General
- Target fanmadefnaf.exe
- Size 15.5MB
- Sample261107-3btpjawsft
- SHA256 ade450521d3735343da69090a7f6652ab3c9db03421c1d622bab34c29267ad00
- MD5 3da620709173fffdc0361f9b1441f092
- SHA1 abff48b320e21ba8045123db7e9b951736f4c4db
- SHA512 e9f71e0d391f5956780970a8c472af11c5e7e96fe57dc4dbe1d7bb34b76522af6b1147ef27ad9ef80541cd9970ec5c6c296bd7b24001b25c306480cd8ba086b0
- SSDEEP 393216:MLLR4zSKly1pw6e+XEAphVtnIwQSg+wZtLxvF7dlplU:mlwNly7w67RphDBo+wZttvF7g
- TLSH T115F63398A38445E7F0E7503C6EA2D475F6B0BD003F8282FF02E54A553D2FAD59E792A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
fanmadefnaf.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target fanmadefnaf.exe
- Size 15.5MB
- SHA256 ade450521d3735343da69090a7f6652ab3c9db03421c1d622bab34c29267ad00
- MD5 3da620709173fffdc0361f9b1441f092
- SHA1 abff48b320e21ba8045123db7e9b951736f4c4db
- SHA512 e9f71e0d391f5956780970a8c472af11c5e7e96fe57dc4dbe1d7bb34b76522af6b1147ef27ad9ef80541cd9970ec5c6c296bd7b24001b25c306480cd8ba086b0
- SSDEEP 393216:MLLR4zSKly1pw6e+XEAphVtnIwQSg+wZtLxvF7dlplU:mlwNly7w67RphDBo+wZttvF7g
- TLSH T115F63398A38445E7F0E7503C6EA2D475F6B0BD003F8282FF02E54A553D2FAD59E792A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.