General
- Target bitdefender_avfree.exe
- Size 21.3MB
- Sample260705-2tn2bsbz4l
- SHA256 b34cc0ff325b2f0a81c9b4ebd925e36a1302fcd3388ac28a2b77dfdc5eaf1d13
- MD5 0f213179576219d081bd774a85ec4c6c
- SHA1 4e1e9d7223b1d98d2cbda3b087d4f870594cf7f5
- SHA512 c238a30d6dbe71e5bb8c1eedfe0a91cd8fbb7a3341306d6991733e8b15d486578043280391514dcf5062975f080180c3cfaaaab5193bcc76ff8fc61552b6163c
- SSDEEP 393216:pD6/Q4ilD6aBLVEGeKK7rvdBoUrKfjxE3Y2ys1IzADwd0MMNIdj:8id6aBLVEwKHdBoUrMdf2yHMDwd0MMk
- TLSH T18D27335223199BB4CDDA193B587466C5AA3D2CC39B55B44F2E847E2BFE32304E703927
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
bitdefender_avfree.exe
Resource
win11-20260513-en
26 signatures
600 seconds
Malware Config
Targets
-
- Target bitdefender_avfree.exe
- Size 21.3MB
- SHA256 b34cc0ff325b2f0a81c9b4ebd925e36a1302fcd3388ac28a2b77dfdc5eaf1d13
- MD5 0f213179576219d081bd774a85ec4c6c
- SHA1 4e1e9d7223b1d98d2cbda3b087d4f870594cf7f5
- SHA512 c238a30d6dbe71e5bb8c1eedfe0a91cd8fbb7a3341306d6991733e8b15d486578043280391514dcf5062975f080180c3cfaaaab5193bcc76ff8fc61552b6163c
- SSDEEP 393216:pD6/Q4ilD6aBLVEGeKK7rvdBoUrKfjxE3Y2ys1IzADwd0MMNIdj:8id6aBLVEwKHdBoUrMdf2yHMDwd0MMk
- TLSH T18D27335223199BB4CDDA193B587466C5AA3D2CC39B55B44F2E847E2BFE32304E703927
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Uses browser remote debugging
Can be used control the browser and steal sensitive information such as credentials and session cookies.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Downloads MZ/PE file
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Authentication Process
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1