General
- Target 8.Fraud fox cracking.zip
- Size 7.5MB
- Sample260808-nnswfaem3x
- SHA256 b87153f99e1ff3baec73defd484dcd37625507c11afe8c10ffbc901d6bf21733
- MD5 0710e011e690b7acf1cbdce5c132672c
- SHA1 f0c5b626d6f4eb996a4c4908dfd29d36232fb844
- SHA512 f9a72dc77f3c895fce34e04a9fd34b4104bf49eb913d319b174980d20cf077e0b67227c6f246ef6972623369ed8dc04396fed574ab29d1038610518841b7b77b
- SSDEEP 196608:8L//6R9finh+rmBp8o40rbxv8Vss86wvYZqN/E:8L/6R9fcgo4IpxXy
- TLSH T1FD86337B54651E44DA734E7086C54E509C9594AEFF371CE3AE0F1909C8EA8F8A8B72C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
8.Fraud fox cracking/Ffox cracking tool.zip
Resource
win11-20260513-en
11 signatures
300 seconds
Malware Config
Targets
-
- Target 8.Fraud fox cracking/Ffox cracking tool.zip
- Size 1.6MB
- SHA256 4c3ac039eae74e743cf78cd1ba7772938913d2956fdb627c7c81687a76c3f59c
- MD5 5f4ed5295901a3a600e1f840dd4e66f8
- SHA1 cb4dd2b633ce095051eccecfbad05b984ac4aaa0
- SHA512 5cf1d0eda11782ffaba26196e1e5e9cd391aaaab2cab161463635272f1ccbef484bcdaa5018308e79043b35dfd8f365bd2a5dc7222e965284eed8c8c4729ee89
- SSDEEP 24576:i5DVDssYxVSRcGQxGElMrCd7CgD8PwJuIwZVf8fFn7DXPqKtpg2ii94ljgfP:iJVDss8JNxMQ7CgD82uwn77B1ii9Wa
- TLSH T1A67533528D111EB3EEB8C72061C6E13956C3CA5CC3B66DA53D3F2201CCF149569B7AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1