Overview
overview
7Static
static
3Frost Laun...s.json
windows7-x64
3Frost Laun...s.json
windows10-2004-x64
3Frost Laun...st.exe
windows7-x64
1Frost Laun...st.exe
windows10-2004-x64
1Frost Laun...st.exe
windows7-x64
1Frost Laun...st.exe
windows10-2004-x64
7Frost Laun...g.json
windows7-x64
3Frost Laun...g.json
windows10-2004-x64
3Frost Laun...ypt.so
ubuntu-18.04-amd64
1Frost Laun....dylib
macos-10.15-amd64
1Frost Laun...er.dll
windows7-x64
1Frost Laun...er.dll
windows10-2004-x64
1Analysis
-
max time kernel
70s -
max time network
121s -
platform
macos-10.15_amd64 -
resource
macos-20240410-en -
resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
22-05-2024 03:07
Static task
static1
Behavioral task
behavioral1
Sample
Frost Launcher/Frost.deps.json
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Frost Launcher/Frost.deps.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Frost Launcher/Frost.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
Frost Launcher/Frost.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Frost Launcher/Frost.exe
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
Frost Launcher/Frost.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
Frost Launcher/Frost.runtimeconfig.json
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Frost Launcher/Frost.runtimeconfig.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Frost Launcher/runtimes/linux/native/libmongocrypt.so
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral10
Sample
Frost Launcher/runtimes/osx/native/libmongocrypt.dylib
Resource
macos-20240410-en
Behavioral task
behavioral11
Sample
Frost Launcher/runtimes/win-x64/native/WebView2Loader.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Frost Launcher/runtimes/win-x64/native/WebView2Loader.dll
Resource
win10v2004-20240508-en
General
-
Target
Frost Launcher/runtimes/osx/native/libmongocrypt.dylib
-
Size
9.2MB
-
MD5
39d1ebfca75fb6bd3b98f6539b36c648
-
SHA1
8bf47119cab62375071e9849e6e2f53db387453b
-
SHA256
208f78bc7c109080c3aac9cd268f2af1f82e9b53035d22b8b5a49f70ef0603d9
-
SHA512
63d8d606159f7c67c414fc7155202c26cebefaf71506e4a0a9d7ebf7ad0c02485e20e79708bf583f7e3f0000f09d916e1d0df1346a9253ab4022d9b020e9d21c
-
SSDEEP
98304:yr1WotAfoOG5/GBKrb8mlGGKrb8O28wvcdjYzube4+nYXJTKZO/GBKrb8mlGGKrs:IGJmFJjzUdjYzube4+nYiJmFJjDqm
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib\""1⤵PID:509
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib\""1⤵PID:509
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib"1⤵PID:509
-
/bin/zsh/bin/zsh -c "/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib"2⤵PID:510
-
/Users/run/Frost/Users/run/Frost Launcher/runtimes/osx/native/libmongocrypt.dylib2⤵PID:510