General
- Target FontLab-8-Win64-Install-8984.exe
- Size 105.2MB
- Sample261020-1frdvsft9s
- SHA256 2d42613e09d7497bff1ae300ae8e1ad77db7d966a3981c921d2cf12f6b6e03a2
- MD5 ed18cc13d979fbaaf2819c0bdd43c784
- SHA1 c67faf5329980a10df7607462d717d4eff4699a9
- SHA512 7e5117d5e8967da938d2f520b1adad241e6dd63efb3cc63d3cef047c73b107b885d7986bd2993b12891fd9facc32c4b6d4828b12d3624c3ee04447b836e94edb
- SSDEEP 1572864:M0dawUoIHYEKI47yaH8wtmiMU7aRXtcKQZ+aXSNqRTC579EXY7i9UI5t11tkWRsU:VzbkyH8wtmEaRdcKQ+xNO2aJtkWR9
- TLSH T1EE38333BA27CA87ED9EA6F3455B392008C7B7E61A82B4C1B67F03E09D7720015F39655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
FontLab-8-Win64-Install-8984.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
FontLab-8-Win64-Install-8984.exe
Resource
win11ltsc2024-20260911-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target FontLab-8-Win64-Install-8984.exe
- Size 105.2MB
- SHA256 2d42613e09d7497bff1ae300ae8e1ad77db7d966a3981c921d2cf12f6b6e03a2
- MD5 ed18cc13d979fbaaf2819c0bdd43c784
- SHA1 c67faf5329980a10df7607462d717d4eff4699a9
- SHA512 7e5117d5e8967da938d2f520b1adad241e6dd63efb3cc63d3cef047c73b107b885d7986bd2993b12891fd9facc32c4b6d4828b12d3624c3ee04447b836e94edb
- SSDEEP 1572864:M0dawUoIHYEKI47yaH8wtmiMU7aRXtcKQZ+aXSNqRTC579EXY7i9UI5t11tkWRsU:VzbkyH8wtmEaRdcKQ+xNO2aJtkWR9
- TLSH T1EE38333BA27CA87ED9EA6F3455B392008C7B7E61A82B4C1B67F03E09D7720015F39655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1