General
- Target ShadeFN_Cracked.exe
- Size 110.2MB
- Sample260925-145ldsyv5j
- SHA256 9c91d59fdb2c0b40bd56e4306a558c4a4eec3feca07c7f137ed0b09be1199992
- MD5 5cc3985339b456eb2682f757a4fbc1af
- SHA1 67419d448f36be5c59abb7293a219138a75ea537
- SHA512 b5e89077a1c8daf633c3af50fc405299ad19a455e73ed010cfb40238031117e6242b9bafdba2b37778464f6f345474b3cea67e933be8513b94f13f1b87786909
- SSDEEP 1572864:9c7hR3Ih0BCLeVfAle0YyZJgdIMKZ3HCAYd3LeJsEDQl1sa/eeUQHCBn6fIct:9c7hWeiqAlJEje3HA3AF+z/XKAR
- TLSH T1694833D43A035A0CCB6B9634F983D5A87407A4CD89668ADB5FE23A16F0CD1EB61344F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ShadeFN_Cracked.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target ShadeFN_Cracked.exe
- Size 110.2MB
- SHA256 9c91d59fdb2c0b40bd56e4306a558c4a4eec3feca07c7f137ed0b09be1199992
- MD5 5cc3985339b456eb2682f757a4fbc1af
- SHA1 67419d448f36be5c59abb7293a219138a75ea537
- SHA512 b5e89077a1c8daf633c3af50fc405299ad19a455e73ed010cfb40238031117e6242b9bafdba2b37778464f6f345474b3cea67e933be8513b94f13f1b87786909
- SSDEEP 1572864:9c7hR3Ih0BCLeVfAle0YyZJgdIMKZ3HCAYd3LeJsEDQl1sa/eeUQHCBn6fIct:9c7hWeiqAlJEje3HA3AF+z/XKAR
- TLSH T1694833D43A035A0CCB6B9634F983D5A87407A4CD89668ADB5FE23A16F0CD1EB61344F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1