General
- Target FFM_Installer.exe
- Size 18.4MB
- Sample260827-l83v2afr2x
- SHA256 69603f2d30d19641e5c9021572c5ce8a34b9c42636a5b8a7bb80fe30abba47b9
- MD5 cbff2b7dcd764e65d5244c1bc6634f83
- SHA1 72948c5741a70d26dbe6c03af6eba3488f748e8b
- SHA512 1227736d4314a606fafe02f352c4f5311b9d251975c0695a272213e740358731c18ba2cefaa6cf031aa14d10371d54162eaa41bc98ccc392bc6900f7c5be8264
- SSDEEP 393216:c0JSbhucvfxOOjTmiIVDourf2J2ypa3G2OrLAQ+WL/blzJJ/g0vnW2:qAcv5YiIVsuutpMGHLP+4djzt
- TLSH T18717337FB28F693AE46A4A357972D221543F6650A4278C02DBF0C85CCF255B01E3EB97
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FFM_Installer.exe
Resource
win11ltsc2024-20260709-en
18 signatures
900 seconds
Malware Config
Targets
-
- Target FFM_Installer.exe
- Size 18.4MB
- SHA256 69603f2d30d19641e5c9021572c5ce8a34b9c42636a5b8a7bb80fe30abba47b9
- MD5 cbff2b7dcd764e65d5244c1bc6634f83
- SHA1 72948c5741a70d26dbe6c03af6eba3488f748e8b
- SHA512 1227736d4314a606fafe02f352c4f5311b9d251975c0695a272213e740358731c18ba2cefaa6cf031aa14d10371d54162eaa41bc98ccc392bc6900f7c5be8264
- SSDEEP 393216:c0JSbhucvfxOOjTmiIVDourf2J2ypa3G2OrLAQ+WL/blzJJ/g0vnW2:qAcv5YiIVsuutpMGHLP+4djzt
- TLSH T18717337FB28F693AE46A4A357972D221543F6650A4278C02DBF0C85CCF255B01E3EB97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled