Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3PC_FridayN...in.exe
windows7-x64
1PC_FridayN...in.exe
windows10-2004-x64
1PC_FridayN...SM.dll
windows7-x64
1PC_FridayN...SM.dll
windows10-2004-x64
1PC_FridayN...er.dll
windows7-x64
1PC_FridayN...er.dll
windows10-2004-x64
1PC_FridayN...ss.dll
windows7-x64
1PC_FridayN...ss.dll
windows10-2004-x64
1PC_FridayN...rp.dll
windows7-x64
1PC_FridayN...rp.dll
windows10-2004-x64
1PC_FridayN...en.dll
windows7-x64
1PC_FridayN...en.dll
windows10-2004-x64
1PC_FridayN...ro.dll
windows7-x64
1PC_FridayN...ro.dll
windows10-2004-x64
1PC_FridayN...ib.dll
windows7-x64
1PC_FridayN...ib.dll
windows10-2004-x64
1PC_FridayN...ty.dll
windows7-x64
1PC_FridayN...ty.dll
windows10-2004-x64
1PC_FridayN...or.dll
windows7-x64
1PC_FridayN...or.dll
windows10-2004-x64
1PC_FridayN...on.dll
windows7-x64
1PC_FridayN...on.dll
windows10-2004-x64
1PC_FridayN...ml.dll
windows7-x64
1PC_FridayN...ml.dll
windows10-2004-x64
1PC_FridayN...es.dll
windows7-x64
1PC_FridayN...es.dll
windows10-2004-x64
1PC_FridayN...er.dll
windows7-x64
1PC_FridayN...er.dll
windows10-2004-x64
1PC_FridayN...ig.dll
windows7-x64
1PC_FridayN...ig.dll
windows10-2004-x64
1PC_FridayN...on.dll
windows7-x64
1PC_FridayN...on.dll
windows10-2004-x64
1Analysis
-
max time kernel
158s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
07/10/2023, 16:42
Static task
static1
Behavioral task
behavioral1
Sample
PC_FridayNightFappin/FridayNightFappin.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PC_FridayNightFappin/FridayNightFappin.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Animancer.FSM.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Animancer.FSM.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Animancer.dll
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Animancer.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Assembly-CSharp.dll
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/DOTween.dll
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/DOTween.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/DOTweenPro.dll
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/DOTweenPro.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/DemiLib.dll
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/DemiLib.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Mono.Security.dll
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Mono.Security.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/OPS.Obfuscator.dll
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/OPS.Obfuscator.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/OPS.Serialization.Json.dll
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/OPS.Serialization.Json.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/OPS.Serialization.Yaml.dll
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/OPS.Serialization.Yaml.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Sirenix.OdinInspector.Attributes.dll
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Sirenix.OdinInspector.Attributes.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Sirenix.OdinInspector.CompatibilityLayer.dll
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Sirenix.OdinInspector.CompatibilityLayer.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral29
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Sirenix.Serialization.Config.dll
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Sirenix.Serialization.Config.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral31
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Sirenix.Serialization.dll
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
PC_FridayNightFappin/FridayNightFappin_Data/Managed/Sirenix.Serialization.dll
Resource
win10v2004-20230915-en
General
-
Target
PC_FridayNightFappin/FridayNightFappin.exe
-
Size
625KB
-
MD5
ef11a2e42b6a07768ea8a43f74ca74c7
-
SHA1
b7b4812531813a93a2e5c47ec8d622758d15d6d8
-
SHA256
690cfc5c91668a4b9790f5eab4c95b9a750a1eae993b3f357b4b1459df317a59
-
SHA512
132b9f81c3d55bc0e72be9f23f3543e8032ff6658432d2348e175a6956b0aaa757b1482dc7bb68c763448520da00fec65b22941464a2822fc4538ae5fbf5d525
-
SSDEEP
6144:kVls9uudIBfCol2Yg3r8HhZQPwq1fS+4pwLNtFCP:g+xefCoTKg/Zq9b4pYNtUP
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 3592 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 3592 AUDIODG.EXE -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1028 FridayNightFappin.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1028 wrote to memory of 3988 1028 FridayNightFappin.exe 86 PID 1028 wrote to memory of 3988 1028 FridayNightFappin.exe 86 PID 1028 wrote to memory of 3988 1028 FridayNightFappin.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\PC_FridayNightFappin\FridayNightFappin.exe"C:\Users\Admin\AppData\Local\Temp\PC_FridayNightFappin\FridayNightFappin.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1028 -
C:\Users\Admin\AppData\Local\Temp\PC_FridayNightFappin\UnityCrashHandler32.exe"C:\Users\Admin\AppData\Local\Temp\PC_FridayNightFappin\UnityCrashHandler32.exe" --attach 1028 514498562⤵PID:3988
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f0 0x3101⤵
- Suspicious use of AdjustPrivilegeToken
PID:3592
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84B
MD525b251afaf3523867a0b67ddc5248a27
SHA16e74a76a882758df6f32cbde8a1af8ecefdcff99
SHA256ae8a1e78cbd59d48396818b10f0ef6620893ce2227331cd98b511337a170d556
SHA512dcc5e3180cc241a5471ea11b14764d13aa29d8c7ddcf9dcf5acbee0911e1c431eeebfaa7e6915afcbc9005cac8ea1b2546bbbf10c119ae1eff75f474a8635379