Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/10/2026, 13:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FogMod Chinese Translation v0.2.3/FogMod.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
FogMod Chinese Translation v0.2.3/FogMod.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target FogMod Chinese Translation v0.2.3/FogMod.exe
- Size 12.4MB
- Sample261002-qdft8syxes
- SHA256 7c9fe41734b62f589236b3e8bb63396c73b6ff095e728dc81b4a019c78ed7323
- MD5 c3338a69fd112447e7f448793f388e64
- SHA1 9461b4d58f33b7e762ce1baca3b2a5484addb20f
- SHA512 87b2dab96be6012be6f2ee36e1f127cefec4526812f3de9dfe591a6e20d0d02e42cf694ae8142b08b63d100b8d2b31a35861748d6bb0cb76fc814cae4997894d
- SSDEEP 196608:/ajBLRO/0ubgSfGuMDmi3XDEumye1JuqrYCnMAP6fVt2sf:YLROcuMDmi3XAu5ouCYzASfVVf
- TLSH T118D6BE15B3E84B36D16F967190B1212A97F0F40EB326F7DB9680B5BA2D53B405C423BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5972 FogMod.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\FogMod\FogMod_Path_rrnu3uizht41g50gh1rt03arjf4skm1f\1.0.0.0\user.config
- Size 976B
- SHA256 1ef6c75cb92baf444f3c8103b748d341ed0af82431073081147645b34e8a22ea
- MD5 8938aa045db1f38721cfa9ef590b55c5
- SHA1 0a04f819fc11930db03ab1a5b79249764dc267e8
- SHA512 f6b65aa6fbc6ba6e4bc434f387629b31a437ff2d8252bb41f49ea08c7ac084fc72d32a80a03e1f2bd64c40c440efb8abe873971a4b3a5543ade0bdca287670b9
- TLSH T12E11325A21C5BE6B41231A33D9524600DEF49393496A286CF97E63B68F3A0CA07C3366
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\FogMod\FogMod_Path_rrnu3uizht41g50gh1rt03arjf4skm1f\1.0.0.0\xi2sw0rg.newcfg
- Size 990B
- SHA256 72e36e626063cb6e89666f83bf28bf906f8f337e5366e25531e3ab6b1c7959e3
- MD5 6169e65b9e2da0a3ff9b3de10c80fdac
- SHA1 ac97d3b30177e59e8f938bb5709eb98f3730b287
- SHA512 56ea950ee6e1e61ac696512e4bcfed01909ac2bd36bb35cb90e4b631a216f1e5a3336cbe47de1e53ed3f3b8ede038f94d2a69e14330a4fb0f6c9a04b99b34415
- TLSH T1A411764A21C5BE1B41231A33D9914600DEF493934969386CF93E63768F3A0CA07C3366
- MD5 SHA1 SHA512 TLSH