Overview

overview

8

Static

static

3

FHUOR 2 SA...ER.exe

windows10-2004-x64

8

FHUOR 2 SA...ER.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    FHUOR 2 SAVE LOADER.exe
  • Size 88.3MB
  • Sample260828-ylsg1asgla
  • SHA256 1f697bff003f307c02bfa3b6ab53bd2632da609504e5fd2d5e4bd780f4743e49
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecutionspywarestealer

Malware Config

Targets

    • Target
      FHUOR 2 SAVE LOADER.exe
    • Size 88.3MB
    • SHA256 1f697bff003f307c02bfa3b6ab53bd2632da609504e5fd2d5e4bd780f4743e49
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecutionspywarestealer

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads ssh keys stored on the system

      Tries to access SSH used by SSH programs.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks