General
- Target OGLand_FiveM_Helper_0.1.6_x64-portable.exe
- Size 12.1MB
- Sample260830-2kwd2stvfv
- SHA256 db4fb2013571fd5a9fadef31d6da588964704eb04b786504e994b5b09fcb1d90
- MD5 a898eb58d7c784c317be29162beffbc0
- SHA1 3664fb842bf3ec61d96f74ad22e66006046714e0
- SHA512 56516458624412a212a22eb9e40a8b2ba627c202af2db5e845b837ab8f93ce96ee724f91d2398a2f44c77e228c4d191bab06153b66c08714a50021e55e713921
- SSDEEP 196608:NMQ1cV+LwYkAwY7HDTkqvQDtCT+Zr9RXVowx0s6:2cPwYkAwY7HDTkqvkzZnXSS0s
- TLSH T137D6E6257A5A996CD09BC47483478AA2097130DB0B39B8FF44C5963D3F7ABF46F38219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OGLand_FiveM_Helper_0.1.6_x64-portable.exe
Resource
win11-20260513-en
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
OGLand_FiveM_Helper_0.1.6_x64-portable.exe
Resource
win11ltsc2024-20260709-en
19 signatures
900 seconds
Malware Config
Targets
-
- Target OGLand_FiveM_Helper_0.1.6_x64-portable.exe
- Size 12.1MB
- SHA256 db4fb2013571fd5a9fadef31d6da588964704eb04b786504e994b5b09fcb1d90
- MD5 a898eb58d7c784c317be29162beffbc0
- SHA1 3664fb842bf3ec61d96f74ad22e66006046714e0
- SHA512 56516458624412a212a22eb9e40a8b2ba627c202af2db5e845b837ab8f93ce96ee724f91d2398a2f44c77e228c4d191bab06153b66c08714a50021e55e713921
- SSDEEP 196608:NMQ1cV+LwYkAwY7HDTkqvQDtCT+Zr9RXVowx0s6:2cPwYkAwY7HDTkqvkzZnXSS0s
- TLSH T137D6E6257A5A996CD09BC47483478AA2097130DB0B39B8FF44C5963D3F7ABF46F38219
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.