General
- Target FFM_Installer (1).exe
- Size 18.4MB
- Sample260819-s73bfaxele
- SHA256 af9c91cb2bf236654f7ba3c0cf63f72c138bcb418d415445e37458443e84306a
- MD5 6416df6847522e70352e1129edabbddd
- SHA1 11278ac749153a43c3b58e22112ba251f6e6b57c
- SHA512 df2ecf8469c89648e11d838d550b7311a817c23ed722f6804009c98a6076b898f0e95c1e0faac5b54a3a8f51e033421f693f94e8511cb40894f1efc9e22dd107
- SSDEEP 393216:cpr8LyRXlfYP53kWsDP0iisy3MYMZAVWYWR0W6ieglL4yDxrrBW7:8IGXlc50W0isyYAVzWRCieglLJDdS
- TLSH T11817333FB247B53EE13E4A3975B3A250553BBA50A51A8D029AE0C48CDF150B12D3FB97
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FFM_Installer (1).exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
FFM_Installer (1).exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target FFM_Installer (1).exe
- Size 18.4MB
- SHA256 af9c91cb2bf236654f7ba3c0cf63f72c138bcb418d415445e37458443e84306a
- MD5 6416df6847522e70352e1129edabbddd
- SHA1 11278ac749153a43c3b58e22112ba251f6e6b57c
- SHA512 df2ecf8469c89648e11d838d550b7311a817c23ed722f6804009c98a6076b898f0e95c1e0faac5b54a3a8f51e033421f693f94e8511cb40894f1efc9e22dd107
- SSDEEP 393216:cpr8LyRXlfYP53kWsDP0iisy3MYMZAVWYWR0W6ieglL4yDxrrBW7:8IGXlc50W0isyYAVzWRCieglLJDdS
- TLSH T11817333FB247B53EE13E4A3975B3A250553BBA50A51A8D029AE0C48CDF150B12D3FB97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled