General
- Target Fn spoofer V3.1.exe
- Size 10.7MB
- Sample260805-n33deser7t
- SHA256 69551d4d5a91e5dcc6d8744a2ba3cc1fda7d5c7f7e855036c7f61a6c5137a66a
- MD5 2eb05dc75458af4b530957dc1565d45b
- SHA1 d326736eea23d2b499152e926fc7282771dd44cb
- SHA512 7a97826ce5e3cb38c06a72c1252a01a9cf4de2b8f6b551b2e04146e669d3359863cec5f4ed0c6d3ed57dcbfe0d6549dee8834ff490126d3febdf02f4983bb285
- SSDEEP 98304:Vs+06mU+/vUIEGXqAB2qldbU6fRkpe3ykimB1PF2EEaO:VkUIEGaABtlN7d3ykim2
- TLSH T1F7B64A47ECA545E8C5AED135CA669252BB707C485B3027DB2B60F3283F76BD0AE79310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fn spoofer V3.1.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fn spoofer V3.1.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Fn spoofer V3.1.exe
- Size 10.7MB
- SHA256 69551d4d5a91e5dcc6d8744a2ba3cc1fda7d5c7f7e855036c7f61a6c5137a66a
- MD5 2eb05dc75458af4b530957dc1565d45b
- SHA1 d326736eea23d2b499152e926fc7282771dd44cb
- SHA512 7a97826ce5e3cb38c06a72c1252a01a9cf4de2b8f6b551b2e04146e669d3359863cec5f4ed0c6d3ed57dcbfe0d6549dee8834ff490126d3febdf02f4983bb285
- SSDEEP 98304:Vs+06mU+/vUIEGXqAB2qldbU6fRkpe3ykimB1PF2EEaO:VkUIEGaABtlN7d3ykim2
- TLSH T1F7B64A47ECA545E8C5AED135CA669252BB707C485B3027DB2B60F3283F76BD0AE79310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates new service(s)
-
Executes dropped EXE
-
Modifies file permissions
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1