Overview
overview
5Static
static
5Freebuff-0...64.exe
windows10-2004-x64
5Freebuff-0...64.exe
windows11-ltsc_2024-x64
5$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3resources/...t5G.js
windows10-2004-x64
3resources/...t5G.js
windows11-ltsc_2024-x64
1resources/...6tE.js
windows10-2004-x64
3resources/...6tE.js
windows11-ltsc_2024-x64
3resources/...ZoG.js
windows10-2004-x64
3resources/...ZoG.js
windows11-ltsc_2024-x64
3resources/...4jp.js
windows10-2004-x64
3resources/...4jp.js
windows11-ltsc_2024-x64
3resources/...lZU.js
windows10-2004-x64
3resources/...lZU.js
windows11-ltsc_2024-x64
3resources/...ONQ.js
windows10-2004-x64
3resources/...ONQ.js
windows11-ltsc_2024-x64
3resources/..._4e.js
windows10-2004-x64
3resources/..._4e.js
windows11-ltsc_2024-x64
3resources/...oWU.js
windows10-2004-x64
3resources/...oWU.js
windows11-ltsc_2024-x64
3resources/...PDT.js
windows10-2004-x64
3resources/...PDT.js
windows11-ltsc_2024-x64
3resources/...XCa.js
windows10-2004-x64
3resources/...XCa.js
windows11-ltsc_2024-x64
3resources/...IDG.js
windows10-2004-x64
3resources/...IDG.js
windows11-ltsc_2024-x64
3General
- Target Freebuff-0.0.126-win-x64.exe
- Size 146.7MB
- Sample260919-ng4dlaef57
- SHA256 710a22654707cd4dbaabaacd9812a9097205aee50faeece14f62e4c3034f246e
- MD5 c9905db139ce4dc202981f9393ab64ce
- SHA1 35b994da47b8f77688f48ac6cb5436fe7ece2bb9
- SHA512 3bf2b0b0bbf26d9bc2f7c0770bf36fb4ffaea4df3e9791248c4810431da411cc0687c19866184e674c6eb3a20cd1088d3100cf755ae4279523362922cbd6750c
- SSDEEP 3145728:O6lYWqfL1i0GL4xxou3tB3D2dRI1sOVd6VKt:Pt0GExxogT1sQdk6
- TLSH T1AB7833081F1AD911FCA4E1718DF0DA32DB6FA81529AADF8953FDFA943E943C5072143A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Freebuff-0.0.126-win-x64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Freebuff-0.0.126-win-x64.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
resources/orchestrator/ui/assets/vue-html-AaS7Mt5G.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
resources/orchestrator/ui/assets/vue-html-AaS7Mt5G.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
resources/orchestrator/ui/assets/vue-vine-BoDAl6tE.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
resources/orchestrator/ui/assets/vue-vine-BoDAl6tE.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
resources/orchestrator/ui/assets/vyper-CDx5xZoG.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
resources/orchestrator/ui/assets/vyper-CDx5xZoG.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
resources/orchestrator/ui/assets/wasm-CG6Dc4jp.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
resources/orchestrator/ui/assets/wasm-CG6Dc4jp.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
resources/orchestrator/ui/assets/wasm-MzD3tlZU.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
resources/orchestrator/ui/assets/wasm-MzD3tlZU.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
resources/orchestrator/ui/assets/wenyan-BV7otONQ.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
resources/orchestrator/ui/assets/wenyan-BV7otONQ.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
resources/orchestrator/ui/assets/wgsl-Dx-B1_4e.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
resources/orchestrator/ui/assets/wgsl-Dx-B1_4e.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
resources/orchestrator/ui/assets/wikitext-BhOHFoWU.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
resources/orchestrator/ui/assets/wikitext-BhOHFoWU.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
resources/orchestrator/ui/assets/wit-5i3qLPDT.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
resources/orchestrator/ui/assets/wit-5i3qLPDT.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
resources/orchestrator/ui/assets/wolfram-lXgVvXCa.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
resources/orchestrator/ui/assets/wolfram-lXgVvXCa.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
resources/orchestrator/ui/assets/xml-sdJ4AIDG.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
resources/orchestrator/ui/assets/xml-sdJ4AIDG.js
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Freebuff-0.0.126-win-x64.exe
- Size 146.7MB
- SHA256 710a22654707cd4dbaabaacd9812a9097205aee50faeece14f62e4c3034f246e
- MD5 c9905db139ce4dc202981f9393ab64ce
- SHA1 35b994da47b8f77688f48ac6cb5436fe7ece2bb9
- SHA512 3bf2b0b0bbf26d9bc2f7c0770bf36fb4ffaea4df3e9791248c4810431da411cc0687c19866184e674c6eb3a20cd1088d3100cf755ae4279523362922cbd6750c
- SSDEEP 3145728:O6lYWqfL1i0GL4xxou3tB3D2dRI1sOVd6VKt:Pt0GExxogT1sQdk6
- TLSH T1AB7833081F1AD911FCA4E1718DF0DA32DB6FA81529AADF8953FDFA943E943C5072143A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/vue-html-AaS7Mt5G.js
- Size 8KB
- SHA256 a9066b052de965759c4456bed9e3e412c25f1050f3585a2dc6714747bbec1c0e
- MD5 393014a1f0a36e0b6d4506b00ce1e6e1
- SHA1 a09f47852f7ee3a90343788a1aa6693ae098bde2
- SHA512 38cc8d2c92cf7f826041d76ca6219d2405c149eb175070f5f6b090670d438afb473eb97141d0840853b450e92381b46e29ceb7ac044b899a3113870fa26532c2
- SSDEEP 192:7Sb7l7rA6uRLxST5maoto0RzL4C8nz0v1LBv08MZhS8AxPAzlCN:7txS1Nk8M
- TLSH T1100279AF4DAB2CFA2D5F4E6044DB3744743450372AC9BDD58008AE4CE69FA4DC2A3696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/vue-vine-BoDAl6tE.js
- Size 185KB
- SHA256 afa7f4368fcaa78d83c5a184c2905effd031a31b5ef776352e62e219414a6496
- MD5 fa423c1d8bfd217ed01623ff3bd816e6
- SHA1 d202fc19a7bd2c223e67bb87d4d2f46ed6c83cdf
- SHA512 5b7ec4ca7bad64944fc8d5264f923a8fad14bff06b21334350cc91f3cbf0db0759536a117f922f5ad131f3ea94c2b7e4ad00e11d9a6f9e492fbd1cb2f6acf019
- SSDEEP 768:uDhfuDwuduO1Rd1B9KjMHhIywfuZSwwfuZvPohwfuZSwwfuljXo7elwfu5s5okiI:nwuQvcfvQTY23dC8S5YTyK/wA5Et
- TLSH T1FC04340DB2BE8EF70FA50F418CA5C3C6302AA945A9CCDD59C108BF38F55F64DE59A291
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/vyper-CDx5xZoG.js
- Size 72KB
- SHA256 ff66f70ed9d0a15a77389cfc35cef85ff1f4932bef9e508f9a19b1c87d7f46e9
- MD5 e018989a2b98e56245c35607213c837d
- SHA1 b937f399119daa5243f7367183254c340a5fa1ac
- SHA512 708a5fbfe5d31f2c8a0b852464c65036ae48c62b0d008e5c3bcd58c73aede33e400b398f20ae7f073b9d992eee5e580611ed4a46df4833dca0fb0ae280c38a88
- SSDEEP 1536:yUnfeTp+m2YACOYCmxubpD4Um7WHg8XxzzS/zzG5LiYLOfE3fr:yUnMp+m2YACOYCDpkUm7WHg8XxzzS/z0
- TLSH T11173025DC03F4CEE2F8F2E6460AB77866526745636D89DACD10C4F88FE4D46E81633A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/wasm-CG6Dc4jp.js
- Size 607KB
- SHA256 8deb47b0d7b203f733275b554ccf654df3b76026bd14cab89130ae2a61abd719
- MD5 621dedba38606de120785fc8f0761f88
- SHA1 ad89be0b26c2302ab1399d8da761ac7c8ad111ba
- SHA512 6c381d2dedce034b59a78351ada0766373dcaf13e4a82bd21eddd1665c0c513c285f94676670b4641d2a2d6f0948854495e80a8b27ead01d926cf1e96e393d30
- SSDEEP 12288:O3fTuOoFwVLAItCbW0ddcJelSjBBBusZkV1J:6TuOwwVLAItCbW0ddyelS1usM1J
- TLSH T1F8D498F39243BE7AAB661D0091043F26AC5C5CDB53246298EA4CDFA6B0DD914AD7DCF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/wasm-MzD3tlZU.js
- Size 11KB
- SHA256 ecac025bef526964873260d057a8af935fe8b86da2b9845051051266b019c8da
- MD5 ab9b190e76a6b4cf9db9a1e203ec62f4
- SHA1 e422385a416d60f806038d351069c813f54f9195
- SHA512 3d91a91658535fe24c5f390527a75d5cf39d8f138635bb89a21c97bfc7a68269a3272971c8b43f33a5659a5b6e59c28099fc5d7828bfbded311d4c2b70ad13a3
- SSDEEP 192:pfvAoIs8aP3pdfaOTfA/JQAhzh4x3MImaVfok5k/OYjK/wydShPd+dVgHcSI:pNrjdG7I
- TLSH T14442AADD50659CE82BA73D52E047638F7C26D98B85CC9D86A508DF48C32EE1DC618BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/wenyan-BV7otONQ.js
- Size 2KB
- SHA256 40ed524c0cfce810853c17a6e99f8c357dc1ea9d5df901dcf60a2b7a45e63f7f
- MD5 27899af16a515ae1970964cedb216197
- SHA1 dd2435f7216ddfba26dfeed0eb80060134925fdb
- SHA512 fb4220ae87e9912537710f3eb2a6374fe9152ed530353c0c495d4d73aa3f5b714289baa0d9405b2818442e6a1d596d114846b16ddeb18136e184cacb8652dfed
- TLSH T16441326DC4B70CFD6598ABEC6C0AD7C26853720316CB8E2AE05D8B54D60B7E64423293
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/wgsl-Dx-B1_4e.js
- Size 5KB
- SHA256 97dee41e3f719e15ac2c06cbf36677252c7654e254f178128113744841a4806e
- MD5 01701bd457273cffd5d5716f6c62e005
- SHA1 a211cd3e0b585e76ae0ff6aac64cc8f22b60d16e
- SHA512 9070d54a1c9e37456d6071fcec3479138c3f8d177d9b114aa79cd7a1668410b068c1e534e1a5854a34afb5a67816893369d1e0d44435f6078f65b1b23ead1bfb
- SSDEEP 48:GV6/CBRf3af9IpOQpW0IWU/+q8zZ2a66Uq7pfw1hG66haG2gyZ43ur317eEQzP0O:GPqf9/UUWRqeUq8e//F3uz170RR54I
- TLSH T1C2B1CE5EA0BB1CFD198EBDA4541B638E7464FE2215845CC9E00CCB6DF75CD8D812276B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/wikitext-BhOHFoWU.js
- Size 54KB
- SHA256 22c8b6a379a9a1aa4df1fa90a85d054b78c5414e772c062611997d98de2cdb64
- MD5 18c55f0e97a6e2ca8eb15e4951af32c9
- SHA1 47e90fe699ab162468a3755b5b52049a977505fd
- SHA512 3b2a570b64d886c598fc5e86a4afb3de7019353bba503f0bb9a395edff07d9c464edc3a8cceae30f7b040b707f91bdf1340c2a56b55b8e9d3d09313e50098126
- SSDEEP 192:7XewdE9OsukiwakRyrxvqCx21EQG4Cmjl2jEgAiWMu4bBmNe2zgmwmNmxZmqmTmn:7uwy9BaoydvqCMbonAZfUi4HYLG3Aa
- TLSH T14F436D9E462F4CFA395E5E514097774E76347062EDDDEC954228CF8CEA4EC8C4083ABA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/wit-5i3qLPDT.js
- Size 20KB
- SHA256 2b2cfcdfceebf61cad332a1b126a7bce2afe89b0b5c6bf8791067154e8229bb9
- MD5 4c3b715692e14fef2687d51aa8985eb3
- SHA1 662c842652ea8432e24543cf4bcaa78dcec4f2d6
- SHA512 cc194249436a221152578486347e2b4e8b7550efa5d1c00a1a960c9a8c00ae836568ff4d309742a7657f6313ff998516feeec03de92010c61c15fe9ddb2a97fe
- SSDEEP 384:0AZQL3pTtUZV2kOjqSkh/T1XX/pBOCC9raKgI:ziF5URhL1XX/pBOCC9raKgI
- TLSH T1AEA2E4CE406F0CEE7A6E2E170407B3487539B666DADC5D8DD228CB5DF24E58E80276D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/wolfram-lXgVvXCa.js
- Size 256KB
- SHA256 5077bf9f804422eafafce9c7bc5bfd04f094ae624f0136c9a33daeac942fe75d
- MD5 b62a6858ce76140e8626ae4ec31051b0
- SHA1 415c3b9fad954ac910a54ef248abb4cb98601fb6
- SHA512 540dfc9f94dee80940c6d3f84ebc98187d61d81ceebc0a6119b1477a137f9bc81f9b0f7a1abafcc25f4a0c83f8e98397a2c7c4050c1935bb2836104ce337e168
- SSDEEP 3072:WTAGsrLflbl0pcY9eO68WyteRzYMyXp/fxZV0ucfZPO8Z4NG9h8cpyXp0:WTAGEbhqGOBWytQzYtbHQO04NGX8cd
- TLSH T1E5443ABE71659FA515CF3CA49CEB034B19B1202E2492D46CF4848F0666EECCC927776B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/orchestrator/ui/assets/xml-sdJ4AIDG.js
- Size 5KB
- SHA256 50f00554f7503986c098ada8706f8e6a8fdad39e5158c7626d31532a883a51e8
- MD5 93004b929b51310d2f9e97f561c2869a
- SHA1 5e02110ec706b0d5c079f50df04d0bb7f6bac982
- SHA512 d6a9249e6d52aee549fc1f34fba2e2f27f7070bdb2b171571fba19d4344e704d9006baa8eddbb4116fb7e5c843f4326e483207c5c3f0db4826d6c7d327405814
- SSDEEP 48:bskBfhrcT4lfm7TtTQUFTfhMr+FPf33fE0PrpdfhhQ8lH1PdcPNEVPQoDpP3iqD5:bsQod/KUpFlVCoDNK0Tc1brK0zp5+
- TLSH T1CCB1AFAF54576CFEB96F9EA1404F3388B43A103329C8BED8610D8E4DE29D94DC1537A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10