Overview

overview

7

Static

static

1

F1Manager2...ter.js

windows11-ltsc_2024-x64

7

F1Manager2...ram.js

windows11-ltsc_2024-x64

3

F1Manager2...der.js

windows11-ltsc_2024-x64

3

F1Manager2...er.vbs

windows11-ltsc_2024-x64

5

F1Manager2...es.vbs

windows11-ltsc_2024-x64

5

F1Manager2...aml.js

windows11-ltsc_2024-x64

3

F1Manager2...ers.js

windows11-ltsc_2024-x64

3

F1Manager2...ker.js

windows11-ltsc_2024-x64

3

F1Manager2...ter.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    F1Manager2024Logger-RELEASE_1.0.zip
  • Size 425KB
  • Sample260930-tshtxscf43
  • SHA256 a0c22d202e4fc6c52953d21974a3fd06f0364b1f3b624195a5d160f9c8eaa651
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutioninstallerpersistenceransomware

Malware Config

Targets

    • Target
      F1Manager2024Logger-RELEASE_1.0/F1ManagerPlotter.cs
    • Size 53KB
    • SHA256 37f6ce58aaaedfac3df04b6d73c13dc035e2793db7cb44e9f23a80a95b5f4dda
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryexecutioninstallerpersistenceransomware

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1
    • Target
      F1Manager2024Logger-RELEASE_1.0/MemoryReader/Program.cs
    • Size 38KB
    • SHA256 75857d3756034a8c788c0afb52109dc9846ae65b0538f0b011bc65f509a47fb8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral2
    • Target
      F1Manager2024Logger-RELEASE_1.0/MmfReader.cs
    • Size 5KB
    • SHA256 74109c1b0d96f0a8eec3de4c4f0cd50951a06409ef3705ccb7d4eeb23e71ffbb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3
    • Target
      F1Manager2024Logger-RELEASE_1.0/Properties/Resources.Designer.cs
    • Size 3KB
    • SHA256 492a5002b7c07b92dff0389e3ba1c697ebd308f73aea8a325feaf1cd43227274
    • MD5 SHA1 SHA512 TLSH
    Score
    5/10
    execution

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral4
    • Target
      F1Manager2024Logger-RELEASE_1.0/Properties/Resources.resx
    • Size 5KB
    • SHA256 e4ea2f6220bc875757ec9b371fe376ea23b25b263222e5ecc1dd42560e2d9bc7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    execution

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral5
    • Target
      F1Manager2024Logger-RELEASE_1.0/SettingsControl.xaml.cs
    • Size 29KB
    • SHA256 e3e05ca443c51010ed6480d57ccfa83a4f5a8ebfb7b4b9a80253a7c4a6ba95e6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral6
    • Target
      F1Manager2024Logger-RELEASE_1.0/TelemetryHelpers.cs
    • Size 37KB
    • SHA256 d3b6a0f4943088ba9e6c03ffc60e778886aea03a847438a80f5ae4b8862599f7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7
    • Target
      F1Manager2024Logger-RELEASE_1.0/UnrealSaveUnpacker.cs
    • Size 6KB
    • SHA256 600678fa81af89c1cc1fa2732ff95c4c665500b00922f8d4ea160adb2f5f2961
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral8
    • Target
      F1Manager2024Logger-RELEASE_1.0/exporter.cs
    • Size 10KB
    • SHA256 993647333d5f275a131f34bad0f5a4f3162c772fcba5d6976b44e7fa7331cde4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral9

MITRE ATT&CK Enterprise v16

Tasks