e16001a8d80af46d306d1112bb0b577bc8e7900f393316aa384a082ad9ae778a

General

Target
Fleasion-v2.3.0-Windows.exe
Size 56.9MB
Sample260813-ttxz8stepd
SHA256 e16001a8d80af46d306d1112bb0b577bc8e7900f393316aa384a082ad9ae778a
MD5 9a041b7a2d2ab62a19d5eba886bcd8bd
SHA1 cd4274a45529d0e79a28bde58aeab2cd62f7f5aa
SHA512 6640f5280b98bdb2ca60baddb281512bb9825e2e8f1b2155ed882c975821b368234c73fdfa897a805a5a0de67bf5a8af6988757203539b0afa452cff2f8203de
SSDEEP 1572864:sgsszz1xWwVqYS312G7tvd1j48tq8Wo/Lmp+iwQHwSqP:Xz1xWwVNGp88w8Ha4nz
TLSH
T1CCD73324AF40A993F0A1587FB852C9A361812DA15B0CC6FF5B707E871D7F741AEB6603
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Fleasion-v2.3.0-Windows.exe
- Size 56.9MB
- SHA256 e16001a8d80af46d306d1112bb0b577bc8e7900f393316aa384a082ad9ae778a
- MD5 9a041b7a2d2ab62a19d5eba886bcd8bd
- SHA1 cd4274a45529d0e79a28bde58aeab2cd62f7f5aa
- SHA512 6640f5280b98bdb2ca60baddb281512bb9825e2e8f1b2155ed882c975821b368234c73fdfa897a805a5a0de67bf5a8af6988757203539b0afa452cff2f8203de
- SSDEEP 1572864:sgsszz1xWwVqYS312G7tvd1j48tq8Wo/Lmp+iwQHwSqP:Xz1xWwVNGp88w8Ha4nz
- TLSH
  T1CCD73324AF40A993F0A1587FB852C9A361812DA15B0CC6FF5B707E871D7F741AEB6603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution persistence privilege_escalation upx
- Downloads MZ/PE file
- Drops file in Drivers directory
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  launcher.pyc
- Size 502B
- SHA256 8f77c0f7910d3367ecff9a3564af2724389d3d70862f1cd76bff490aca3474e5
- MD5 0c0a0aa4f56abe390550934e572927cc
- SHA1 f04b454416b23aaaa27518c317966a47a0a0a0d7
- SHA512 1cdc06f19df7972d68ff4e4e168ff534f1c67720ac7752a0c00affd8e166bb2f6dd804f42d201f8475a2d3e323e568c1494fe0ae768840c1f8cb7272ec9b37a2
- TLSH
  T1D6F06150D9A0AD52D6AD573410F3D5A81732D547F1D1C0975780192E7DCD3712540E5A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  rthook_harden_dll_search.pyc
- Size 3KB
- SHA256 4c2ace2a247f0a5eaef89bbade5cb7f0c4926fb21bfcd950beccfb39a1a1fd8c
- MD5 a47794c77bd8ef3c50dfe7dfbb45433a
- SHA1 4ea9b330ffbcc3528848403e6c95d9014d5b50e8
- SHA512 6d25a03c4b40e7f992ea99da48bcfa61c72dbb799957ebf6d05e544dfe842939babca9c09dc16884086d51ae5c0f11db5c5e92734d0ffb7f81bf2b61cf041128
- TLSH
  T1B881C76413C19633FAEE993475C3A29EAB73A0E665A92327F338C96D2C5D9008FD4409
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6