Overview

overview

10

Static

static

10

free_claud...ion.js

windows10-2004-x64

3

free_claud...ion.js

windows11-ltsc_2024-x64

3

free_claud...rk.svg

windows10-2004-x64

3

free_claud...rk.svg

windows11-ltsc_2024-x64

4

free_claud...ht.svg

windows10-2004-x64

3

free_claud...ht.svg

windows11-ltsc_2024-x64

4

free_claud...ks.svg

windows10-2004-x64

3

free_claud...ks.svg

windows11-ltsc_2024-x64

4

free_claud...uv.svg

windows10-2004-x64

3

free_claud...uv.svg

windows11-ltsc_2024-x64

4

free_claud...est.py

windows10-2004-x64

3

free_claud...est.py

windows11-ltsc_2024-x64

3

free_claud...t__.py

windows10-2004-x64

3

free_claud...t__.py

windows11-ltsc_2024-x64

3

free_claud...ort.py

windows10-2004-x64

3

free_claud...ort.py

windows11-ltsc_2024-x64

3

free_claud...est.py

windows10-2004-x64

3

free_claud...est.py

windows11-ltsc_2024-x64

3

free_claud...ort.py

windows10-2004-x64

3

free_claud...ort.py

windows11-ltsc_2024-x64

3

free_claud...ort.py

windows10-2004-x64

3

free_claud...ort.py

windows11-ltsc_2024-x64

3

free_claud...own.py

windows10-2004-x64

3

free_claud...own.py

windows11-ltsc_2024-x64

3

free_claud...ply.py

windows10-2004-x64

3

free_claud...ply.py

windows11-ltsc_2024-x64

3

free_claud...ets.py

windows10-2004-x64

3

free_claud...ets.py

windows11-ltsc_2024-x64

3

free_claud...ons.py

windows10-2004-x64

3

free_claud...ons.py

windows11-ltsc_2024-x64

3

free_claud...els.py

windows10-2004-x64

3

free_claud...els.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    free_claude_code-6.8.0.tar.gz
  • Size 3.5MB
  • Sample261002-3mt5favgjd
  • SHA256 0b148fd1e7d2d9740e58f5d7c0f25938654b8826b6be6a7953af6af27f88aedd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwarediscoveryexecutionspyware

Malware Config

Extracted

Language

  • ps1

Source
URLs
  • exe.dropper

    https://claude.ai/install.ps1
  • exe.dropper

    https://chatgpt.com/codex/install.ps1
  • exe.dropper

    https://pi.dev/install.ps1
  • exe.dropper

    https://opencode.ai/files/bin
  • exe.dropper

    https://hermes-agent.nousresearch.com/install.ps1
  • exe.dropper

    https://x.ai/cli/install.ps1
  • exe.dropper

    https://raw.githubusercontent.com/Alishahryar1/free-claude-code/main/scripts/install-muse.ps1
  • exe.dropper

    https://astral.sh/uv/install.ps1

Targets

    • Target
      free_claude_code-6.8.0/.github/workflows/validate-bug-report-version.yml
    • Size 9KB
    • SHA256 6a67e4079469afcc820cff622fb13459e27d5a6f69360c4621e75152322a9da0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      free_claude_code-6.8.0/assets/free-claude-code-wordmark-dark.svg
    • Size 1KB
    • SHA256 39df196ab24641fee8d1ca5b2504029a6ee513576144b98ee8a4755322b46677
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral3behavioral4
    • Target
      free_claude_code-6.8.0/assets/free-claude-code-wordmark-light.svg
    • Size 1KB
    • SHA256 bd0ba1fb06a01df4675a47ae1903ddf081fb1fedfb75e7850393b8ebdffbdfb4
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral5behavioral6
    • Target
      free_claude_code-6.8.0/assets/how-it-works.svg
    • Size 460KB
    • SHA256 de2b8d5c1207a5bb7150e2d71e32521451f3dd0822db5258cd33b6b341f05624
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral7behavioral8
    • Target
      free_claude_code-6.8.0/assets/package-manager-uv.svg
    • Size 4KB
    • SHA256 d163a0f1cccd724c5d9db710a3822ebea6c067460d1c07199120967860e93642
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral10behavioral9
    • Target
      free_claude_code-6.8.0/conftest.py
    • Size 86B
    • SHA256 7005a1c4046fc97b87f8025363a48bcf0606597c82500e322be21d42e80ba215
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      free_claude_code-6.8.0/e2e/__init__.py
    • Size 53B
    • SHA256 b7db3f014bd8f4c3aa5a2f2ba838ea39eecdf75852448621039499d58da62584
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      free_claude_code-6.8.0/e2e/code_support.py
    • Size 2KB
    • SHA256 8abd83d5ac393025212455ab3013b0a785c4fba9e2a18488541a47ee5b95d311
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      free_claude_code-6.8.0/e2e/conftest.py
    • Size 12KB
    • SHA256 00663ec9cf3d7dd5d08720ac64616933ded1bcfcbb022ee9c94cd5006ae52285
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      free_claude_code-6.8.0/e2e/form_support.py
    • Size 590B
    • SHA256 8fdbb30de02b6ed5ed29855a79a34eb124e6ef9ee6d633f80c77ea8deaf2dbbc
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral19behavioral20
    • Target
      free_claude_code-6.8.0/e2e/provider_support.py
    • Size 529B
    • SHA256 5ec9d5330e5d9b83f2649cc6c7391b9a72d8904861bc25273590b900b0870bf9
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral21behavioral22
    • Target
      free_claude_code-6.8.0/e2e/server_shutdown.py
    • Size 2KB
    • SHA256 792155f8a629da640e80b0d31c5825b310c499648dd61f16d7ed6e4629eff2e7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral23behavioral24
    • Target
      free_claude_code-6.8.0/e2e/test_admin_apply.py
    • Size 13KB
    • SHA256 893ec8f875d5fcac47b264671c27d337ee7d500c0edb4c9da656b09f516d42bc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral25behavioral26
    • Target
      free_claude_code-6.8.0/e2e/test_admin_assets.py
    • Size 9KB
    • SHA256 e2f4a3fc09af99aa8ae344f24a353238357a1d4c5d1a3e22a0d9026d758be551
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral27behavioral28
    • Target
      free_claude_code-6.8.0/e2e/test_admin_integrations.py
    • Size 18KB
    • SHA256 9d9c6067d0f147562d7589a225335ddbb47767afcb591354148e9cecc21ab5f5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral29behavioral30
    • Target
      free_claude_code-6.8.0/e2e/test_admin_models.py
    • Size 7KB
    • SHA256 039b1e64810606bd8d85b15331364f9bae5fed35741d2cfa6ae580d91c7de789
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
10/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

adwarediscoveryspyware
Score
3/10

behavioral4

adwarediscoveryspyware
Score
4/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

adwarediscoveryspyware
Score
4/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

adwarediscoveryspyware
Score
4/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoveryspyware
Score
4/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10