General
- Target freefirewall-setup.exe
- Size 41.1MB
- Sample260925-j2wr2atake
- SHA256 b6f0d4dd3a673b1f9e0663228c94a684e1d5a76cf943d125d52ae1ad9ba798bd
- MD5 6d6145f263bc2b1a6b0694714a6bca26
- SHA1 7a0eb3d2e59dc7faaeec49a2609a9c74eecf3c02
- SHA512 7f41035272387ef61ca765f02b2ce79e836d9155fe610801d83861970ab8f35c39d226f18629d3bd723432bb6f8c167fb4db7422a597a6305e14c77b7f25ab06
- SSDEEP 786432:FQysFlIe6HbdsuQr5mUXhC/WH4CtNDBT05XbZAwcS4mt5:FgFvuYbXhB4OTsrZASB5
- TLSH T16A9733195A9802B9D061C2BEC4E75451F771F4490732CBEB4695FA2A2F339E8CB39372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
freefirewall-setup.exe
Resource
win10ltsc2021-20260911-en
17 signatures
900 seconds
Malware Config
Targets
-
- Target freefirewall-setup.exe
- Size 41.1MB
- SHA256 b6f0d4dd3a673b1f9e0663228c94a684e1d5a76cf943d125d52ae1ad9ba798bd
- MD5 6d6145f263bc2b1a6b0694714a6bca26
- SHA1 7a0eb3d2e59dc7faaeec49a2609a9c74eecf3c02
- SHA512 7f41035272387ef61ca765f02b2ce79e836d9155fe610801d83861970ab8f35c39d226f18629d3bd723432bb6f8c167fb4db7422a597a6305e14c77b7f25ab06
- SSDEEP 786432:FQysFlIe6HbdsuQr5mUXhC/WH4CtNDBT05XbZAwcS4mt5:FgFvuYbXhB4OTsrZASB5
- TLSH T16A9733195A9802B9D061C2BEC4E75451F771F4490732CBEB4695FA2A2F339E8CB39372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory