db9fb461143e4e9d5f18ed7c86697dbd7e619c2d89d7565fc61999933ce47dbd

General

Target
Fable-Claude-Free-v3.2-beta.zip
Size 476KB
Sample260813-fnqgbasckd
SHA256 db9fb461143e4e9d5f18ed7c86697dbd7e619c2d89d7565fc61999933ce47dbd
MD5 ba6a87046fc0821ef1472aaf20878dc5
SHA1 2396113e5f1fd888c36cf6d7177e0bbd4ef49ee9
SHA512 b831ff7bdff3751d49c5d2b7f200223b0ba45ad0515a27c9a9a3d4825537b13915ee282716bfc1d6aa5cb423906969bae3066bdcf671e4da79745afc76f06cc2
SSDEEP 12288:xBQ8e8DaUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZm:ne8DaUv4t1cNk/wjibhv4b2OnY
TLSH
T142A4239278717D1EE4A2DFFC88C056CBE0B5023D251933E2A36249C6B9D5132AF5BE17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Fable-Claude-Free-v3.2-beta.zip
- Size 476KB
- SHA256 db9fb461143e4e9d5f18ed7c86697dbd7e619c2d89d7565fc61999933ce47dbd
- MD5 ba6a87046fc0821ef1472aaf20878dc5
- SHA1 2396113e5f1fd888c36cf6d7177e0bbd4ef49ee9
- SHA512 b831ff7bdff3751d49c5d2b7f200223b0ba45ad0515a27c9a9a3d4825537b13915ee282716bfc1d6aa5cb423906969bae3066bdcf671e4da79745afc76f06cc2
- SSDEEP 12288:xBQ8e8DaUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZm:ne8DaUv4t1cNk/wjibhv4b2OnY
- TLSH
  T142A4239278717D1EE4A2DFFC88C056CBE0B5023D251933E2A36249C6B9D5132AF5BE17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Fable-Claude-Free-v3.2-beta.4/Application.cmd
- Size 24B
- SHA256 2fd3cb8aa174b29406cd39f62369603891840e90bb65cd8aaf4fb3e32a28f166
- MD5 13a13c18964a8d1668d1dd696e8ad379
- SHA1 3be568e60c9e69fb210880e0061d7e5219c8a23d
- SHA512 4c84435f6d333de40fbe9608e407a4f6be9fc9214e3d0469423efc09b04d22792229a1053af871c91208466ad671f8161f4c6848b592438eb32273c486b369e6
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Drops file in System32 directory
behavioral2
- Target
  Fable-Claude-Free-v3.2-beta.4/cert.txt
- Size 179KB
- SHA256 45826178ce4b9a2ca441a5515f33a7d4e6e04cb274f95787ed4563aa537d8703
- MD5 81d096548aef39638b2051cc8c6e36c0
- SHA1 08bf65d89e888ac43c3d833ae2f8ee3433ab6f0f
- SHA512 1685bf919d85b86148b0eef6279c08052efe7f29c66e0679549111fcdb9aa54292c1c2628e351f8d5ce47fb511de32b6da45bd14b6d103ac50d8ecc9c3108560
- SSDEEP 1536:fAnI/r+KLfwfmkD8G18o8puMtV8b5lKeC4GUpa2UXqlzp5MZTwggHTbDjMq9QzIV:flRLm8pLO9RN3HTJ6lIhBd
- TLSH
  T1690453E651892DBAD9D7C294EC57AC9B35F781E01F4F264A0F60D0A136F0264D7CE82B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Fable-Claude-Free-v3.2-beta.4/utils.exe
- Size 742KB
- SHA256 e227d47facf0e2f5b9e5c54a23a86b31272696b64bbbb9932a31fe06973677bd
- MD5 7a59df9ee2ae38c391b60c001d8fef11
- SHA1 a5fa49ca3da03fb01f2a96fa99521f263665f9ff
- SHA512 8237b3fd2a41a08bfb8ca95060e1a7f8b030538d587746b1b050d1ce0f2a6f4898ff31e65243c97e6b343a8112159839cfa85f47ecffc20a621dac64cf947b7a
- SSDEEP 12288:PFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:PFs4FZnKsrLdiCUMs/KiesyYA
- TLSH
  T184F4BF81B6D381F3D992117148B9A77A0E3D6D1007259CEB83D43AF68D346C0AF776AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4