General
- Target FSLabs Control Center-2020-2024_2.0.1.152.rar
- Size 102.7MB
- Sample260808-mapfesdn21
- SHA256 a5510c6d0745f01b6864c82f150a5485c9513d0de58eda3b1cbfd6b0b2fa2970
- MD5 66b014c0b30975bbd8d95c2d7262e064
- SHA1 c96e4abd8153a278ed34e164b66a1fd8fb4b3025
- SHA512 9af5dc19de6e441546f66c01074c3335fd9aea22d95a8e76e7e65d7e3f9c9b2a9144dc38e6ff8bcefbe7e0c915e83f8673e75dcc7719aaeb0df501403d38c2b5
- SSDEEP 1572864:OIK9gC6vKo7sefurrVqMiFevURN2qfE6UujuR1/6l84UwZLM8K85OX7o8h:OQC9o1fcAIvUCuFlHu85OX71h
- TLSH T1A33833D5AB03D5D9DBBBE8B671580D0DCD75CB15B89AB312CF328944D1D8E88AE827C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
FSLabs Control Center-2020-2024_2.0.1.152.rar
Resource
win11ltsc2024-20260709-en
28 signatures
150 seconds
Malware Config
Targets
-
- Target FSLabs Control Center-2020-2024_2.0.1.152.rar
- Size 102.7MB
- SHA256 a5510c6d0745f01b6864c82f150a5485c9513d0de58eda3b1cbfd6b0b2fa2970
- MD5 66b014c0b30975bbd8d95c2d7262e064
- SHA1 c96e4abd8153a278ed34e164b66a1fd8fb4b3025
- SHA512 9af5dc19de6e441546f66c01074c3335fd9aea22d95a8e76e7e65d7e3f9c9b2a9144dc38e6ff8bcefbe7e0c915e83f8673e75dcc7719aaeb0df501403d38c2b5
- SSDEEP 1572864:OIK9gC6vKo7sefurrVqMiFevURN2qfE6UujuR1/6l84UwZLM8K85OX7o8h:OQC9o1fcAIvUCuFlHu85OX71h
- TLSH T1A33833D5AB03D5D9DBBBE8B671580D0DCD75CB15B89AB312CF328944D1D8E88AE827C0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1