Overview
overview
3Static
static
3DECEMBER U...ot.dll
windows7-x64
1DECEMBER U...ot.dll
windows10-2004-x64
1DECEMBER U.../g.dll
ubuntu-18.04-amd64
DECEMBER U.../g.dll
debian-9-armhf
DECEMBER U.../g.dll
debian-9-mips
DECEMBER U.../g.dll
debian-9-mipsel
DECEMBER U.../g.dll
ubuntu-18.04-amd64
DECEMBER U.../g.dll
debian-9-armhf
DECEMBER U.../g.dll
debian-9-mips
DECEMBER U.../g.dll
debian-9-mipsel
DECEMBER U.../g.dll
ubuntu-18.04-amd64
DECEMBER U.../g.dll
debian-9-armhf
DECEMBER U.../g.dll
debian-9-mips
DECEMBER U.../g.dll
debian-9-mipsel
DECEMBER U.../g.dll
ubuntu-18.04-amd64
DECEMBER U.../g.dll
debian-9-armhf
DECEMBER U.../g.dll
debian-9-mips
DECEMBER U.../g.dll
debian-9-mipsel
DECEMBER U...rol.so
ubuntu-18.04-amd64
DECEMBER U...rol.so
debian-9-armhf
DECEMBER U...rol.so
debian-9-mips
DECEMBER U...rol.so
debian-9-mipsel
DECEMBER U...lay.so
ubuntu-18.04-amd64
DECEMBER U...lay.so
debian-9-armhf
DECEMBER U...lay.so
debian-9-mips
DECEMBER U...lay.so
debian-9-mipsel
DECEMBER U...azy.so
ubuntu-18.04-amd64
DECEMBER U...azy.so
debian-9-armhf
DECEMBER U...azy.so
debian-9-mips
DECEMBER U...azy.so
debian-9-mipsel
DECEMBER U...qti.so
ubuntu-18.04-amd64
DECEMBER U...qti.so
debian-9-armhf
Static task
static1
Behavioral task
behavioral1
Sample
DECEMBER UPDATE 🥳/SystemConfig/HomingHeadShot.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
DECEMBER UPDATE 🥳/SystemConfig/HomingHeadShot.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral4
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral5
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral6
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-mipsel-20231222-en
Behavioral task
behavioral7
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral8
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral9
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral10
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral11
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral12
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral13
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral14
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral15
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral16
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral17
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral18
Sample
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/g.dll
Resource
debian9-mipsel-20231222-en
Behavioral task
behavioral19
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libjni_displayfeaturecontrol.so
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral20
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libjni_displayfeaturecontrol.so
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral21
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libjni_displayfeaturecontrol.so
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral22
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libjni_displayfeaturecontrol.so
Resource
debian9-mipsel-20231222-en
Behavioral task
behavioral23
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativedisplay.so
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral24
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativedisplay.so
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral25
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativedisplay.so
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral26
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativedisplay.so
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral27
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativeloader_lazy.so
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral28
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativeloader_lazy.so
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral29
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativeloader_lazy.so
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral30
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativeloader_lazy.so
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral31
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libsd_sdk_display.qti.so
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral32
Sample
DECEMBER UPDATE 🥳/android/sysconfig/lib/libsd_sdk_display.qti.so
Resource
debian9-armhf-20231215-en
General
-
Target
b2c41a971c55da6b917f35f5c889a0d77897f8fc850992b49bb86a9ace5e6798
-
Size
255KB
-
MD5
62ad8cea6d762bc4a806e3a1d4e1323e
-
SHA1
3a39f909c04ab9c59b3e219727d9ecfe11b8508a
-
SHA256
b2c41a971c55da6b917f35f5c889a0d77897f8fc850992b49bb86a9ace5e6798
-
SHA512
5cdf47bb2651c8dd3e270333a8b1f43a94fa5e95d840ae4ed9ee0aeaa8168d02df30af6b1ad9cb2be66b47b47fb41c23f7305c56f5662d90a47c2583bb6e4f12
-
SSDEEP
6144:kHMuSksv0mChxfX8HL+SY/gi/ogwnMlsO0Skdhc0b0eb:kHU7sV0SYgwnM/0LO0bH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DECEMBER UPDATE 🥳/SystemConfig/HomingHeadShot.dll
Files
-
b2c41a971c55da6b917f35f5c889a0d77897f8fc850992b49bb86a9ace5e6798.zip
-
DECEMBER UPDATE 🥳/SystemConfig/HomingHeadShot.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
DECEMBER UPDATE 🥳/SystemConfig/SystemAimlock
-
DECEMBER UPDATE 🥳/SystemConfig/accuracyTracker.cs
-
DECEMBER UPDATE 🥳/SystemConfig/androidSensor.gradle
-
DECEMBER UPDATE 🥳/SystemConfig/etc/versão do arquivo.sql
-
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/fileinfo
-
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/gameassetbundles/config/ConfigInternalData.dll.elf linux aarch64
-
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/gameassetbundles/config/ConfigPathData.dll.elf linux aarch64
-
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/gameassetbundles/config/cordinate.dll.elf linux aarch64
-
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/gameassetbundles/main/AimingHead.cpp
-
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/gameassetbundles/main/aimSens.cpp
-
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/gameassetbundles/main/cordinate.dll.elf linux aarch64
-
DECEMBER UPDATE 🥳/Virtual Data/Android/com.dts.freefireth/files/contentcache/Compulsory/android/versioninfo
-
DECEMBER UPDATE 🥳/android/android.hardware.sensitivity.conf
-
DECEMBER UPDATE 🥳/android/android.hardware.sensor.conf
-
DECEMBER UPDATE 🥳/android/android.hardware.touchscreen.multitouch.conf
-
DECEMBER UPDATE 🥳/android/sysconfig/android.qti.hardware.display.xml.xml
-
DECEMBER UPDATE 🥳/android/sysconfig/android.qti.hardware.rendering.xml.xml
-
DECEMBER UPDATE 🥳/android/sysconfig/lib/libjni_displayfeaturecontrol.so.elf linux aarch64
-
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativedisplay.so.elf linux aarch64
-
DECEMBER UPDATE 🥳/android/sysconfig/lib/libnativeloader_lazy.so.elf linux aarch64
-
DECEMBER UPDATE 🥳/android/sysconfig/lib/libsd_sdk_display.qti.so.elf linux aarch64
-
DECEMBER UPDATE 🥳/system/NOTICE.o.gz.gz
-
NOTICE.o.lib
-
DECEMBER UPDATE 🥳/system/system/com.qti.snapdragon.sdk.display.dll.elf linux aarch64
-
DECEMBER UPDATE 🥳/system/system/init.qti.display.dll.elf linux aarch64