Overview

overview

4

Static

static

3

FrenniFazc...eAlpha

ubuntu-18.04-amd64

4

FrenniFazc...hon.so

ubuntu-18.04-amd64

1

FrenniFazc...python

ubuntu-18.04-amd64

1

FrenniFazc...ythonw

ubuntu-18.04-amd64

1

FrenniFazc.../zsync

ubuntu-18.04-amd64

1

FrenniFazc...ncmake

ubuntu-18.04-amd64

1

FrenniFazc...47.dll

windows10-2004-x64

1

FrenniFazc...GL.dll

windows7-x64

1

FrenniFazc...GL.dll

windows10-2004-x64

1

FrenniFazc...v2.dll

windows7-x64

1

FrenniFazc...v2.dll

windows10-2004-x64

1

FrenniFazc....9.dll

windows7-x64

1

FrenniFazc....9.dll

windows10-2004-x64

1

FrenniFazc...on.dll

windows7-x64

1

FrenniFazc...on.dll

windows10-2004-x64

1

FrenniFazc...-1.dll

windows7-x64

1

FrenniFazc...-1.dll

windows10-2004-x64

1

FrenniFazc...rs.dll

windows7-x64

1

FrenniFazc...rs.dll

windows10-2004-x64

1

FrenniFazc...on.exe

windows7-x64

1

FrenniFazc...on.exe

windows10-2004-x64

1

FrenniFazc...nw.exe

windows7-x64

1

FrenniFazc...nw.exe

windows10-2004-x64

1

FrenniFazc...ay.vbs

windows7-x64

1

FrenniFazc...ay.vbs

windows10-2004-x64

1

FrenniFazc...nc.exe

windows7-x64

1

FrenniFazc...nc.exe

windows10-2004-x64

1

FrenniFazc...ke.exe

windows7-x64

1

FrenniFazc...ke.exe

windows10-2004-x64

1

FrenniFazc...__.pyc

windows7-x64

3

FrenniFazc...__.pyc

windows10-2004-x64

3

FrenniFazc...le.pyc

windows7-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FrenniFazclaireAlpha-0.3.1-pc.zip

  • Size

    349.7MB

  • Sample

    240517-yg9wgsfh25

  • MD5

    593d30f0381d5e89be09308626818170

  • SHA1

    a4d11c4551a579f66c4c6c88387d1b0320bcb356

  • SHA256

    73b06276c6ffc3658374d06065619590a1b9fd7a0c77fa1ce03e7fcb97b3ee8a

  • SHA512

    6912b009cc5503b12d994912b22b7294de85f6f92c0a2f42b8697f6eb13e588d51cc11dcefa382f4460c78676a798840ca52dc418cd463a6d7d4d61f342b0e5b

  • SSDEEP

    6291456:vv1O2CSiDpKTxWLtGNOORrkZcJSFXEdEY+8NyFv0MRtxSnLkrKFZwPwwhIC1NNye:pCSiDpKTwLtG1Rrq+6XEdEYTc0iaL1Xm

Score
4/10
antivmlinux

Malware Config

Targets

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-linux-x86_64/FrenniFazclaireAlpha

    • Size

      5KB

    • MD5

      541e5398c07e73dd738a6924bc65df45

    • SHA1

      4b23c3839dfaa419cab9268653c831e21a00c9eb

    • SHA256

      590d234571b9ae42ede2a43df44b6ef530d2840c61546fc948f4f746176680c1

    • SHA512

      fe18d47a9f22b99435c69ac0242899fb73fc90dad7ca03ac38fbcd6f4b2f81f7d4d047c767f907438c7fed3a0cc248a35a6d28e5a05d979ee2188f01043730ca

    • SSDEEP

      96:Ru2T8eVnMBWBPUcpMR9mA0V1S0SKg4EkfclcKEY5A:RBob8pUcpG0VLSn4e

    Score
    4/10
    antivm
    behavioral1

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-linux-x86_64/librenpython.so

    • Size

      29.8MB

    • MD5

      79b4c4f33cf5ba4171eedce463fcdab6

    • SHA1

      fd09dcd24ea4e3984dd6f869485e3ffdae2b0dfe

    • SHA256

      28f5a019ac005fca734286a010d77077ca407a0324e173abfd69c2c08e875cd9

    • SHA512

      261bb97b2ebdf719d347813c0ad30f337ebae2f8123648d8bb9f9a75c017e1aa982432ec216684ad584600663863eb4c955efed95020fce6d2064d4102d2fffd

    • SSDEEP

      393216:XBv3uFJeNCPwfpYuz+ooKXk0CaW0eDpcrXH:RLbk0deDpcjH

    Score
    1/10
    behavioral2

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-linux-x86_64/python

    • Size

      5KB

    • MD5

      38824d862966195121486cfa70a998a2

    • SHA1

      532b11579df73a2b21e5ee76c52b0c8a68d5dce0

    • SHA256

      7bb681352218369a500d272b1e0cc57859cbd5e91457322859de0206df16cd4a

    • SHA512

      96489ffb3ad8a23c2bc3188b0bf7e265f13fe6502bd2899cd3512fafe595cb7bbfcd911a2f5cf7d761accef98d152023b57e2731aa6eb26a79e9d524d500fa3b

    • SSDEEP

      96:Ru2To0nMBWBPzUpMR9mA0V1SoKg4E5fclcKEY5A:RB0Z8pzUpG0Vln4J

    Score
    1/10
    behavioral3

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-linux-x86_64/pythonw

    • Size

      5KB

    • MD5

      38824d862966195121486cfa70a998a2

    • SHA1

      532b11579df73a2b21e5ee76c52b0c8a68d5dce0

    • SHA256

      7bb681352218369a500d272b1e0cc57859cbd5e91457322859de0206df16cd4a

    • SHA512

      96489ffb3ad8a23c2bc3188b0bf7e265f13fe6502bd2899cd3512fafe595cb7bbfcd911a2f5cf7d761accef98d152023b57e2731aa6eb26a79e9d524d500fa3b

    • SSDEEP

      96:Ru2To0nMBWBPzUpMR9mA0V1SoKg4E5fclcKEY5A:RB0Z8pzUpG0Vln4J

    Score
    1/10
    behavioral4

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-linux-x86_64/zsync

    • Size

      102KB

    • MD5

      5e16f6c9648873add7a33b09100c7103

    • SHA1

      128b0547e4eab24aa99b96c9d0aaa8beca8c379c

    • SHA256

      a01ee497d6008cbefb856c2c1e6b558844a87604e1b5be62dc31feb463c49fbe

    • SHA512

      a241eaac956a9a18a9580110a6d7b608009fb199043a4bcb31e807c0042bf23ff25f727eda996d0ebd920060c69347978c68da660634ad29d37b5c23c7c7bbd1

    • SSDEEP

      1536:OZucIOiL/a36A0ItFH++bMlVcD4G2lh1g+brKTwCSPxoP/aENwrJ:8uSimqEtbwlVs4Geh6nTdP/aEk

    Score
    1/10
    behavioral5

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-linux-x86_64/zsyncmake

    • Size

      102KB

    • MD5

      daaa4f4ba07aee24afca4598e7f0f631

    • SHA1

      2ae6db7f04d416e07197579364096b47e32d52c8

    • SHA256

      2ee3a9c3ec5d76de5f140c499d8890855feb6470af6089262716285d42990666

    • SHA512

      bf5fa270fce6c03fb9ae2a0cab6334cbf376024ba83f35335805f21fda37daeb01cae36d19271f7778f37910fdbc030373b4a47f131a722a80305d6088f062ee

    • SSDEEP

      1536:AmGDIOiL/a36A0ItFH+YxrDNChL+nwOqPgoP/1EKuI7hpaNCW1lAp7D:BGlimqEtZxrMhL+n4P/1E67hp7

    Score
    1/10
    behavioral6

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll

    • Size

      4.3MB

    • MD5

      7641e39b7da4077084d2afe7c31032e0

    • SHA1

      2256644f69435ff2fee76deb04d918083960d1eb

    • SHA256

      44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

    • SHA512

      8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

    • SSDEEP

      49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt

    Score
    1/10
    behavioral7

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/libEGL.dll

    • Size

      436KB

    • MD5

      1090bf4c5495697a1416cd77481cf7d0

    • SHA1

      94452eed4fa88dcb0a5b3c503a12f3a3b5f23ee8

    • SHA256

      b20c1e14e42da55c13dad3c23a5060ca086eaf5b18b12ef5c60cd7e80276a9f2

    • SHA512

      d205dd98260d033300afe3f2a1c0c06f3bfbf158067fc3290e10ddf6f51eb80b57af56fb0e75a56b82dc3ec49190c5d2c296aa548b64e39b4b004f60a7da89a6

    • SSDEEP

      6144:CrHQz/GL44uCWgSqTpyGRxyB5EdpmMB6cm+p4HRw0FlA1Qu4P:uudhGDyB5Xa4HRw0FlCQ

    Score
    1/10
    behavioral8behavioral9

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/libGLESv2.dll

    • Size

      6.3MB

    • MD5

      7dde909bd5c7538ac46064741a8da6c0

    • SHA1

      46b50003be83eab7e0c48ebbd9260b5b021e70eb

    • SHA256

      2d171e91e1fe7205b76dd69ba9f7ddce7910283a5a5111c09c84f5db8c795a74

    • SHA512

      a057586a0b566c5470a6508e27764f9662ceaf3b08244c3db3d1e07789e87a30a43f1daad0274a4e3d00b641d3f9f90e9c073a5f7db3fa6d1de7f45c33adc092

    • SSDEEP

      98304:1DACC5v8sHfvlfkvghk3xlkihzsfFUQOJt6c:CvxkvgfyoiQOR

    Score
    1/10
    behavioral10behavioral11

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/libpython3.9.dll

    • Size

      8.3MB

    • MD5

      8e862875cf5bf9de8e8e091a5cf810df

    • SHA1

      e57830874833cf5d222fe8feb7fc2886e94307eb

    • SHA256

      798ee42f93433554124426517cbb727408f2b14b737f857ba69af6e6399e3dc6

    • SHA512

      dc5dea7d6e69bbb683516e876ccac60aaf5e4fd4a55ac256c668dae0ed87213bc217100936b1351deb8ca467d2e091fb3fcf149e8e0d9069361e87d80d7937e7

    • SSDEEP

      98304:qtc5Q2orymbu3VOVwaAv01wgeYUXO7dPlMBLa2THxM/UZdLZwhsdzj3+opm9g0vE:ycfojhVU0ZR/hhsR3+opm9g0vHF

    Score
    1/10
    behavioral12behavioral13

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/librenpython.dll

    • Size

      20.5MB

    • MD5

      bb3d6c96a64c6ba905e81970ea1baecb

    • SHA1

      687c3a91c8d6015b80e1eee95a5c7e8091214906

    • SHA256

      0164b0bfbc8221c9732c77310da004bf2956891ee6db7b37c7305ebe7e7205e4

    • SHA512

      ecb7670a257da44282ac31f4dbb293ac47bf902e8ef40f6b2a69be2b6665949806b7b88d67ace271687b5d14ec21a56575a8069fe444a6034acf660d2b9bd436

    • SSDEEP

      196608:uI1TKBGdqLDW9DiVuOUY3RedZH8AGfLd0KDoSpMo:uKTKBGdqLDEDihRRARGfx0Km

    Score
    1/10
    behavioral14behavioral15

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

    • Size

      344KB

    • MD5

      da67da022bbc1bb9409e3328c1cb64e1

    • SHA1

      e1fd29f4256d7066f05d113cb8e96e1aebaa38e7

    • SHA256

      00d784e7e002c1b01f3146c87f30030f169843988f87c9631cb2df211979286b

    • SHA512

      24ba4936ff149f0875b3e4c7e36e80f941130faccd4d6296d68c8af8b0e647c37d0822d477218ab0b3d4b51f24cd1dfa1ace54adfbd175d122036c3a7e787ebf

    • SSDEEP

      6144:Wo14rtZLc1fPm3YjZxgMOKSjkPDNjYBlplydMofn6cHqq85l:Wo14r/cBPm3Yg8SjoYvplydMofRHqq85

    Score
    1/10
    behavioral16behavioral17

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/nvdrs.dll

    • Size

      14KB

    • MD5

      f3ae6475b566e0b74673dccaab9128fe

    • SHA1

      c8e4b111268d5e4b5a87aa46f71f3b70b939dd24

    • SHA256

      82728d3cf77477327082b5a6a14319c71b741e6f55f4455ed9bc8d318f56e7cf

    • SHA512

      f91384a1d687efc5dbc52d77bdd93a04a5bc0430cea3771658ee8b96a693c7ab521b84b9cb4a39e1e97b703e5e3d173647bb426af850cefbc45d1233fcd519dd

    • SSDEEP

      192:GKFj3Az2SjQ0bnUdPIPKPpCxeELcNiTw/dUfYa2GzEfw9vxQ:GKejQ07KPUKueELcNiM/dyDzCw9v2

    Score
    1/10
    behavioral18behavioral19

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/python.exe

    • Size

      101KB

    • MD5

      fd4528621cf9a1c16d53f92897a80bdd

    • SHA1

      1f2111c56de549e6c44f08ae8a44fe72cf76f6d0

    • SHA256

      56ce71ab497b17399c6d850c58ea18d047153605318cf81a1a2d93ef4a104518

    • SHA512

      50120a39be641512eeeefbe14313c3b14803ffc4a8b7704456263471be0c49fa8e23c9ac42c344e6c6d04248447f0016e748851fcab7c0a85deed89f463788d2

    • SSDEEP

      3072:uO83Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:vKQ+IFCumUGekHRvEuO3go9kfnQ

    Score
    1/10
    behavioral20behavioral21

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/pythonw.exe

    • Size

      193KB

    • MD5

      0962414394e3914798e8b78a2a36830a

    • SHA1

      8f149f2606dc5b0d384d84b4e811083b15223630

    • SHA256

      870f91b6011ccb575ec4a7951e3deaf854c5e05ea3ba4d07c930669069c0f0ed

    • SHA512

      0cb4640a794e59f9e72b2389550504be9e636437a5d0fef70da26d8951cfbc24601961178c9f07205f5fdf9d23feedf90192bbd43c7843a4c024d574384f95e6

    • SSDEEP

      768:vAyAub1/ssuV7NH6m7N8YHtZGXmfqseUa6YpV3iAe9k+pV95vNweuhkt5xM6RxVm:vxqJtGzJfoaY5PaHwK+6RRc+

    Score
    1/10
    behavioral22behavioral23

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/say.vbs

    • Size

      336B

    • MD5

      2bb7b68da76cd3be900723983a819069

    • SHA1

      8e3accc0203b203e514107f610cf4bca1a174434

    • SHA256

      b253baadc1fbdaffad5ea232080cc731c262779e8d256e8a57f7eb5a684a1640

    • SHA512

      674b3eb9b09fc8957a7a90239270bda61d6e7de14fe9df9a2a25ddda9f36e952046c7f5e755d56f81033157dd699d19c89a2b8940a30ab10d131baacff842e03

    Score
    1/10
    behavioral24behavioral25

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/zsync.exe

    • Size

      92KB

    • MD5

      2e9d3dc697a2e1fc5c5be1f7e04508dd

    • SHA1

      0f72289874472de314aecefeb5457812f1c72481

    • SHA256

      dbc39d1d4ddc8c744e7840a294f906920c532adc0dc9e69f7664a91b55b2ff77

    • SHA512

      d938a7d94c869b3b67c70d016b10c6a3c79fc3e928f3471a829b925041feb192f2f4d77993cd450d8246e0a4eec94f2275fd44ffbb931e15a5f9e74624dc0d16

    • SSDEEP

      1536:/9yPhoPyrELhNx4xKM87bsp9G8e5VuSYJadGo7/TjX3DvrnAvp3ITPvsXXlgpoIW:KEL+kM87QpRKuSGI/TjX3DvrnAvp3ITn

    Score
    1/10
    behavioral26behavioral27

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/zsyncmake.exe

    • Size

      91KB

    • MD5

      ac2119ef9d738e1a3b7f83c40616a238

    • SHA1

      d3f4e1675e39318e3ad9fa62b1144da637617234

    • SHA256

      bb9c90f996a54a6c697f41a7897eb924e90e18a07746b612bcb5e034892f260f

    • SHA512

      f1274568f646ed807e01268f01407349f4b7d3be3ddc5bea29d44bc260847e6a45017809406632f65fbca25d3c7a96438356bf41b3c71f0f9360e85fd091ada5

    • SSDEEP

      1536:4bjZoLhn7LOuW35VgkJFNqGTfJUM8EoqUxvr7fYnPHv3jz/jDnTnbPr7Hf/TLzAJ:4/eLpW/gS/BUM8EIvr7fYnPHv3jz/jDo

    Score
    1/10
    behavioral28behavioral29

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/python3.9/__future__.pyc

    • Size

      4KB

    • MD5

      08d42ce57d4c079f976050586d0d44bc

    • SHA1

      d22d35f0a1d95ffbfda38385ba64b2686eeb159f

    • SHA256

      58e9d4577a45e253caf95fee0d446581b0caf0a3d3b08f4ab09868c56e53d264

    • SHA512

      ea428d0e6240337bc30e4110481b955db2deee23a3afa981f894dd13c3cb0194def39f60572fd549f1882521e02ed44d98448f86f718706f5d5a488f9b405376

    • SSDEEP

      96:Sg1NzUuGd+P2sKNwW8D2j82xnCg8Q/Ks/qN+Bj0ui:n4BRd8D1YCM/KsSN+Bj0ui

    Score
    3/10
    behavioral30behavioral31

    • Target

      FrenniFazclaireAlpha-0.3.1-pc/lib/python3.9/_bootlocale.pyc

    • Size

      1KB

    • MD5

      4f8d06162f243842f03e04b6db2ee50c

    • SHA1

      4ba516afd5116bdfa205df0cb883859000b23b53

    • SHA256

      633c8d3e3be06febfaa04682947fa9df0762780406d396b69931020420c4915b

    • SHA512

      cc1a89997a820a0aeee8ae301abbc17b95138b2ff7a6cb7a000fe005e419c7bd202339d4c4e85fc178edcbb131b378dfc4d7446079cff6d9a83af1bdd13e48b8

    Score
    3/10
    behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

4
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks