573b42ca53efbcd40bd805854001ed08d565bb147a646c05ac53b9ff0c8d98f0

General

Target
Fleasion-v2.1.0.exe
Size 129.2MB
Sample260628-ancbssev8p
SHA256 573b42ca53efbcd40bd805854001ed08d565bb147a646c05ac53b9ff0c8d98f0
MD5 e590646ba4c7f241bb4e4a858e0e174f
SHA1 90b181c4ce519880311f24fe4f25fb93a759a75f
SHA512 b85fd19eb7fc02d7258f9f71d996ed58e692d803354ae84f3887f8735a1dbe948983d227c5a4ddda8055045febc536146ee1aad6bd9d90334477ab07be3c0171
SSDEEP 3145728:8UoLuHJ75WHbgGnP4laaeyF8XBBIps7mVbyYzHG2jXm+hP4LviV:8rup7Kgw4M1lXBBuxXm+hP4TiV
TLSH
T1D458337525A5562BF0A3783FF0D7D5A072B4AC84DF5A82BD52BC3AE221F74424CBE442
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Fleasion-v2.1.0.exe
- Size 129.2MB
- SHA256 573b42ca53efbcd40bd805854001ed08d565bb147a646c05ac53b9ff0c8d98f0
- MD5 e590646ba4c7f241bb4e4a858e0e174f
- SHA1 90b181c4ce519880311f24fe4f25fb93a759a75f
- SHA512 b85fd19eb7fc02d7258f9f71d996ed58e692d803354ae84f3887f8735a1dbe948983d227c5a4ddda8055045febc536146ee1aad6bd9d90334477ab07be3c0171
- SSDEEP 3145728:8UoLuHJ75WHbgGnP4laaeyF8XBBIps7mVbyYzHG2jXm+hP4LviV:8rup7Kgw4M1lXBBuxXm+hP4TiV
- TLSH
  T1D458337525A5562BF0A3783FF0D7D5A072B4AC84DF5A82BD52BC3AE221F74424CBE442
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution persistence privilege_escalation
- Drops file in Drivers directory
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  launcher.pyc
- Size 206B
- SHA256 557d5f6d79a2fea97feecc6fddf0ff18d97e0ca477f3502afa18495c6a0d420a
- MD5 693b34de096abcba892dfb3aebb63688
- SHA1 17c7716db14077ddfd851a7532cfd114fa8084d8
- SHA512 1efa3279e151176a3bfce29c9268214d66d0709d6c221e9b743741d14db24335886daf236ba4854f95be7b6f323e2fa2a3e0f26b6dfbdc8c58b44afb5803a725
- TLSH
  T178D08041D5607A12C64C0734B4FB95F615718C4C9293D45310D9262E1FED3559C50985
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  rthook_harden_dll_search.pyc
- Size 3KB
- SHA256 b87ccf0b1e89b40823364d8f9b6486d0ca8544eac4dac5374a761dcc139250b8
- MD5 a62ac0357f3ad003f91e0e423604043a
- SHA1 ec3ac4fb6300c1bfa19b6c729efa3bd49c196db2
- SHA512 ba9bf29831f1d76e17644f3470b9eb350a4f51056d1045be07b07da6a0041c1c173225462e3a1c736a0a1bfe66d820518dfe4980baf4baf6a6f21f4f710c82c7
- TLSH
  T1F051D8661A945213FEED9975B2DFF2CADB23E0F5E5A52127C278D73E6C241008EE040B
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6