Fruity trojan downloader performs multi-stage infection of Windows computers
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Msbuild - T1127.001 Process Doppelgänging - T1055.013 Process Hollowing - T1055.012 Python - T1059.006 Software - T1592.002 Steganography - T1001.002 Steganography - T1406.001 Steganography - T1027.003 Process Doppelgänging - T1186 Process Hollowing - T1093
Show in Graph
Common Information
Type Value
UUID 9e6d24e2-6ab9-40a5-97ee-6556eadc3b64
Fingerprint f0c19b7b5b6411c
Analysis status DONE
Considered CTI value 0
Text language
Published July 27, 2023, midnight
Added to db Oct. 24, 2023, 1:16 p.m.
Last updated Nov. 17, 2024, 10:40 p.m.
Headline UNKNOWN
Title Fruity trojan downloader performs multi-stage infection of Windows computers
Detected Hints/Tags/Attributes 37/2/10
Source URLs
Redirection Url
Details Source https://news.drweb.com/show/?i=14728&lng=en
URL Provider
Details Provider Source level domain
Details drweb.com news.drweb.com
Attributes
Details Type #Events CTI Value
Details Domain 9 
vms.drweb.com
Details File 65 
python.exe
Details File 2 
python39.dll
Details File 1 
idea.cfg
Details File 3 
idea.mp3
Details File 3 
fruit.png
Details File 2126 
cmd.exe
Details File 149 
msbuild.exe
Details File 380 
notepad.exe
Details Url 1 
https://vms.drweb.com/search/?q=trojan.fruity.1&lng=en">trojan.fruity.1