3266e12e2c337e6ced466c238fec757350e993b1387a657a73e5845c9090
- SSDEEP 384:HW+T8nGAnH4W7Y3Ebl0dbU5k9Vng6LBA0:2IAX26Ty9tgkK0
- TLSH T12392D701E7FF0390F1BF0BB958B62385CA71B4CAD812C79E0658915C0EB2A41AF65F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext