General
- Target FFM_Installer.exe
- Size 18.4MB
- Sample261002-sedglstv7k
- SHA256 69603f2d30d19641e5c9021572c5ce8a34b9c42636a5b8a7bb80fe30abba47b9
- MD5 cbff2b7dcd764e65d5244c1bc6634f83
- SHA1 72948c5741a70d26dbe6c03af6eba3488f748e8b
- SHA512 1227736d4314a606fafe02f352c4f5311b9d251975c0695a272213e740358731c18ba2cefaa6cf031aa14d10371d54162eaa41bc98ccc392bc6900f7c5be8264
- SSDEEP 393216:c0JSbhucvfxOOjTmiIVDourf2J2ypa3G2OrLAQ+WL/blzJJ/g0vnW2:qAcv5YiIVsuutpMGHLP+4djzt
- TLSH T18717337FB28F693AE46A4A357972D221543F6650A4278C02DBF0C85CCF255B01E3EB97
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FFM_Installer.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
FFM_Installer.exe
Resource
win10ltsc2021-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral3
Sample
FFM_Installer.exe
Resource
win11-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral4
Sample
FFM_Installer.exe
Resource
win11ltsc2024-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target FFM_Installer.exe
- Size 18.4MB
- SHA256 69603f2d30d19641e5c9021572c5ce8a34b9c42636a5b8a7bb80fe30abba47b9
- MD5 cbff2b7dcd764e65d5244c1bc6634f83
- SHA1 72948c5741a70d26dbe6c03af6eba3488f748e8b
- SHA512 1227736d4314a606fafe02f352c4f5311b9d251975c0695a272213e740358731c18ba2cefaa6cf031aa14d10371d54162eaa41bc98ccc392bc6900f7c5be8264
- SSDEEP 393216:c0JSbhucvfxOOjTmiIVDourf2J2ypa3G2OrLAQ+WL/blzJJ/g0vnW2:qAcv5YiIVsuutpMGHLP+4djzt
- TLSH T18717337FB28F693AE46A4A357972D221543F6650A4278C02DBF0C85CCF255B01E3EB97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Tasks
static1
installer
Score
3/10
behavioral1
defense_evasiondiscoveryexecutioninstallerpyinstallertrojan
Score
7/10
behavioral2
defense_evasiondiscoveryexecutioninstallerpyinstallertrojan
Score
7/10
behavioral3
discoveryexecutioninstallerpyinstaller
Score
7/10
behavioral4
defense_evasiondiscoveryexecutioninstallerpyinstallertrojan
Score
7/10