General
- Target FN.Rage_loader.exe
- Size 1.1MB
- Sample260816-ejb8fszvg1
- SHA256 fd7e1fcd0fb79403a5920a87f69df1e19c437088193db4a7c2eee5d070335465
- MD5 5e06b0cd164435b7b00e811f9b5d58a7
- SHA1 3534ac9b07f3cda269d3cb084887effd90dfe1bb
- SHA512 22ad701f114575c160de4b4f5e194a01d6db9532fc6b907924015b62ecf44fc2a01448f6743e38a87c061f9241f84c4e5abab7c4ec09bf4c94ba5ad32ae65a3e
- SSDEEP 24576:PFOa5HZBi99Ck2EEW9pmjIaHNx56wTxNqnNuGKFuesdQEB3s:tlGqk2RfH77cn3GEB3s
- TLSH T1E645AD1362A405FAD56BC078D466E317FA76781913209ECB53E09A242F737D27EFA312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FN.Rage_loader.exe
Resource
win10v2004-20260513-en
15 signatures
60 seconds
Behavioral task
behavioral2
Sample
FN.Rage_loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
60 seconds
Malware Config
Targets
-
- Target FN.Rage_loader.exe
- Size 1.1MB
- SHA256 fd7e1fcd0fb79403a5920a87f69df1e19c437088193db4a7c2eee5d070335465
- MD5 5e06b0cd164435b7b00e811f9b5d58a7
- SHA1 3534ac9b07f3cda269d3cb084887effd90dfe1bb
- SHA512 22ad701f114575c160de4b4f5e194a01d6db9532fc6b907924015b62ecf44fc2a01448f6743e38a87c061f9241f84c4e5abab7c4ec09bf4c94ba5ad32ae65a3e
- SSDEEP 24576:PFOa5HZBi99Ck2EEW9pmjIaHNx56wTxNqnNuGKFuesdQEB3s:tlGqk2RfH77cn3GEB3s
- TLSH T1E645AD1362A405FAD56BC078D466E317FA76781913209ECB53E09A242F737D27EFA312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Stops running service(s)
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1