General
- Target Forza Horizon 5 Opti 7z.zip
- Size 5.4MB
- Sample260930-jmqbpsyhqb
- SHA256 a4006f6a5201c78c93a38fef6d13229ddb83ce60ebcb15a8941813c63dac50a2
- MD5 0738eb9d8d6b3190e071c414ba385227
- SHA1 c829313f18d0b2e0db9c569025ae5f919c280c34
- SHA512 805fd63e73b9080f69b9c7c930b4ce4abd920bfa294cdd488b3519cc76130f057a4de4c6833e8feeebddcac3f550a5b44cc9448efd8c1ede8d43c4f8ccb668b3
- SSDEEP 98304:gblUKfpyt96wBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxQ:g6+YSw/tyd3w++lz0byQ
- TLSH T1E446022BF38B647DE06A56366AB29214953B7D116A128C4797ECF44CDF321B01E3E387
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
Forza Horizon 5 Opti 7z.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target .Store
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target Forza Horizon 5 Opti 7z.exe
- Size 2.0MB
- SHA256 728e51da2097727fb9b04efae65b7c6349fb21ca3fd5c64d34306eb6400a1ffb
- MD5 6a95251d6ca6da661a16963dbac88ce4
- SHA1 140f28de797d5984153e15a46d890d5154997d42
- SHA512 d01c0e5892a09bd07476f7cc351f44dc855950296a9e45d4b0da39fb776c067603b84015ff4074be55e73bb8b7d9879159bc89912b544f94eaf791711674f83a
- SSDEEP 24576:iXfPki0RBC19GXIVdIHugJXpJehyxwKlvdXgKfpXrbEL10B+kM/PfcXmH1bmBXj5:wobnB2+TwKfpbR+/T1bmBXfqK
- TLSH T1BBA5C03BF28BA13EE06E1A367A72A210553BBA1165164C1696FCF84CCF355701E3F687
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1