General

  • Target

    FrostyModManager.zip

  • Size

    76.1MB

  • MD5

    a36305d746daab20c3608cebd0565d79

  • SHA1

    fea45fa7c2ab6787e2fbf0228a94fe69e12bac63

  • SHA256

    967085c6e5df28bb3d9a1a6e2680423d38b8940b00a65b5407859f5d6aacfc7f

  • SHA512

    de498aa29408f49f10f5b98e2ab8b7e41c46835c2d971be14eac30b1d8e86188f8196206ff64abc1644c10c8ad3a5324d6b079ee34cc4873f310e97c36dae896

  • SSDEEP

    1572864:3JKlPN+TmZpG0ftxn8EKR74cChlKkGb7vipRyjj8nKzwPoJV2:3axW0L8jR74Bh4b7vuYEKzwCY

Score
9/10

Malware Config

Signatures

  • CoreEntity .NET Packer 3 IoCs

    A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

Files

  • FrostyModManager.zip
    .zip
  • FrostyControls.dll
    .dll windows x64


    Headers

    Sections

  • FrostyCore.dll
    .dll windows x64


    Headers

    Sections

  • FrostyHash.dll
    .dll windows x64

    e0024bab776a080fbe2677e3e4194691


    Headers

    Imports

    Sections

  • FrostyModManager.exe
    .exe windows x64


    Headers

    Sections

  • FrostyModSupport.dll
    .dll windows x64


    Headers

    Sections

  • FrostySdk.dll
    .dll windows x64


    Headers

    Sections

  • Plugins/FsLocalizationPlugin.dll
    .dll windows x64


    Headers

    Sections

  • Plugins/LaunchPlatformPlugin.dll
    .dll windows x64


    Headers

    Sections

  • Plugins/MeshSetPlugin.dll
    .dll windows x64


    Headers

    Sections

  • Plugins/Swbf2MergerPlugin.dll
    .dll windows x64


    Headers

    Sections

  • Prereqs/NET Framework 4.7.2.exe
    .exe windows x86

    9b2f6a441f9ff8df98ae6e9e6b5d4271


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Prereqs/Visual C++ Redistributable for Visual Studio 2015.exe
    .exe windows x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • Prereqs/Visual C++ Redistributable for Visual Studio 2017.exe
    .exe windows x86

    58e63938ccf607896b1a0dac4dd9b11d


    Code Sign

    Headers

    Imports

    Sections

  • Profiles/AnthemSDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/BF1SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/BF4SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/BFHSDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/BFVSDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/DragonAgeSDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/FIFA19SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/FIFA20SDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/Fifa17SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/Fifa18SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/MADDEN19SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/MADDEN20SDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/MassEffectSDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/MirrorsEdgeSDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/NFS14SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/NFS16SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/NFS17SDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/NFSEDGESDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/NFSHEATSDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/PVZ1SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/PVZ2SDK.dll
    .dll windows x64


    Headers

    Sections

  • Profiles/PVZ3SDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/StarWarsIISDK.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Profiles/StarWarsSDK.dll
    .dll windows x64


    Headers

    Sections

  • ThirdParty/CryptBase.dll
    .dll windows x64

    b402a08aa547a6b2bcf6d8761a84da62


    Headers

    Imports

    Exports

    Sections

  • ThirdParty/LZMA.dll
    .dll windows x64

    acd67703cae3fc8ba3be16ae38a61dc2


    Headers

    Imports

    Exports

    Sections

  • ThirdParty/Newtonsoft.Json.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ThirdParty/UnRAR.dll
    .dll windows x64

    21cc0575dccc73f63dbb5896b6b52a1b


    Headers

    Imports

    Exports

    Sections

  • ThirdParty/fifaconfig.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ThirdParty/liblz4.so.1.8.0.dll
    .dll windows x64

    50cdd5477420455c168372227cba52d9


    Headers

    Imports

    Exports

    Sections

  • ThirdParty/libzstd.0.0.6.dll
    .dll windows x64

    093d494eed4e2ae5b6d621211d3c6501


    Headers

    Imports

    Exports

    Sections

  • ThirdParty/libzstd.1.1.5.dll
    .dll windows x64

    2ead89be6f22c37cc711c6945b6b3f93


    Headers

    Imports

    Exports

    Sections

  • ThirdParty/libzstd.1.2.0.dll
    .dll windows x64

    7f37a3de67eb5eac134c273eeaa98fb1


    Headers

    Imports

    Exports

    Sections

  • ThirdParty/libzstd.1.3.4.dll
    .dll windows x64

    7f37a3de67eb5eac134c273eeaa98fb1


    Headers

    Imports

    Exports

    Sections

  • ThirdParty/zlibwapi.dll
    .dll windows x64

    a020653e2200de4edae4d0929ebfdefb


    Headers

    Imports

    Exports

    Sections