796c19c8a7db21c52c9fc97dcbeee2fa9167b60b009558f8ba2d87208780e348

Submit
Reports

Overview

overview

Static

static

FRASKEY BY...che.py

windows7-x64

FRASKEY BY...che.py

windows10-2004-x64

FRASKEY BY...che.py

windows7-x64

FRASKEY BY...che.py

windows10-2004-x64

FRASKEY BY...t__.py

windows7-x64

FRASKEY BY...t__.py

windows10-2004-x64

FRASKEY BY...yc.pyc

windows7-x64

FRASKEY BY...yc.pyc

windows10-2004-x64

FRASKEY BY...me.dll

windows7-x64

FRASKEY BY...me.dll

windows10-2004-x64

FRASKEY BY...er.exe

windows7-x64

FRASKEY BY...er.exe

windows10-2004-x64

FRASKEY BY...in.exe

windows7-x64

FRASKEY BY...in.exe

windows10-2004-x64

FRASKEY BY...che.py

windows7-x64

FRASKEY BY...che.py

windows10-2004-x64

FRASKEY BY...che.py

windows7-x64

FRASKEY BY...che.py

windows10-2004-x64

FRASKEY BY...t__.py

windows7-x64

FRASKEY BY...t__.py

windows10-2004-x64

FRASKEY BY...11.pyc

windows7-x64

FRASKEY BY...11.pyc

windows10-2004-x64

FRASKEY BY...me.dll

windows7-x64

FRASKEY BY...me.dll

windows10-2004-x64

FRASKEY BY...er.exe

windows7-x64

FRASKEY BY...er.exe

windows10-2004-x64

FRASKEY BY...in.exe

windows7-x64

FRASKEY BY...in.exe

windows10-2004-x64

Analysis

max time kernel
120s
max time network
134s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
01-11-2023 02:55

Sharing

Copy URL

Twitter E-mail

Static task

static1

pyinstaller

2 signatures

Behavioral task

behavioral1

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/cache.py

Resource

win7-20231020-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/cache.py

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/cache.py

Resource

win7-20231020-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/cache.py

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/__init__.py

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/__init__.py

Resource

win10v2004-20231020-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/__pyc.pyc

Resource

win7-20231025-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/__pyc.pyc

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/pyarmor_runtime.dll

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/pyarmor_runtime.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/updater.exe

Resource

win7-20231020-en

spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/updater.exe

Resource

win10v2004-20231023-en

spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/main.exe

Resource

win7-20231020-en

upx

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/main.exe

Resource

win10v2004-20231020-en

spyware stealer upx

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral15

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/cache.py

Resource

win7-20231025-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/cache.py

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/cache.py

Resource

win7-20231020-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/cache.py

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/__init__.py

Resource

win7-20231020-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/__init__.py

Resource

win10v2004-20231020-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/__pycache__/__init__.cpython-311.pyc

Resource

win7-20231025-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/__pycache__/__init__.cpython-311.pyc

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/pyarmor_runtime.dll

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/pyarmor_runtime.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/updater.exe

Resource

win7-20231023-en

spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

FRASKEY BYFRON BYPASS/library/pycache/cached/dist/updater.exe

Resource

win10v2004-20231020-en

spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral27

Sample

FRASKEY BYFRON BYPASS/main.exe

Resource

win7-20231025-en

upx

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

FRASKEY BYFRON BYPASS/main.exe

Resource

win10v2004-20231020-en

spyware stealer upx

windows10-2004-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

FRASKEY BYFRON BYPASS/FRASKEY BYFRON BYPASS/library/pycache/cached/dist/pyarmor_runtime_000000/pyarmor_runtime.dll
Size

600KB
MD5

67f4b04512bb06cd50af541cd3e07ad0
SHA1

a4913e74341253971fcdd131c252290bcb408ff5
SHA256

26b332a94abb30b455884aa9205cabc8a1078d2b486af5f0095c875ff46ee3be
SHA512

13d99b3d23d1072884242980406a4b2657ba1ccb7fdad868ebdb264398852f10c99324dabf18d50be2dc5a300dc27124c46416deae6fdbc6b24e41497710e732
SSDEEP

12288:3QlwFgoOcOwdc+7fUoPkjUOWgnE7v61s:30cOwdc+7fUoPkjUOWgnqy

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\FRASKEY BYFRON BYPASS\FRASKEY BYFRON BYPASS\library\pycache\cached\dist\pyarmor_runtime_000000\pyarmor_runtime.dll",#1
1⤵
PID:2636

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads