Overview
overview
7Static
static
3AutoFontCh...up.exe
windows10-2004-x64
7AutoFontCh...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3AutoFontCh...er.exe
windows10-2004-x64
3AutoFontCh...er.exe
windows11-ltsc_2024-x64
3General
- Target AutoFontChangerSetup.exe
- Size 675KB
- Sample260916-zzvd7attcy
- SHA256 413d6d24876ff73c8d0c74e68bd609983f103c3f43cff42052bcae3032343c67
- MD5 f0988f7be38cfb09b920f6bc78d1d51d
- SHA1 5bea54ac71e3671a646df4218b7ce6550f5bb8f3
- SHA512 e0ea65f915144debf0e0b50f95a570d8c3db2b64152cf3c127a84dfcd5afdf9c5fed8c5c8e760b36e17bdbd53ae4d2ba156a79e56bf508a6cc9e7a3747bf9d10
- SSDEEP 12288:jlnZlPO5SJNcXiZPVaE3eQzcsriuP90vysYltLkb1:Zni5WNcSN9udsrvzYb1
- TLSH T143E48C01B7919A23CF59033098A7972E263CEE1357E3C70B7764F2D5ECB76989A502D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AutoFontChangerSetup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
AutoFontChangerSetup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
AutoFontChangerHandler.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
AutoFontChangerHandler.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target AutoFontChangerSetup.exe
- Size 675KB
- SHA256 413d6d24876ff73c8d0c74e68bd609983f103c3f43cff42052bcae3032343c67
- MD5 f0988f7be38cfb09b920f6bc78d1d51d
- SHA1 5bea54ac71e3671a646df4218b7ce6550f5bb8f3
- SHA512 e0ea65f915144debf0e0b50f95a570d8c3db2b64152cf3c127a84dfcd5afdf9c5fed8c5c8e760b36e17bdbd53ae4d2ba156a79e56bf508a6cc9e7a3747bf9d10
- SSDEEP 12288:jlnZlPO5SJNcXiZPVaE3eQzcsriuP90vysYltLkb1:Zni5WNcSN9udsrvzYb1
- TLSH T143E48C01B7919A23CF59033098A7972E263CEE1357E3C70B7764F2D5ECB76989A502D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target AutoFontChangerHandler.exe
- Size 1.3MB
- SHA256 9705ad45199e237b6aff22e0bc5d3ba9e4f6cb1ddbec2b04c77c66b7ef8555c3
- MD5 cc3160909aaeb603270a88cd6a166d77
- SHA1 c66be71e1c4d9a6230225547fcc940c05a2a2cff
- SHA512 fc90832636fb064549a9a03cb258cbc2f988a871e0807c793555a0194d8404a110d6aafdc592bac612f3a88eec687ed73c59facc648ad6cb9ac791ae85334064
- SSDEEP 24576:Hhu36gTI+0rgzv1sWM02Mp71rl4cjRbf2U:k3hj9s/0TdbOU
- TLSH T1C3650602339290BBCE5A0274509A932E263EED135752CFC7B394B5E8DDBB6D059352EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10