Overview
overview
3Static
static
1FreeOTFE-v...FE.exe
windows7-x64
3FreeOTFE-v...FE.exe
windows10-2004-x64
3FreeOTFE-v...FE.sys
windows7-x64
1FreeOTFE-v...FE.sys
windows10-2004-x64
1FreeOTFE-v...tc.sys
windows7-x64
1FreeOTFE-v...tc.sys
windows10-2004-x64
1FreeOTFE-v...sh.sys
windows7-x64
1FreeOTFE-v...sh.sys
windows10-2004-x64
1FreeOTFE-v...T5.sys
windows7-x64
1FreeOTFE-v...T5.sys
windows10-2004-x64
1FreeOTFE-v...an.sys
windows7-x64
1FreeOTFE-v...an.sys
windows10-2004-x64
1FreeOTFE-v...ES.sys
windows7-x64
1FreeOTFE-v...ES.sys
windows10-2004-x64
1FreeOTFE-v...an.sys
windows7-x64
1FreeOTFE-v...an.sys
windows10-2004-x64
1FreeOTFE-v...tc.sys
windows7-x64
1FreeOTFE-v...tc.sys
windows10-2004-x64
1FreeOTFE-v...an.sys
windows7-x64
1FreeOTFE-v...an.sys
windows10-2004-x64
1FreeOTFE-v...tc.sys
windows7-x64
1FreeOTFE-v...tc.sys
windows10-2004-x64
1FreeOTFE-v...MD.sys
windows7-x64
1FreeOTFE-v...MD.sys
windows10-2004-x64
1FreeOTFE-v...MD.sys
windows7-x64
1FreeOTFE-v...MD.sys
windows10-2004-x64
1FreeOTFE-v...HA.sys
windows7-x64
1FreeOTFE-v...HA.sys
windows10-2004-x64
1FreeOTFE-v...er.sys
windows7-x64
1FreeOTFE-v...er.sys
windows10-2004-x64
1FreeOTFE-v...ol.sys
windows7-x64
1FreeOTFE-v...ol.sys
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19/08/2024, 18:44
Static task
static1
Behavioral task
behavioral1
Sample
FreeOTFE-v4.40/FreeOTFE.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
FreeOTFE-v4.40/FreeOTFE.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
FreeOTFE-v4.40/amd64/FreeOTFE.sys
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
FreeOTFE-v4.40/amd64/FreeOTFE.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherAES_ltc.sys
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherAES_ltc.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherBlowfish.sys
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherBlowfish.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherCAST5.sys
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherCAST5.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherCAST6_Gladman.sys
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherCAST6_Gladman.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherDES.sys
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherDES.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherMARS_Gladman.sys
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherMARS_Gladman.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherRC6_ltc.sys
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherRC6_ltc.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherSerpent_Gladman.sys
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherSerpent_Gladman.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherTwofish_ltc.sys
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
FreeOTFE-v4.40/amd64/FreeOTFECypherTwofish_ltc.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashMD.sys
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashMD.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashRIPEMD.sys
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashRIPEMD.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashSHA.sys
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashSHA.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashTiger.sys
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashTiger.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashWhirlpool.sys
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
FreeOTFE-v4.40/amd64/FreeOTFEHashWhirlpool.sys
Resource
win10v2004-20240802-en
General
-
Target
FreeOTFE-v4.40/amd64/FreeOTFECypherCAST6_Gladman.sys
-
Size
34KB
-
MD5
091d73d769c9529f7c55d66387526dac
-
SHA1
6b4352013f920afbf6c53624dc83153267020ffe
-
SHA256
ddb85995ee298ce1b7cb7ccfe0027b6760668e3ebe5d90e7e3be321264dcca26
-
SHA512
f0094adc273a68d1a569996e6d4d5407bc52aaeadc2449e91529ab6108de3f4330d41005ab3de4a22f4230aed3bcf0329c070655152df7748086629fd8d0dbf6
-
SSDEEP
768:jIfD4RFLZtypVy+kVb039G6XwWNmfA6biLY:jjF16gmmfA6bic
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\FreeOTFE-v4.40\amd64\FreeOTFECypherCAST6_Gladman.sys1⤵PID:1940
-
C:\Users\Admin\AppData\Local\Temp\FreeOTFE-v4.40\amd64\FreeOTFECypherCAST6_Gladman.sysC:\Users\Admin\AppData\Local\Temp\FreeOTFE-v4.40\amd64\FreeOTFECypherCAST6_Gladman.sys2⤵PID:2408
-