Overview

overview

4

Static

static

3

FrenniFazc...eAlpha

ubuntu-18.04-amd64

4

FrenniFazc...hon.so

ubuntu-18.04-amd64

1

FrenniFazc...python

ubuntu-18.04-amd64

1

FrenniFazc...ythonw

ubuntu-18.04-amd64

1

FrenniFazc.../zsync

ubuntu-18.04-amd64

1

FrenniFazc...ncmake

ubuntu-18.04-amd64

1

FrenniFazc...47.dll

windows10-2004-x64

1

FrenniFazc...GL.dll

windows7-x64

1

FrenniFazc...GL.dll

windows10-2004-x64

1

FrenniFazc...v2.dll

windows7-x64

1

FrenniFazc...v2.dll

windows10-2004-x64

1

FrenniFazc....9.dll

windows7-x64

1

FrenniFazc....9.dll

windows10-2004-x64

1

FrenniFazc...on.dll

windows7-x64

1

FrenniFazc...on.dll

windows10-2004-x64

1

FrenniFazc...-1.dll

windows7-x64

1

FrenniFazc...-1.dll

windows10-2004-x64

1

FrenniFazc...rs.dll

windows7-x64

1

FrenniFazc...rs.dll

windows10-2004-x64

1

FrenniFazc...on.exe

windows7-x64

1

FrenniFazc...on.exe

windows10-2004-x64

1

FrenniFazc...nw.exe

windows7-x64

1

FrenniFazc...nw.exe

windows10-2004-x64

1

FrenniFazc...ay.vbs

windows7-x64

1

FrenniFazc...ay.vbs

windows10-2004-x64

1

FrenniFazc...nc.exe

windows7-x64

1

FrenniFazc...nc.exe

windows10-2004-x64

1

FrenniFazc...ke.exe

windows7-x64

1

FrenniFazc...ke.exe

windows10-2004-x64

1

FrenniFazc...__.pyc

windows7-x64

3

FrenniFazc...__.pyc

windows10-2004-x64

3

FrenniFazc...le.pyc

windows7-x64

3

Analysis

  • max time kernel
    119s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17-05-2024 19:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    FrenniFazclaireAlpha-0.3.1-pc/lib/py3-windows-x86_64/libGLESv2.dll

  • Size

    6.3MB

  • MD5

    7dde909bd5c7538ac46064741a8da6c0

  • SHA1

    46b50003be83eab7e0c48ebbd9260b5b021e70eb

  • SHA256

    2d171e91e1fe7205b76dd69ba9f7ddce7910283a5a5111c09c84f5db8c795a74

  • SHA512

    a057586a0b566c5470a6508e27764f9662ceaf3b08244c3db3d1e07789e87a30a43f1daad0274a4e3d00b641d3f9f90e9c073a5f7db3fa6d1de7f45c33adc092

  • SSDEEP

    98304:1DACC5v8sHfvlfkvghk3xlkihzsfFUQOJt6c:CvxkvgfyoiQOR

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\FrenniFazclaireAlpha-0.3.1-pc\lib\py3-windows-x86_64\libGLESv2.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2400 -s 88
      2⤵
        PID:1952

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads