448a2d997965b2cdb0be6e799405df39e97a262d5443553b17d70a6a4e06261d

Resubmissions

13/08/2026, 19:39

260813-yc9d6axbqg6

13/08/2026, 19:38

260813-ycsfmswwfv3

13/08/2026, 19:35

260813-yazryaxbnf6

Sharing

Copy URL Twitter E-mail

General

Target
Freefn 2.zip
Size 3.2MB
Sample260813-yazryaxbnf
SHA256 448a2d997965b2cdb0be6e799405df39e97a262d5443553b17d70a6a4e06261d
MD5 97b592aef3137642960d0a31a5a811a9
SHA1 5a851fd350c42d8957fa3d0e4928b007c5fd2616
SHA512 eb59d72005793639ada61edd0a7c9603d1ffb4b480beef5c210569b50e5d3b0723b20792f52745feb2edfd349c43867b076bda8aac87ed2f4a7028641ed9fa82
SSDEEP 98304:66ObIvSY0+sn0Jy6mDFVJucYFpUPTRAP+Zti:6JUSl+q0JynRHY4+P+Zg
TLSH
T17DF533BEEF8434A9DC6C6FF4FCC22B70B0879046012386A5D14D55A5D81A3737BE5AE8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Freefn/AMIDEWIN.exe
- Size 300KB
- SHA256 da35eabcd2ae42e0fe975454464eaef167156078e1260222127338ebc6e54473
- MD5 2b34156ed9893c771720273727607535
- SHA1 359f5c16a8f2c7e91e2b008b8cd62972ee6110e2
- SHA512 0fd4b41b7b9508ab407851bc5864527da68268040214a58106288fcb4f034caad4bc34a88570e7b6002a619a85414b1c8c8a871b60c85907f80d6d9c4d672f5c
- SSDEEP 6144:3CEHDrlz6+pK1NZzTu80d6P7NmNa5ElD:yKDpSD7NmN
- TLSH
  T188643900E502C030E4B200FD949B5FA89E686459675887EBB3FCD9B9AF631C59E7731E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  Freefn/AMIDEWINx64.EXE
- Size 377KB
- SHA256 47c16703fa7df006f9559fca8b1482b4c59111017a0530c1edac3caf0bdaaf39
- MD5 6dea36ae7a414e376b00829e16da52e0
- SHA1 5ddb6b72867002a03f26aed612f320e82598464e
- SHA512 f61f6a661e816ff72a91849c8363dbbbadadc24d34c25072a3cbb3be16ce9a540c8f86ae2c031fc97e5484944d8957cd7a7e3104dee2a2091b2b344422e30487
- SSDEEP 6144:u0lLNvLmP/LgoYG5HViOlHH7qKPUcky2FpwhPa24UW3Plqr9hUURgr:lzmP/Lgk5HViOlHH7qKPfky2FpwhyV3X
- TLSH
  T10084F66AEB9220F0EC77917C88922306FBA075684771D7E7B7AD450A4F337E4A939710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  Freefn/AMIFLDRV64.SYS
- Size 29KB
- SHA256 65c26276cadda7a36f8977d1d01120edb5c3418be2317d501761092d5f9916c9
- MD5 f22740ba54a400fd2be7690bb204aa08
- SHA1 5812387783d61c6ab5702213bb968590a18065e3
- SHA512 ac1f89736cf348f634b526569b5783118a1a35324f9ce2f2804001e5a04751f8cc21d09bfa1c4803cd14a64152beba868f5ecf119f10fa3ccbe680d2fb481500
- SSDEEP 384:qvOTI5HIPy54ygZOq0HMMKf69JG8QnuOfZFnJtQSZsHLPK6jjMYiWPFRUI5xl9Wn:qvsUoK54ZCMMb9U82uO7Jt6PKg4YHUc+
- TLSH
  T1EFD23B92C6B45C87EEA3993162F4D263BD35B69237608ADF4026C0950F93BD1A73C369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  Freefn/Freefn.exe
- Size 7.1MB
- SHA256 325a6c39bfa237a1ec6561aa7180c07612387a50da83d2df8d69f20caa50045a
- MD5 d91e8cdc402b99557727063b5288e3a7
- SHA1 8952839433ac6e5ad5e14936a1a2556ddcea7d14
- SHA512 3f9dca611c9f8782237ff37b9d3be6083a7cb11aae12a9b83c28f7ae7329f986448b8a31c9a148e45b8a33e3fb3c6c7295922bd6f27b610d4cde982f1c01548c
- SSDEEP 49152:ekcLLPjqvEcIAxLEhxtaD9bWN6oJrhfENq1IbO4qJVxamb0MUc9nvJVgqNtrmabC:ek8rkZWYITakpNt9atLFumvBh8huTsE
- TLSH
  T1DE763947ECA514E9C0BDD1358963A622BF617C495B3123D32B90F2382F7ABE0AD79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution defense_evasion
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  Freefn/amigendrv64.sys
- Size 36KB
- SHA256 811e5d65df60dfb8c6e1713da708be16d9a13ef8dfcd1022d8d1dda52ed057b2
- MD5 9accebd928a8926fecf317f53cd1c44e
- SHA1 d7d71135cc3cf7320f8e63cefb6298dd44e5b1d4
- SHA512 2563402cc8e1402d9ac3a76a72b7dab0baa4ecd03629cc350e7199c7e1e1da4000e665bd02ac3a75fd9883fa678b924c8b73d88d8c50bf9d2ae59254a057911e
- SSDEEP 768:cBOmh786zi+NqkO8Ouwn3uivOyiRZSFInq1os29zjTUD:cXi+NXwnecOyiaFInq1lCz+
- TLSH
  T1F6F27CC25B7824C6ED97993082E8D673BC71F6A61B1083EB01B0D0251E93FD16B3922F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18 behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

T1027

Command Obfuscation

T1027.010

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Obfuscated Files or Information: Command Obfuscation

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20