Overview

overview

7

Static

static

7

FRPFILE AI....8.exe

windows7-x64

7

FRPFILE AI....8.exe

windows10-2004-x64

7

FRPFILE AI...IO.dll

windows7-x64

1

FRPFILE AI...IO.dll

windows10-2004-x64

1

FRPFILE AI...bypass

macos-10.15-amd64

1

FRPFILE AI...ypass1

macos-10.15-amd64

1

FRPFILE AI...ypass2

macos-10.15-amd64

4

FRPFILE AI.../erase

macos-10.15-amd64

1

FRPFILE AI...se.dll

macos-10.15-amd64

4

FRPFILE AI...estart

macos-10.15-amd64

1

FRPFILE AI...f/lzma

macos-10.15-amd64

1

FRPFILE AI...ileact

ubuntu-18.04-amd64

1

FRPFILE AI...ileact

debian-9-armhf

1

FRPFILE AI...ileact

debian-9-mips

FRPFILE AI...ileact

debian-9-mipsel

FRPFILE AI...ct1247

ubuntu-18.04-amd64

6

FRPFILE AI...ct1247

debian-9-armhf

1

FRPFILE AI...ct1247

debian-9-mips

FRPFILE AI...ct1247

debian-9-mipsel

FRPFILE AI...f/mon2

macos-10.15-amd64

4

FRPFILE AI...plutil

macos-10.15-amd64

1

FRPFILE AI....dylib

macos-10.15-amd64

4

FRPFILE AI...32.dll

windows7-x64

1

FRPFILE AI...32.dll

windows10-2004-x64

1

FRPFILE AI...32.dll

windows7-x64

1

FRPFILE AI...32.dll

windows10-2004-x64

1

FRPFILE AI...z2.dll

windows7-x64

1

FRPFILE AI...z2.dll

windows10-2004-x64

1

FRPFILE AI...pt.dll

windows7-x64

1

FRPFILE AI...pt.dll

windows10-2004-x64

1

FRPFILE AI...id.exe

windows7-x64

1

FRPFILE AI...id.exe

windows10-2004-x64

1

Resubmissions

03/08/2026, 13:45

260803-q2g27s1bjg

03/08/2026, 13:30

260803-qrt9saac56

05/05/2024, 01:31

240505-bxc55adf277

Analysis

  • max time kernel
    162s
  • max time network
    174s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/05/2024, 01:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FRPFILE AIO v2.8.4/FRPFILE AIO v2.8.exe
  • Size 3.6MB
  • Sample240505-bxc55adf27
  • SHA256 9810adae2ead6fdcbb3560f8eb4eb4ae2e41ba3757fb5afbabcf9426f2b7f72d
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
agilenet

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet

Processes

  • C:\Users\Admin\AppData\Local\Temp\FRPFILE AIO v2.8.4\FRPFILE AIO v2.8.exe
    "C:\Users\Admin\AppData\Local\Temp\FRPFILE AIO v2.8.4\FRPFILE AIO v2.8.exe"
    1⤵
    • Loads dropped DLL
    PID:3484
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3948 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:1740

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          AgileDotNetRT.dll
          • Path C:\Users\Admin\AppData\Local\Temp\fdc0f96d-9124-4adc-ac3d-8831860e8023\AgileDotNetRT.dll
          • Size 94KB
          • SHA256 fb9646cb956945bdc503e69645f6b5316d3826b780d3c36738d6b944e884d15b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          memory/3484-14-0x0000000006490000-0x0000000006522000-memory.dmp
          Download

          memory/3484-16-0x0000000006420000-0x000000000642A000-memory.dmp
          Download

          memory/3484-3-0x0000000005E40000-0x00000000063E4000-memory.dmp
          Download

          memory/3484-1-0x0000000000840000-0x0000000000BE0000-memory.dmp
          Download

          memory/3484-11-0x00000000737A0000-0x0000000073829000-memory.dmp
          Download

          memory/3484-12-0x0000000005B00000-0x0000000005E42000-memory.dmp
          Download

          memory/3484-2-0x0000000074D90000-0x0000000075540000-memory.dmp
          Download

          memory/3484-13-0x0000000002F30000-0x0000000002F8C000-memory.dmp
          Download

          memory/3484-15-0x0000000006530000-0x00000000065FA000-memory.dmp
          Download

          memory/3484-0-0x0000000074D9E000-0x0000000074D9F000-memory.dmp
          Download

          memory/3484-17-0x0000000007220000-0x00000000072CA000-memory.dmp
          Download

          memory/3484-18-0x0000000074D90000-0x0000000075540000-memory.dmp
          Download

          memory/3484-19-0x0000000008EF0000-0x0000000009244000-memory.dmp
          Download

          memory/3484-20-0x00000000093E0000-0x00000000093F4000-memory.dmp
          Download

          memory/3484-21-0x0000000009410000-0x000000000942A000-memory.dmp
          Download

          memory/3484-23-0x0000000074D90000-0x0000000075540000-memory.dmp
          Download