Overview
overview
7Static
static
7FRPFILE AI....8.exe
windows7-x64
7FRPFILE AI....8.exe
windows10-2004-x64
7FRPFILE AI...IO.dll
windows7-x64
1FRPFILE AI...IO.dll
windows10-2004-x64
1FRPFILE AI...bypass
macos-10.15-amd64
1FRPFILE AI...ypass1
macos-10.15-amd64
1FRPFILE AI...ypass2
macos-10.15-amd64
4FRPFILE AI.../erase
macos-10.15-amd64
1FRPFILE AI...se.dll
macos-10.15-amd64
4FRPFILE AI...estart
macos-10.15-amd64
1FRPFILE AI...f/lzma
macos-10.15-amd64
1FRPFILE AI...ileact
ubuntu-18.04-amd64
1FRPFILE AI...ileact
debian-9-armhf
1FRPFILE AI...ileact
debian-9-mips
FRPFILE AI...ileact
debian-9-mipsel
FRPFILE AI...ct1247
ubuntu-18.04-amd64
6FRPFILE AI...ct1247
debian-9-armhf
1FRPFILE AI...ct1247
debian-9-mips
FRPFILE AI...ct1247
debian-9-mipsel
FRPFILE AI...f/mon2
macos-10.15-amd64
4FRPFILE AI...plutil
macos-10.15-amd64
1FRPFILE AI....dylib
macos-10.15-amd64
4FRPFILE AI...32.dll
windows7-x64
1FRPFILE AI...32.dll
windows10-2004-x64
1FRPFILE AI...32.dll
windows7-x64
1FRPFILE AI...32.dll
windows10-2004-x64
1FRPFILE AI...z2.dll
windows7-x64
1FRPFILE AI...z2.dll
windows10-2004-x64
1FRPFILE AI...pt.dll
windows7-x64
1FRPFILE AI...pt.dll
windows10-2004-x64
1FRPFILE AI...id.exe
windows7-x64
1FRPFILE AI...id.exe
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
120s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
05-05-2024 01:31
Behavioral task
behavioral1
Sample
FRPFILE AIO v2.8.4/FRPFILE AIO v2.8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
FRPFILE AIO v2.8.4/FRPFILE AIO v2.8.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
FRPFILE AIO v2.8.4/FRPFILE AIO.dll
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
FRPFILE AIO v2.8.4/FRPFILE AIO.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
FRPFILE AIO v2.8.4/ref/bypass
Resource
macos-20240410-en
Behavioral task
behavioral6
Sample
FRPFILE AIO v2.8.4/ref/bypass1
Resource
macos-20240410-en
Behavioral task
behavioral7
Sample
FRPFILE AIO v2.8.4/ref/bypass2
Resource
macos-20240410-en
Behavioral task
behavioral8
Sample
FRPFILE AIO v2.8.4/ref/erase
Resource
macos-20240410-en
Behavioral task
behavioral9
Sample
FRPFILE AIO v2.8.4/ref/erase.dll
Resource
macos-20240410-en
Behavioral task
behavioral10
Sample
FRPFILE AIO v2.8.4/ref/ldrestart
Resource
macos-20240410-en
Behavioral task
behavioral11
Sample
FRPFILE AIO v2.8.4/ref/lzma
Resource
macos-20240410-en
Behavioral task
behavioral12
Sample
FRPFILE AIO v2.8.4/ref/mobileact
Resource
ubuntu1804-amd64-20240418-en
Behavioral task
behavioral13
Sample
FRPFILE AIO v2.8.4/ref/mobileact
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral14
Sample
FRPFILE AIO v2.8.4/ref/mobileact
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral15
Sample
FRPFILE AIO v2.8.4/ref/mobileact
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral16
Sample
FRPFILE AIO v2.8.4/ref/mobileact1247
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral17
Sample
FRPFILE AIO v2.8.4/ref/mobileact1247
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral18
Sample
FRPFILE AIO v2.8.4/ref/mobileact1247
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral19
Sample
FRPFILE AIO v2.8.4/ref/mobileact1247
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral20
Sample
FRPFILE AIO v2.8.4/ref/mon2
Resource
macos-20240410-en
Behavioral task
behavioral21
Sample
FRPFILE AIO v2.8.4/ref/plutil
Resource
macos-20240410-en
Behavioral task
behavioral22
Sample
FRPFILE AIO v2.8.4/ref/untethered.dylib
Resource
macos-20240410-en
Behavioral task
behavioral23
Sample
FRPFILE AIO v2.8.4/ref/win-x64/LIBEAY32.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
FRPFILE AIO v2.8.4/ref/win-x64/LIBEAY32.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
FRPFILE AIO v2.8.4/ref/win-x64/SSLEAY32.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
FRPFILE AIO v2.8.4/ref/win-x64/SSLEAY32.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
FRPFILE AIO v2.8.4/ref/win-x64/bz2.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
FRPFILE AIO v2.8.4/ref/win-x64/bz2.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral29
Sample
FRPFILE AIO v2.8.4/ref/win-x64/getopt.dll
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
FRPFILE AIO v2.8.4/ref/win-x64/getopt.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral31
Sample
FRPFILE AIO v2.8.4/ref/win-x64/idevice_id.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
FRPFILE AIO v2.8.4/ref/win-x64/idevice_id.exe
Resource
win10v2004-20240226-en
General
-
Target
FRPFILE AIO v2.8.4/ref/plutil
-
Size
141KB
-
MD5
1aec5358ca4cd37561b36b27f47ad121
-
SHA1
f3331a70172da038ac82506e407c472e3b7815b3
-
SHA256
06a34463a82c9444df7c4cae46174bb9a34d2fa7d92cc807928e544c4cd02efb
-
SHA512
110c9431b10bed3ad71a311d84ccd253f51ef5cb4526e8ffadf54f152597e292e1f79612dcbe86df7642641bd297be04de4c55d8d13cf9d6d9b83d822efc96a1
-
SSDEEP
3072:zXZBMbqcduT8q6kKWyyWnf7ClG3nvIETVG:jbvAdkJ/Wnf7QQ
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/FRPFILE AIO v2.8.4/ref/plutil\""1⤵
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/FRPFILE AIO v2.8.4/ref/plutil\""1⤵
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/FRPFILE AIO v2.8.4/ref/plutil"1⤵
-
/bin/zsh/bin/zsh -c "/Users/run/FRPFILE AIO v2.8.4/ref/plutil"2⤵
-
/Users/run/FRPFILE/Users/run/FRPFILE AIO v2.8.4/ref/plutil2⤵