General

  • Target
    8.Fraud fox cracking.zip
  • Size 7.5MB
  • Sample260808-nnswfaem3x
  • SHA256 b87153f99e1ff3baec73defd484dcd37625507c11afe8c10ffbc901d6bf21733
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      8.Fraud fox cracking/Ffox cracking tool.zip
    • Size 1.6MB
    • SHA256 4c3ac039eae74e743cf78cd1ba7772938913d2956fdb627c7c81687a76c3f59c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Modifies system executable filetype association

MITRE ATT&CK Enterprise v16

Tasks