3c0f9d4a5eb6d39a75d59509be7b6e215c1c1103642b4bf85a28231214d8e9a4 | Triage

Submit
Reports

Overview

overview

Static

static

3

FreeFireCheat.exe

windows7-x64

FreeFireCheat.exe

windows10-2004-x64

bin/d3dcom...43.dll

windows7-x64

3

bin/d3dcom...43.dll

windows10-2004-x64

3

bin/libEGL.dll

windows7-x64

1

bin/libEGL.dll

windows10-2004-x64

1

bin/libGLESv2.dll

windows7-x64

1

bin/libGLESv2.dll

windows10-2004-x64

1

bin/libcry...64.dll

windows7-x64

1

bin/libcry...64.dll

windows10-2004-x64

1

bin/natives_blob.js

windows7-x64

3

bin/natives_blob.js

windows10-2004-x64

3

bin/report...64.dll

windows7-x64

1

bin/report...64.dll

windows10-2004-x64

1

bin/report...em.dll

windows7-x64

1

bin/report...em.dll

windows10-2004-x64

1

bin/report...ew.dll

windows7-x64

1

bin/report...ew.dll

windows10-2004-x64

1

bin/report...er.dll

windows7-x64

1

bin/report...er.dll

windows10-2004-x64

1

bin/reports/cs2.exe

windows7-x64

1

bin/reports/cs2.exe

windows10-2004-x64

1

bin/report...47.dll

windows10-2004-x64

1

bin/report...lp.dll

windows7-x64

1

bin/report...lp.dll

windows10-2004-x64

1

bin/report...e2.dll

windows7-x64

1

bin/report...e2.dll

windows10-2004-x64

1

bin/report...io.dll

windows7-x64

1

bin/report...io.dll

windows10-2004-x64

1

bin/report...64.dll

windows7-x64

1

bin/report...64.dll

windows10-2004-x64

1

bin/report...em.dll

windows7-x64

1

Analysis

max time kernel
93s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
16-11-2024 06:00

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

FreeFireCheat.exe

Resource

win7-20240729-en

meduza collection discovery execution spyware stealer

windows7-x64

21 signatures

150 seconds

Behavioral task

behavioral2

Sample

FreeFireCheat.exe

Resource

win10v2004-20241007-en

meduza collection discovery execution spyware stealer

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral3

Sample

bin/d3dcompiler_43.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

bin/d3dcompiler_43.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

bin/libEGL.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

bin/libEGL.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

bin/libGLESv2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

bin/libGLESv2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

bin/libcrypto-1_1-x64.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

bin/libcrypto-1_1-x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

bin/natives_blob.js

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

bin/natives_blob.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

bin/reports/amd_ags_x64.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

bin/reports/amd_ags_x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

bin/reports/animationsystem.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

bin/reports/animationsystem.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

bin/reports/assetpreview.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

bin/reports/assetpreview.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

bin/reports/ati_compress_wrapper.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

bin/reports/ati_compress_wrapper.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

bin/reports/cs2.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

bin/reports/cs2.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

bin/reports/d3dcompiler_47.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

bin/reports/dbghelp.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

bin/reports/dbghelp.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

bin/reports/engine2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

bin/reports/engine2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

bin/reports/filesystem_stdio.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

bin/reports/filesystem_stdio.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

bin/reports/gfsdk_aftermath_lib.x64.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

bin/reports/gfsdk_aftermath_lib.x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

bin/reports/helpsystem.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

bin/libcrypto-1_1-x64.dll
Size

3.3MB
MD5

3390d76a13973bd46b512bf257c171c8
SHA1

cd269f1f752c272e3868b4dd6dc65464715ae0b0
SHA256

deb034588ef43db62809cc2c599374894bf7fef5df990da6eaaa0674fbec0301
SHA512

8d714e4859ffe4beb2c6a499b4d62cd549679411b5af2b50ec4f75e522e7af1943c4c29cc5d4266409351c596c6a0bb470e4ec0301e23425191f059752458620
SSDEEP

49152:cVwASOC3IU6ixBGtlqREzGbOggxFSAnVJcjp15QAMa4OHjbtNPA6UsQ0H1CPwDvF:l4+0SgbhVUsIjJW6UsB1CPwDv3uFfJ

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\libcrypto-1_1-x64.dll,#1
1⤵
PID:4316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy