General
- Target fo-wsftp605.exe
- Size 1.9MB
- Sample260809-pjg4taep3v
- SHA256 2d19814d33cf0770b925104b91418bf364c78e59b1d94a45a62a5fe6a2c157c1
- MD5 2d80c1c3948f95797bbe14e8fc5e2652
- SHA1 a4bdd27bb12c7428d0d16e605cc2ed5032becb02
- SHA512 6586d54166cbc8a788c20ed841e010a7fa422b1d1e433885396d617ab3c3660818c93c1c88d5f69fde3866ca41c43b85852ea53266da1a1f3f4634c68f388194
- SSDEEP 49152:tMCvNprR5Fovc9rZaj6BYA+lCv7GIK/b32mheB:2ClxR5FokraHlCjfKz32mc
- TLSH T17C951221FFB8C260F2B29036AD715764883BBCB0B7335443E694369EDAB368145D1B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fo-wsftp605.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
fo-wsftp605.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target fo-wsftp605.exe
- Size 1.9MB
- SHA256 2d19814d33cf0770b925104b91418bf364c78e59b1d94a45a62a5fe6a2c157c1
- MD5 2d80c1c3948f95797bbe14e8fc5e2652
- SHA1 a4bdd27bb12c7428d0d16e605cc2ed5032becb02
- SHA512 6586d54166cbc8a788c20ed841e010a7fa422b1d1e433885396d617ab3c3660818c93c1c88d5f69fde3866ca41c43b85852ea53266da1a1f3f4634c68f388194
- SSDEEP 49152:tMCvNprR5Fovc9rZaj6BYA+lCv7GIK/b32mheB:2ClxR5FokraHlCjfKz32mc
- TLSH T17C951221FFB8C260F2B29036AD715764883BBCB0B7335443E694369EDAB368145D1B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.