Overview

overview

6

Static

static

1

bitdefende...ee.exe

windows10-2004-x64

6

bitdefende...ee.exe

windows11-ltsc_2024-x64

3

Resubmissions

29/10/2026, 22:27

261029-2c978sft3z6

29/10/2026, 22:20

261029-19dpvsttex5

Analysis

  • user interaction
    yes
  • max time kernel
    1s
  • max time network
    14s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 22:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    bitdefender_avfree.exe
  • Size 21.5MB
  • Sample261029-2c978sft3z
  • SHA256 840398d70bffeb58325dbf9bdab576c6df9a02552a6b3c56040edf08dc97d1f9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\bitdefender_avfree.exe
    "C:\Users\Admin\AppData\Local\Temp\bitdefender_avfree.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:6024
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe"
      2⤵
        PID:5112
        • C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe
          "C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe"
          3⤵
            PID:4668
            • C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe
              "C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe"
              4⤵
                PID:1096

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              agent_launcher.exe
              • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\agent_launcher.exe
              • Size 249KB
              • SHA256 144cadead0541912843d47aed7d88d7fdda43e49641bd6e8e0df5c0c8ca1b39a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              bddeploy.exe
              • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\bddeploy.exe
              • Size 406KB
              • SHA256 c77afa25bbaf58dbb5669eb31ecbdf4f415996023eb64de6c89b71f08476787e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              deploy.dll
              • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\deploy.dll
              • Size 20KB
              • SHA256 ac364daac06ed770cca271fbfeef32536b3ff97ab93c978a3730e7d8b59684f5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              agentpackage.exe
              • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\agentpackage.exe
              • Size 5.2MB
              • SHA256 cf29aaf8962a45a776ec8e75483a4789e19b67f0beaddfb3d8506168c4900e35
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              agentpackage.exe.md5
              • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\agentpackage.exe.md5
              • Size 32B
              • SHA256 7bb9576095488b145a7e74e3b5ee6f7f7a0502622197cabac0da23d24931e8e9
              • MD5 SHA1 SHA512
              Submit Download

              setuppackage.exe
              • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe
              • Size 3.0MB
              • SHA256 80a019c325f7a4f16104e321a678e2df565fe3db16528a832cf42d6f851aaf14
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              setuppackage.exe
              • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe
              • Size 2.8MB
              • SHA256 bae070616c9198db659402e1b97f1907e4dd65139cc3831efc96e52781129950
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              setuppackage.exe.md5
              • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\packages\setuppackage.exe.md5
              • Size 32B
              • SHA256 0cfc1861c7ba3c64b746744cc79bec0eaf0731a7283d0dd28e3bc001d52aca15
              • MD5 SHA1 SHA512
              Submit Download