General
- Target foreverlose-loader-0.7.1-win-x64-setup.exe
- Size 18.6MB
- Sample261113-rt4rnswx6j
- SHA256 51029ba211704c2a1dd18ab40346b585721fd6b5b1092ec2a8c3246662dfeae5
- MD5 19e1a875cb89b959f07f480f98e84a70
- SHA1 b6ad91c1e5534acb4df4ab395d5014ea70d66971
- SHA512 9c73aeee97671749b5c72ebd65ad17ce37bc39ff6e8182e9c9029cd37db352c2911491eb8f014415358dbe08ab2825ec423ed3a5d6ba5c4cfd11580af63d3048
- SSDEEP 393216:c9dTwv8zOcImh7ekvS9pFQxBcU15Gd3GLfm1QBn1OFYaxTdgPIIaZC:Sd9zF7e0gpFQxaqGdepBn1O5xTda/r
- TLSH T14717333BB28B753EE07D0A363AB2D160593B7661A9528C16D2F0C59CCF290711D3F69B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
foreverlose-loader-0.7.1-win-x64-setup.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
foreverlose-loader-0.7.1-win-x64-setup.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target foreverlose-loader-0.7.1-win-x64-setup.exe
- Size 18.6MB
- SHA256 51029ba211704c2a1dd18ab40346b585721fd6b5b1092ec2a8c3246662dfeae5
- MD5 19e1a875cb89b959f07f480f98e84a70
- SHA1 b6ad91c1e5534acb4df4ab395d5014ea70d66971
- SHA512 9c73aeee97671749b5c72ebd65ad17ce37bc39ff6e8182e9c9029cd37db352c2911491eb8f014415358dbe08ab2825ec423ed3a5d6ba5c4cfd11580af63d3048
- SSDEEP 393216:c9dTwv8zOcImh7ekvS9pFQxBcU15Gd3GLfm1QBn1OFYaxTdgPIIaZC:Sd9zF7e0gpFQxaqGdepBn1O5xTda/r
- TLSH T14717333BB28B753EE07D0A363AB2D160593B7661A9528C16D2F0C59CCF290711D3F69B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.