56661e4935e5d7ad53f18c19235bdf5a18fc4b0c0717bfa103eb908fa02093d9

General

Target
Freebuff-0.0.52-win-x64.exe
Size 113.4MB
Sample260809-269hssxbpg
SHA256 56661e4935e5d7ad53f18c19235bdf5a18fc4b0c0717bfa103eb908fa02093d9
MD5 bf2bb8a2af6922ef0c3ab10f1669e96a
SHA1 5d820e29e4ddc8494e49966bed26f4b65bd0d8de
SHA512 3c687d5fd075641064ca30044560d57ccc4ae9760a2f07e3d1ca979624300b69d50cd138a85f9807ddadfecd87aa0f86aa470b57d8888547450ac5a642f00bce
SSDEEP 1572864:GXqjE1BNShFRRvmUMBGh1Xq/q8vUUoYtX2lijbVkB+Max/1Tvg0vDobuPVrL4:G6kgnHWBG/p8vUUdjRO3eJvg0vDKyVE
TLSH
T17B483395381178A2D605DEB3A7DEBD438F874D06BF810C8773EAF838BF08256506A795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  Freebuff-0.0.52-win-x64.exe
- Size 113.4MB
- SHA256 56661e4935e5d7ad53f18c19235bdf5a18fc4b0c0717bfa103eb908fa02093d9
- MD5 bf2bb8a2af6922ef0c3ab10f1669e96a
- SHA1 5d820e29e4ddc8494e49966bed26f4b65bd0d8de
- SHA512 3c687d5fd075641064ca30044560d57ccc4ae9760a2f07e3d1ca979624300b69d50cd138a85f9807ddadfecd87aa0f86aa470b57d8888547450ac5a642f00bce
- SSDEEP 1572864:GXqjE1BNShFRRvmUMBGh1Xq/q8vUUoYtX2lijbVkB+Max/1Tvg0vDobuPVrL4:G6kgnHWBG/p8vUUdjRO3eJvg0vDKyVE
- TLSH
  T17B483395381178A2D605DEB3A7DEBD438F874D06BF810C8773EAF838BF08256506A795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1
- Target
  $PLUGINSDIR/app-64.7z
- Size 112.9MB
- SHA256 feebd50e404b7554f293b122ebeabdc0362412a628c2bcc6630535d1fafe5bcd
- MD5 1d6bd93476634d42812fac5875101993
- SHA1 99a8f648bb54e0bdf02e29438816d01e84d3fd4e
- SHA512 306d9d61afbc7859e6d41f2a0153f4da84efb9de50403547df0b40e68ddace5feaa7c22c8f41d4f7ac282abf662425290562d283400e5c41f746d9a480851b70
- SSDEEP 1572864:vqjE1BNShFRRvmUMBGh1Xq/q8vUUoYtX2lijbVkB+Max/1Tvg0vDobuPVrLT:ikgnHWBG/p8vUUdjRO3eJvg0vDKyV3
- TLSH
  T100483395741178A25605DEB3A7DEBD438BC34D06BF820C8AB3EBF838FF082565066795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2