7664bacc64c66942935a1737adcf7ffb58d874c95d4b0c5bdfeacd74a0fde027 | Triage

Submit
Reports

Overview

overview

3

Static

static

1

FreeOTFE-v...FE.exe

windows7-x64

3

FreeOTFE-v...FE.exe

windows10-2004-x64

3

FreeOTFE-v...FE.sys

windows7-x64

1

FreeOTFE-v...FE.sys

windows10-2004-x64

1

FreeOTFE-v...tc.sys

windows7-x64

1

FreeOTFE-v...tc.sys

windows10-2004-x64

1

FreeOTFE-v...sh.sys

windows7-x64

1

FreeOTFE-v...sh.sys

windows10-2004-x64

1

FreeOTFE-v...T5.sys

windows7-x64

1

FreeOTFE-v...T5.sys

windows10-2004-x64

1

FreeOTFE-v...an.sys

windows7-x64

1

FreeOTFE-v...an.sys

windows10-2004-x64

1

FreeOTFE-v...ES.sys

windows7-x64

1

FreeOTFE-v...ES.sys

windows10-2004-x64

1

FreeOTFE-v...an.sys

windows7-x64

1

FreeOTFE-v...an.sys

windows10-2004-x64

1

FreeOTFE-v...tc.sys

windows7-x64

1

FreeOTFE-v...tc.sys

windows10-2004-x64

1

FreeOTFE-v...an.sys

windows7-x64

1

FreeOTFE-v...an.sys

windows10-2004-x64

1

FreeOTFE-v...tc.sys

windows7-x64

1

FreeOTFE-v...tc.sys

windows10-2004-x64

1

FreeOTFE-v...MD.sys

windows7-x64

1

FreeOTFE-v...MD.sys

windows10-2004-x64

1

FreeOTFE-v...MD.sys

windows7-x64

1

FreeOTFE-v...MD.sys

windows10-2004-x64

1

FreeOTFE-v...HA.sys

windows7-x64

1

FreeOTFE-v...HA.sys

windows10-2004-x64

1

FreeOTFE-v...er.sys

windows7-x64

1

FreeOTFE-v...er.sys

windows10-2004-x64

1

FreeOTFE-v...ol.sys

windows7-x64

1

FreeOTFE-v...ol.sys

windows10-2004-x64

1

Analysis

max time kernel
139s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/08/2024, 18:44

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

FreeOTFE-v4.40/FreeOTFE.exe

Resource

win7-20240729-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

FreeOTFE-v4.40/FreeOTFE.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

FreeOTFE-v4.40/amd64/FreeOTFE.sys

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

FreeOTFE-v4.40/amd64/FreeOTFE.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherAES_ltc.sys

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherAES_ltc.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherBlowfish.sys

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherBlowfish.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherCAST5.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherCAST5.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherCAST6_Gladman.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherCAST6_Gladman.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherDES.sys

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherDES.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherMARS_Gladman.sys

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherMARS_Gladman.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherRC6_ltc.sys

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherRC6_ltc.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherSerpent_Gladman.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherSerpent_Gladman.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherTwofish_ltc.sys

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

FreeOTFE-v4.40/amd64/FreeOTFECypherTwofish_ltc.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashMD.sys

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashMD.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashRIPEMD.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashRIPEMD.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashSHA.sys

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashSHA.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashTiger.sys

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashTiger.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashWhirlpool.sys

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

FreeOTFE-v4.40/amd64/FreeOTFEHashWhirlpool.sys

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

FreeOTFE-v4.40/amd64/FreeOTFEHashWhirlpool.sys
Size

33KB
MD5

ff1f71c52ab9febe3bb2f6a066e54ae5
SHA1

1e204fcefb170175b017942279fa7e7254dcc06e
SHA256

c6618a9336d6d0c04462bd1e9c58e1903444f5fd100928635a42dc2794709cbc
SHA512

4443a5b74db93b94a94f926a71b9f5ec56b9e6b2b42572ac7b5fa9c60c1c7ef12b2f05a2c1594ec2024bed6035f41e779ea68863e1f17d5db52ebc52de2f0ab4
SSDEEP

768:6Qg3ak+9G41cXHZ9fxP5+6J+b6XvamxA8ihP2ZZiL0p:h6XJ9fV8S+wvaLBP2ZZiAp

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\FreeOTFE-v4.40\amd64\FreeOTFEHashWhirlpool.sys
1⤵
PID:2544
- C:\Users\Admin\AppData\Local\Temp\FreeOTFE-v4.40\amd64\FreeOTFEHashWhirlpool.sys
  C:\Users\Admin\AppData\Local\Temp\FreeOTFE-v4.40\amd64\FreeOTFEHashWhirlpool.sys
  2⤵
  PID:4848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4848-0-0x0000000000010000-0x000000000001D000-memory.dmp

Filesize
52KB

Download

© 2018-2025

Terms | Privacy