General
- Target fd-v10.2.0-x86_64-pc-windows-msvc.zip
- Size 1.3MB
- Sample260731-ph9sfaserc
- SHA256 92ac9e6b0a0c6ecdab638ffe210dc786403fff4c66373604cf70df27be45e4fe
- MD5 9d5b7e87409f0bf4b3d2b0828737d9a6
- SHA1 4d314c51582781216fef3e323cfa3a5dcc6a8bb6
- SHA512 a0e6e28cb70970db57aaf2f717c77c4e6fd7809133b0d21fb035e5e6171787240cbfa77bc45786ac599a315dbf91dd1f5ed8c33e28724772535b6ec4b59f081d
- SSDEEP 24576:zr5QK4epAFrSzJOwxJW0LZKsYwQUJg+Se04ZJ47/XGmD6agFgNa:zr59htXW0ks/Qv+I4n4DXG8cFgNa
- TLSH T1CC55336B2DE2D96CE1BE11B0639D1308C3FE1743524982B96951BB36BDC3366468CC6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
fd-v10.2.0-x86_64-pc-windows-msvc/autocomplete/fd.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
fd-v10.2.0-x86_64-pc-windows-msvc/autocomplete/fd.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
fd-v10.2.0-x86_64-pc-windows-msvc/fd.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
fd-v10.2.0-x86_64-pc-windows-msvc/fd.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
fd-v10.2.0-x86_64-pc-windows-msvc/fd.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
fd-v10.2.0-x86_64-pc-windows-msvc/fd.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target fd-v10.2.0-x86_64-pc-windows-msvc/autocomplete/fd.ps1
- Size 13KB
- SHA256 a4e9f84915fa5e687edda8b1c8f2c1294f1bf18020d341a934c5765ae3739470
- MD5 7b93fe002b6facba383708bb43d45f75
- SHA1 0572880dce691517b43fef93f233863e0aee96c9
- SHA512 fc564d5eedb1d6b1d3a1cd4254e033f1fa5b0d798497573bb52dc269b75a107ee270b5b8fbba8b45c7d598f77bac82b5533c932721e2e314b41fd0f8ba7b2e9b
- SSDEEP 192:SNhANncegQmgJOjJmyyf6q75tYSPtKMpdcCOU:chANn3gQmgJOjJmyA75mSPtTphV
- TLSH T169525B11234AC24A1343439CD39B957A6DF5E1F527AF350A79EC9E24476BE32E00B6F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fd-v10.2.0-x86_64-pc-windows-msvc/fd.1
- Size 18KB
- SHA256 370b9cd034758b91fb08c49446399c39f96578ee21d374270f7587c0a2a818be
- MD5 041239c6689fcad9cd0bb9cf0aa54626
- SHA1 7ee361965dc673b1fcc15abceb8149b26dcd2c71
- SHA512 4cd0d6a175d0627fed51f4e3878d4af530da7bb8689a82cd824aef5123e893f88573baa361d2de6ae9ed19a2c49de7cbf90d2fa0b32fcb6e59044356ba73a363
- SSDEEP 384:0BR+Ks9F690im79oq1VFmUzvdhj/j/E+APBaj8qKzH3FePlw+3dW:0BaS+7aqsMbBQUM3X+4
- TLSH T1DF82C7532AC813B314730180F7D895A5E316D2BC23A9A69275AC636C333B87547FABDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target fd-v10.2.0-x86_64-pc-windows-msvc/fd.exe
- Size 3.3MB
- SHA256 c089c9ee1e412a111d65c917a95c757b4e192041f316a52535bfaa3e9e03429f
- MD5 88ef068fdb7b2ee55802d349ce7913b8
- SHA1 79573ce975ae3fa13e3dc8d6237351520bb3a063
- SHA512 7724de76c99cc5454790d8b9e9b112a1ce58e8b96e451d64d58c320b4b375ee8dd723ce0587b15f0a0a30e1b596bc205ef27447e92a500ef2e7029d8d2bd491e
- SSDEEP 49152:MCvrWUWxTiWKqlZEgtUc8zfIiSb6ziueQr/4mstZtXpe+PuOSsHgwZZ+u1YnQwCx:f0mq5Ur7YJXZJWnjC2dlvMx
- TLSH T1E9F51912BA9B58EDC09AC4B483464B631A2174CB0B35BAFF41D481343F6ABB56F3D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10