Overview

overview

10

Static

static

10

FuzeFree.exe

windows7-x64

7

FuzeFree.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FuzeFree.exe

  • Size

    6.0MB

  • Sample

    241006-x9m2rawdjd

  • MD5

    bba0e17a11e91442ca962188393c2165

  • SHA1

    9281b34df078cfd1959985709d0af861405885be

  • SHA256

    c7d0d33a75445f72c216273fff7db00802b1c0db04d7f4452bfbc582d97921eb

  • SHA512

    a177eaeccedcc8adb2ed94b53629851a3f992bc617c02d127af5d83212dda7416c12b7e9b660b75ea6ce81d0365c09dc5e02bdfcd8e6fa9401c1c7df0d847e46

  • SSDEEP

    98304:aZEtdFBC35amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RxOuAK1Q8qEyP:a4FI3UeN/FJMIDJf0gsAGK4R0uAK1pq/

Score
10/10
blankgrabberdiscoveryexecutionupx

Malware Config

Targets

    • Target

      FuzeFree.exe

    • Size

      6.0MB

    • MD5

      bba0e17a11e91442ca962188393c2165

    • SHA1

      9281b34df078cfd1959985709d0af861405885be

    • SHA256

      c7d0d33a75445f72c216273fff7db00802b1c0db04d7f4452bfbc582d97921eb

    • SHA512

      a177eaeccedcc8adb2ed94b53629851a3f992bc617c02d127af5d83212dda7416c12b7e9b660b75ea6ce81d0365c09dc5e02bdfcd8e6fa9401c1c7df0d847e46

    • SSDEEP

      98304:aZEtdFBC35amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RxOuAK1Q8qEyP:a4FI3UeN/FJMIDJf0gsAGK4R0uAK1pq/

    Score
    8/10
    upxdiscoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks