Overview

overview

4

Static

static

4

freshwomen...hWomen

ubuntu-18.04-amd64

4

freshwomen...hon.so

ubuntu-20.04-amd64

1

freshwomen...api.so

ubuntu-18.04-amd64

1

freshwomen...python

ubuntu-18.04-amd64

3

freshwomen...ythonw

ubuntu-18.04-amd64

3

freshwomen.../zsync

ubuntu-18.04-amd64

1

freshwomen...ncmake

ubuntu-18.04-amd64

1

freshwomen...47.dll

windows10-2004-x64

1

freshwomen...GL.dll

windows7-x64

1

freshwomen...GL.dll

windows10-2004-x64

1

freshwomen...v2.dll

windows7-x64

1

freshwomen...v2.dll

windows10-2004-x64

1

freshwomen....7.dll

windows7-x64

1

freshwomen....7.dll

windows10-2004-x64

1

freshwomen...on.dll

windows7-x64

1

freshwomen...on.dll

windows10-2004-x64

1

freshwomen...rs.dll

windows7-x64

1

freshwomen...rs.dll

windows10-2004-x64

1

freshwomen...on.exe

windows7-x64

1

freshwomen...on.exe

windows10-2004-x64

1

freshwomen...nw.exe

windows7-x64

1

freshwomen...nw.exe

windows10-2004-x64

1

freshwomen...ay.vbs

windows7-x64

1

freshwomen...ay.vbs

windows10-2004-x64

1

freshwomen...64.dll

windows7-x64

1

freshwomen...64.dll

windows10-2004-x64

1

freshwomen...nc.exe

windows7-x64

1

freshwomen...nc.exe

windows10-2004-x64

1

freshwomen...ke.exe

windows7-x64

1

freshwomen...ke.exe

windows10-2004-x64

1

freshwomen...er.pyo

windows7-x64

3

freshwomen...er.pyo

windows10-2004-x64

3

Analysis

  • max time kernel
    142s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 23:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    freshwomen-season-2-episode-2-part-3-pc-720p-compressed/lib/py2-windows-x86_64/libpython2.7.dll

  • Size

    5.9MB

  • MD5

    94218ae6dbab7d5b68fb54ba02f90074

  • SHA1

    bb34dd790e1f5d098d994da5262d42175b63a151

  • SHA256

    9248d86679e1a2a95cb57fb9a95cff2aa7b6699c56ca454da7ae36442171ae99

  • SHA512

    566fe9b8aef783a521b969909511b0956d69743288a413c6f99145cbf9e19ff8a6468d4e905488a3c85e795facee18ac54d415d36df0b6f041e845a718a46931

  • SSDEEP

    98304:kVmEUPTY6VH0KVfYYLDx7qJY9qk7ohQIICeqaWL7hMeSEG0Q17pmEs0zkit0S42t:KIYef829q8eHG0KAS0S42hX

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\freshwomen-season-2-episode-2-part-3-pc-720p-compressed\lib\py2-windows-x86_64\libpython2.7.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1524
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1524 -s 148
      2⤵
        PID:1932

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1524-0-0x000007FEF5910000-0x000007FEF5F29000-memory.dmp
      Filesize

      6.1MB

      Download