General
- Target FFM_Installer.exe
- Size 18.0MB
- Sample260806-pb95mavvay
- SHA256 ae7a6d1a8f9ab0e47e3612cecf1be019bb854abfdb8b9a6832735a1a94c7b5bb
- MD5 de97c86a8a70551d27aae6d342863e63
- SHA1 89bf8d1f03c169e3a8ec2c667cff89a519484258
- SHA512 adb6979fe7c7ee82cbdfa3f5117cc6bd462ceaeb8d696d3d0fdb350006912d53ff1ed0ec47e72db8088cddae7418ce42f2c41c86bdba616853465a2a42d5bd99
- SSDEEP 393216:ccUwkhIGV/4J+mQ29U+d7f8VFXHwZl+LDUoBMo73+Ushu/deEBy613Ww:x3UVPychwZoLDUoDshu1eE71N
- TLSH T1D517333FB25B653EE07E19393AB2D615553BB661A8064C0697F4C88CCF250B02D3F79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FFM_Installer.exe
Resource
win10v2004-20260513-en
19 signatures
900 seconds
Malware Config
Targets
-
- Target FFM_Installer.exe
- Size 18.0MB
- SHA256 ae7a6d1a8f9ab0e47e3612cecf1be019bb854abfdb8b9a6832735a1a94c7b5bb
- MD5 de97c86a8a70551d27aae6d342863e63
- SHA1 89bf8d1f03c169e3a8ec2c667cff89a519484258
- SHA512 adb6979fe7c7ee82cbdfa3f5117cc6bd462ceaeb8d696d3d0fdb350006912d53ff1ed0ec47e72db8088cddae7418ce42f2c41c86bdba616853465a2a42d5bd99
- SSDEEP 393216:ccUwkhIGV/4J+mQ29U+d7f8VFXHwZl+LDUoBMo73+Ushu/deEBy613Ww:x3UVPychwZoLDUoDshu1eE71N
- TLSH T1D517333FB25B653EE07E19393AB2D615553BB661A8064C0697F4C88CCF250B02D3F79A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled