General
- Target lllei-FreeFly-1.3.0.zip
- Size 99KB
- Sample260907-3f73qaxeqc
- SHA256 074086b4cd1f8364358c17bb6611bf4a9485983a70bc2da9a3525851f8f53781
- MD5 a60dfb6d7015d01e523cda4c1a21fb49
- SHA1 a6658bcc84db2eb2d439fcafce4400b371d8ea97
- SHA512 bf0c3a337ebd18d5957c58653457ee888797885ec46d3f857db59484ff86f6f1e45fae79ea57330ea4e52d83723d1bf651ca450a105d7ea076ddc17b83c90692
- SSDEEP 3072:bHtRO9hzjMlXr/8wC+nxE04aEpSdyJ0Kzk/G9+p:O/PEr8wlx/gXzBEp
- TLSH T192A312615FC3058DFA7F83B9C25269A1DA10DA662CA8170CB367700C5727B925BBF52C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
plugins/FreeFly.dll
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
plugins/FreeFly.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target plugins/FreeFly.dll
- Size 43KB
- SHA256 eff83337942dfa44927dc5f0f8f63b667093495eafda4ea97d3c7b2dcb0f8c91
- MD5 33358fd53a4f674f06a5b8521523ef6d
- SHA1 d90137669cf74256d8740d24c674c91cc7380986
- SHA512 ad2e3ebd5c3a8b3f93ecdeafb8b2a4809f3d10cfd72a84d6f5bc77272e78c0bcaee7e0181c1e0336c2748c606c83ac99688f02df0ada2fcbc53c66722329da6d
- SSDEEP 768:G5z0BxWeJZ918kkk4mnTetGEcipOCRnzgx50U9Wpu7WeXMdFRY1TKhe9:Gm8eJZ918kkk4yuj/FgXNIk7WxCKhm
- TLSH T1BB13F81033FC422AF6FF2BBABD3145900B777663A632D78C5A99B0CE1D6678055027A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.