27d395f2e917a365836f7fa274d7c783d731dc263eec4904a24692dce5c62bd4 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

freebl3.dll

windows10-ltsc_2021-x64

7

freebl3.dll

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
freebl3.dll
Size 7.4MB
Sample260831-mkptyasvgy
SHA256 27d395f2e917a365836f7fa274d7c783d731dc263eec4904a24692dce5c62bd4
MD5 24eda5725cd8888592b6631a780476ad
SHA1 fa7f3af215f08870a25679f3e9bf45525a4e66a2
SHA512 44b36d546a9903e68e725057a508fb652619eb9044d8c023de864b56db40a8d38cee3308e083ca9dde62cc67ec94da1843c0e46b7cbc980bf326b932c4dcc053
SSDEEP 98304:6OzaQrRnnxJtWTQ1UnI292X+GF5xIJamzoc/YJaFfZcfiwLwAILor2nzW4o8Ok:6OzBxLWTQx292/BIYm8cwJaxqvLqoL
TLSH
T1F576E002F2D7C534EA46DB3F961A8B376A75BD602364A0CB37C726D7E90B6A04D36341
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

freebl3.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

defense_evasion execution

Behavioral task

behavioral2

Sample

freebl3.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

defense_evasion execution

Malware Config

Targets

- Target
  freebl3.dll
- Size 7.4MB
- SHA256 27d395f2e917a365836f7fa274d7c783d731dc263eec4904a24692dce5c62bd4
- MD5 24eda5725cd8888592b6631a780476ad
- SHA1 fa7f3af215f08870a25679f3e9bf45525a4e66a2
- SHA512 44b36d546a9903e68e725057a508fb652619eb9044d8c023de864b56db40a8d38cee3308e083ca9dde62cc67ec94da1843c0e46b7cbc980bf326b932c4dcc053
- SSDEEP 98304:6OzaQrRnnxJtWTQ1UnI292X+GF5xIJamzoc/YJaFfZcfiwLwAILor2nzW4o8Ok:6OzBxLWTQx292/BIYm8cwJaxqvLqoL
- TLSH
  T1F576E002F2D7C534EA46DB3F961A8B376A75BD602364A0CB37C726D7E90B6A04D36341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion execution
- Stops running service(s)
  defense_evasion execution
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution

© 2018-2026

Terms | Privacy