Overview

overview

8

Static

static

3

FireflyAI.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FireflyAI.exe

  • Size

    45.7MB

  • Sample

    231126-yqagzscb3w

  • MD5

    5d058ac0a96ea904495b4ad08e725fe9

  • SHA1

    c70ecff66304842c3a0cb07181343f261a23feb0

  • SHA256

    e3e1359104bbda6f7095b6dc5d35134d52a9a1a0101c88530bcb7cbebbe51a9c

  • SHA512

    537df99ecdc6470ce000646797e2b9f357e755cd89e3d6204150c8b6544fe36fbd9f460acd0ac1af719da22af109bca2b04ce9c0f62b715604040aad64f50704

  • SSDEEP

    786432:E5CUXgrAXasuqWaL2vPdgnIFUR9A5UqrkBGnk9kEgsYNzhMjxnfQysN:bsVXz+1qIFUCyBGkeEgdzw/4

Score
8/10
evasion

Malware Config

Targets

    • Target

      FireflyAI.exe

    • Size

      45.7MB

    • MD5

      5d058ac0a96ea904495b4ad08e725fe9

    • SHA1

      c70ecff66304842c3a0cb07181343f261a23feb0

    • SHA256

      e3e1359104bbda6f7095b6dc5d35134d52a9a1a0101c88530bcb7cbebbe51a9c

    • SHA512

      537df99ecdc6470ce000646797e2b9f357e755cd89e3d6204150c8b6544fe36fbd9f460acd0ac1af719da22af109bca2b04ce9c0f62b715604040aad64f50704

    • SSDEEP

      786432:E5CUXgrAXasuqWaL2vPdgnIFUR9A5UqrkBGnk9kEgsYNzhMjxnfQysN:bsVXz+1qIFUCyBGkeEgdzw/4

    Score
    8/10
    evasion

    • Drops file in Drivers directory

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks