General
- Target Ferns_Installer.exe
- Size 156.5MB
- Sample260731-ppcraatve1
- SHA256 57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055
- MD5 b664d54732f9253a27f4da145fefc312
- SHA1 22a22a9d33706840ffff372220e3ffc3190f7293
- SHA512 84c373c827156cf755a577d5fb62f3c072216e9c28eba9a15cf77377b3e10164c56c2dcaf44b4f6a04e2b0b535c28024ff757256178fd43466d109fc044cc889
- SSDEEP 3145728:huxtTxAQqlwovTG/ehtohUOkieYQDfnQFMifmmHZBT/G1vA9dEhkT+xgGO:hAxZYm/efohUOFwTnQHum3e1vA9dEhq
- TLSH T1F67833727A85A73FE67E563B08F5E71088371614F4A64C2A52D4488CCF6A0706EBF727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
Ferns_Installer.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ferns_Installer.exe
Resource
win11ltsc2024-20260709-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target Ferns_Installer.exe
- Size 156.5MB
- SHA256 57cbd7129a2942910d80bafaaede133eb03e4d5fe1aaa9fdc754f32c7d24b055
- MD5 b664d54732f9253a27f4da145fefc312
- SHA1 22a22a9d33706840ffff372220e3ffc3190f7293
- SHA512 84c373c827156cf755a577d5fb62f3c072216e9c28eba9a15cf77377b3e10164c56c2dcaf44b4f6a04e2b0b535c28024ff757256178fd43466d109fc044cc889
- SSDEEP 3145728:huxtTxAQqlwovTG/ehtohUOkieYQDfnQFMifmmHZBT/G1vA9dEhkT+xgGO:hAxZYm/efohUOFwTnQHum3e1vA9dEhq
- TLSH T1F67833727A85A73FE67E563B08F5E71088371614F4A64C2A52D4488CCF6A0706EBF727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.