General
- Target Boris FX Hub Installer_Sapphire-1.1.31-win.exe
- Size 29.8MB
- Sample260817-3tp43asvfy
- SHA256 abea3f7ef4645f66d2fcbeb02072802d0d80c15e23c4a62d1fbb5cc3ffaa3174
- MD5 953161b14f15b37dfff59547205b6759
- SHA1 207a1211eef9b3cf1478143fd705c1e7275390ac
- SHA512 d7d16d07de3b9c51b64191e1a48aef615b3a01c14648703bf9b557480db4f894892df6d3929a85c1bc56e1bdb2f92e383c6ae0630ce63c34a987a1a694737872
- SSDEEP 786432:2/MEUUercprUqifJ18e8ng+lAWdHOiP16+rxfHMd/M/:EFOqrUqifn8pg+S4uiP9Q+
- TLSH T1FF6733B274D9C1F9D02007379943FA2D5A78BC8E1224D8C27B49FD6A87328E3957D9E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Boris FX Hub Installer_Sapphire-1.1.31-win.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Boris FX Hub Installer_Sapphire-1.1.31-win.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Boris FX Hub Installer_Sapphire-1.1.31-win.exe
- Size 29.8MB
- SHA256 abea3f7ef4645f66d2fcbeb02072802d0d80c15e23c4a62d1fbb5cc3ffaa3174
- MD5 953161b14f15b37dfff59547205b6759
- SHA1 207a1211eef9b3cf1478143fd705c1e7275390ac
- SHA512 d7d16d07de3b9c51b64191e1a48aef615b3a01c14648703bf9b557480db4f894892df6d3929a85c1bc56e1bdb2f92e383c6ae0630ce63c34a987a1a694737872
- SSDEEP 786432:2/MEUUercprUqifJ18e8ng+lAWdHOiP16+rxfHMd/M/:EFOqrUqifn8pg+S4uiP9Q+
- TLSH T1FF6733B274D9C1F9D02007379943FA2D5A78BC8E1224D8C27B49FD6A87328E3957D9E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates new service(s)
-
Stops running service(s)
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.