General
- Target FiveM.exe
- Size 5.0MB
- Sample261020-lb3trsys3j
- SHA256 05a99a0067ddde35a8b6c92721fc8ee058ffe1cee9a9dceb2bafb1a8e2d92368
- MD5 e8c3fd1b35507fa301fac9367f28757f
- SHA1 fd03919c9370248a62c9d540f6cd9fbeccac09f6
- SHA512 7f4f60aa0978a5f3f49cac744c11b6fe410cf32ec8dcd83fd6ad2120e9830b242b6f6a758c03ca76e8ffa800dbfec1b92f759c176f829f94492ed81e65befcdd
- SSDEEP 49152:XOjPWFWnM4r0BEjYoVKs0B6N58NaUjwg1mxE9tOjhhVmaeI84dhAzBM04arJYLaw:iMKk0N5f/rQcc9YL4P1G/Lzg5ji13
- TLSH T113369D5663A401E8C5B7D1B8CD968527EBB27C161331DBDB02A0767A1F37AE16E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
FiveM.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
FiveM.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target FiveM.exe
- Size 5.0MB
- SHA256 05a99a0067ddde35a8b6c92721fc8ee058ffe1cee9a9dceb2bafb1a8e2d92368
- MD5 e8c3fd1b35507fa301fac9367f28757f
- SHA1 fd03919c9370248a62c9d540f6cd9fbeccac09f6
- SHA512 7f4f60aa0978a5f3f49cac744c11b6fe410cf32ec8dcd83fd6ad2120e9830b242b6f6a758c03ca76e8ffa800dbfec1b92f759c176f829f94492ed81e65befcdd
- SSDEEP 49152:XOjPWFWnM4r0BEjYoVKs0B6N58NaUjwg1mxE9tOjhhVmaeI84dhAzBM04arJYLaw:iMKk0N5f/rQcc9YL4P1G/Lzg5ji13
- TLSH T113369D5663A401E8C5B7D1B8CD968527EBB27C161331DBDB02A0767A1F37AE16E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself