Overview

overview

7

Static

static

3

FighterAce...up.exe

windows10-2004-x64

7

FighterAce...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

d3d8.dll

windows10-2004-x64

3

d3d8.dll

windows11-ltsc_2024-x64

3

d3d9.dll

windows10-2004-x64

3

d3d9.dll

windows11-ltsc_2024-x64

3

launcher/aria2c.exe

windows10-2004-x64

1

launcher/aria2c.exe

windows11-ltsc_2024-x64

1

launcher/f...er.exe

windows10-2004-x64

6

launcher/f...er.exe

windows11-ltsc_2024-x64

6

launcher/r...d8.dll

windows10-2004-x64

3

launcher/r...d8.dll

windows11-ltsc_2024-x64

3

launcher/r...d9.dll

windows10-2004-x64

3

launcher/r...d9.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    FighterAce42_Setup.zip
  • Size 2.2MB
  • Sample260930-apajlaaf74
  • SHA256 3269661f3d71a3eea97b91600d7ce266841753ea3df58efeae5854cfb68a3772
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      FighterAce42_Setup.exe
    • Size 2.3MB
    • SHA256 d8ea1d7823108fbe025858a5b86b9500d1bc9f1f1861244b8b217a5ec00d1c2d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      d3d8.dll
    • Size 82KB
    • SHA256 f52559371d9a8b4d2d3e886c196e02dffef6a6605a454a0cdb693507f26288b1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      d3d9.dll
    • Size 82KB
    • SHA256 eae93e1863f22b95ddbc6a9b4601682b0c49b66af768dea907bc4b16dc29cceb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      launcher/aria2c.exe
    • Size 5.4MB
    • SHA256 be2099c214f63a3cb4954b09a0becd6e2e34660b886d4c898d260febfe9d70c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      launcher/fa_launcher.exe
    • Size 1.1MB
    • SHA256 3f27966f89d1f14a2f22ac903d3961f0c039fdec5087b6d9d4dbdb366caab75f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral13behavioral14
    • Target
      launcher/redist/d3d8.dll
    • Size 82KB
    • SHA256 f52559371d9a8b4d2d3e886c196e02dffef6a6605a454a0cdb693507f26288b1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16
    • Target
      launcher/redist/d3d9.dll
    • Size 82KB
    • SHA256 eae93e1863f22b95ddbc6a9b4601682b0c49b66af768dea907bc4b16dc29cceb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral17behavioral18

MITRE ATT&CK Enterprise v16

Tasks