General
- Target PlanetFN Free Perm Unban.exe
- Size 445KB
- Sample260804-avl5ksab52
- SHA256 4f3527caa6f067b9779ff16072d6bb20a07dc327b56e21afdc50e6ce81b3eea1
- MD5 46cd698078dbc8cb8883dae43b589f92
- SHA1 9005d4a89c738f7079649d706038a5dce072f1d0
- SHA512 3a5612c50232fb6f1993eb72660849105ba6696b20f38adebdc9d5f826a0f206cb5f952715149a074f358711c4e462c36d90e2fcfe18c05c7017e100fefa056c
- SSDEEP 6144:tNja6zESYsmD4JtuW2sRBDyv8N3cBOCbQVv1SYp4rIZTHFOL:jjnx08tuWJDyv8N3mOCMbSv0
- TLSH T1BEA47D5AA6A704A5E1A3817C85178213F376B05D27609BEB53E0C5B82F13EDC7F39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PlanetFN Free Perm Unban.exe
Resource
win10ltsc2021-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
PlanetFN Free Perm Unban.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target PlanetFN Free Perm Unban.exe
- Size 445KB
- SHA256 4f3527caa6f067b9779ff16072d6bb20a07dc327b56e21afdc50e6ce81b3eea1
- MD5 46cd698078dbc8cb8883dae43b589f92
- SHA1 9005d4a89c738f7079649d706038a5dce072f1d0
- SHA512 3a5612c50232fb6f1993eb72660849105ba6696b20f38adebdc9d5f826a0f206cb5f952715149a074f358711c4e462c36d90e2fcfe18c05c7017e100fefa056c
- SSDEEP 6144:tNja6zESYsmD4JtuW2sRBDyv8N3cBOCbQVv1SYp4rIZTHFOL:jjnx08tuWJDyv8N3mOCMbSv0
- TLSH T1BEA47D5AA6A704A5E1A3817C85178213F376B05D27609BEB53E0C5B82F13EDC7F39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Stops running service(s)
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1