General
- Target 355f8985811a2d27.bin
- Size 4.3MB
- Sample260801-162yaahf83
- SHA256 03f280b704fe9ae8282edbcad196f835908bcc83938fdf6daaf84caacebd45cf
- MD5 a85e16e7466d35a6b769fe777cd34fcf
- SHA1 cdc43b346a0213acc9e98cf97c4c66e3747da5d9
- SHA512 d4a77864881969abe49e9367f7c0263e63847a556430b7205fc99d0a3f221a48d97abd00427d4d64f1edb8106a08be9205eb886d354ffd08b027de0941f9ed26
- SSDEEP 98304:l2ywQrXbCj6BcpPivtnlzcHTZYmzWXz8T8VoP:XlrLCjAcpallXjmIs
- TLSH T1D22633D26A8F0D215EE45AE345456C6DC006D6C1AB9F2FBA4FC70BCBAD9DE0D10BB214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
EXFO FastReporter 3 (64 Bit).msi
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
EXFO FastReporter 3 (64 Bit).msi
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target EXFO FastReporter 3 (64 Bit).msi.bin
- Size 15.9MB
- SHA256 355f8985811a2d271d3a38ae6dca1ef967c18c442103ceab1c868952dcc53e7b
- MD5 c16727e05b674d4ec5117d9dc764f935
- SHA1 1fed1792ccc115b9633fe4e23f2d1cc0eb1ee11e
- SHA512 79e66531e0d472522f04845ef21d38d5466828dc62ef71964709dd1b431b18ca12fd2149b52fa74ecd1d68e4e8ef39b0304b00fda75b35d16d5003284661da50
- SSDEEP 98304:X7K5DqLy+ghK8UYyiTs7mb2IUgQWuF2dRCjsjmBep4HFLzrwFykBKl:XG5KgKUmcjmBepIz
- TLSH T11DF6909150840126DB0B0F37922395A0F53BED9D7F7AAD1EAB2E75B46BB31DC4F10A81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.