General
- Target FNLB-Setup.exe
- Size 93.7MB
- Sample261024-j74ptss1ht
- SHA256 19bdd3d73e27529b7282a98f20eb1524937df960dd55953e477da3e5b48fa64e
- MD5 8bcbfdb17e29cb0e0f4c957d0157af83
- SHA1 b02b80d9eaf3e0ba4d5791cc9b32b6462e1c7f45
- SHA512 fd77dc4422cd98b8f80af1fcba6bcc979e8b0958790f51b281bc7c1e8920abdf1f55a6f2790eebb2fc124099a5eb5efe8123dc3269088708f8826961b8170bdc
- SSDEEP 786432:aMKVpL0NlvnOMVDLz9/W6PD3m6klrs9wbyf:aMKVSNV3z9/rmJAwb
- TLSH T147286D43A2E751D8F0BBC23596DA5333E532BC454B3169EF21544B312F72AE0AB7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FNLB-Setup.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
FNLB-Setup.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target FNLB-Setup.exe
- Size 93.7MB
- SHA256 19bdd3d73e27529b7282a98f20eb1524937df960dd55953e477da3e5b48fa64e
- MD5 8bcbfdb17e29cb0e0f4c957d0157af83
- SHA1 b02b80d9eaf3e0ba4d5791cc9b32b6462e1c7f45
- SHA512 fd77dc4422cd98b8f80af1fcba6bcc979e8b0958790f51b281bc7c1e8920abdf1f55a6f2790eebb2fc124099a5eb5efe8123dc3269088708f8826961b8170bdc
- SSDEEP 786432:aMKVpL0NlvnOMVDLz9/W6PD3m6klrs9wbyf:aMKVSNV3z9/rmJAwb
- TLSH T147286D43A2E751D8F0BBC23596DA5333E532BC454B3169EF21544B312F72AE0AB7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL