General
- Target FirefoxPortable_153.0.4_English.paf.exe
- Size 177.8MB
- Sample260820-sc54vael3v
- SHA256 5645d60b6b3f1eb432a805e5b2c99e331d1108719b9e381d45b64e8c17b582b5
- MD5 e8d711cfb1fb2d31acc7de92e4c85199
- SHA1 21d60715bbd7586ec8f8c02f7b1316a2c127fb5d
- SHA512 84625473f9c2e0ce0cdab1fb0666b2d117473b40dfc7fdabcab04cd23e5991378956d7f752ff71b49b78db4fa1e7af00b39a592311ceb2387bf10a51a00eb372
- SSDEEP 3145728:JPTv6m0xcbHsAC+JjQrrRl4Pll0vN6zk/SE/kIa/WP3EH7kRle+2pZmR7nkUdsj:V6m0+bMAfe/4AMzk/J/kN/WP3EH7wojJ
- TLSH T142983330DB5A4963D7E106F28B1D3CF5126920E844E2BD643B0E61EBDE10EA55D3F6B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FirefoxPortable_153.0.4_English.paf.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
FirefoxPortable_153.0.4_English.paf.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target FirefoxPortable_153.0.4_English.paf.exe
- Size 177.8MB
- SHA256 5645d60b6b3f1eb432a805e5b2c99e331d1108719b9e381d45b64e8c17b582b5
- MD5 e8d711cfb1fb2d31acc7de92e4c85199
- SHA1 21d60715bbd7586ec8f8c02f7b1316a2c127fb5d
- SHA512 84625473f9c2e0ce0cdab1fb0666b2d117473b40dfc7fdabcab04cd23e5991378956d7f752ff71b49b78db4fa1e7af00b39a592311ceb2387bf10a51a00eb372
- SSDEEP 3145728:JPTv6m0xcbHsAC+JjQrrRl4Pll0vN6zk/SE/kIa/WP3EH7kRle+2pZmR7nkUdsj:V6m0+bMAfe/4AMzk/J/kN/WP3EH7wojJ
- TLSH T142983330DB5A4963D7E106F28B1D3CF5126920E844E2BD643B0E61EBDE10EA55D3F6B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1