3c0f9d4a5eb6d39a75d59509be7b6e215c1c1103642b4bf85a28231214d8e9a4 | Triage

Submit
Reports

Overview

overview

Static

static

3

FreeFireCheat.exe

windows7-x64

FreeFireCheat.exe

windows10-2004-x64

bin/d3dcom...43.dll

windows7-x64

3

bin/d3dcom...43.dll

windows10-2004-x64

3

bin/libEGL.dll

windows7-x64

1

bin/libEGL.dll

windows10-2004-x64

1

bin/libGLESv2.dll

windows7-x64

1

bin/libGLESv2.dll

windows10-2004-x64

1

bin/libcry...64.dll

windows7-x64

1

bin/libcry...64.dll

windows10-2004-x64

1

bin/natives_blob.js

windows7-x64

3

bin/natives_blob.js

windows10-2004-x64

3

bin/report...64.dll

windows7-x64

1

bin/report...64.dll

windows10-2004-x64

1

bin/report...em.dll

windows7-x64

1

bin/report...em.dll

windows10-2004-x64

1

bin/report...ew.dll

windows7-x64

1

bin/report...ew.dll

windows10-2004-x64

1

bin/report...er.dll

windows7-x64

1

bin/report...er.dll

windows10-2004-x64

1

bin/reports/cs2.exe

windows7-x64

1

bin/reports/cs2.exe

windows10-2004-x64

1

bin/report...47.dll

windows10-2004-x64

1

bin/report...lp.dll

windows7-x64

1

bin/report...lp.dll

windows10-2004-x64

1

bin/report...e2.dll

windows7-x64

1

bin/report...e2.dll

windows10-2004-x64

1

bin/report...io.dll

windows7-x64

1

bin/report...io.dll

windows10-2004-x64

1

bin/report...64.dll

windows7-x64

1

bin/report...64.dll

windows10-2004-x64

1

bin/report...em.dll

windows7-x64

1

Analysis

max time kernel
146s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
16-11-2024 06:00

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

FreeFireCheat.exe

Resource

win7-20240729-en

meduza collection discovery execution spyware stealer

windows7-x64

21 signatures

150 seconds

Behavioral task

behavioral2

Sample

FreeFireCheat.exe

Resource

win10v2004-20241007-en

meduza collection discovery execution spyware stealer

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral3

Sample

bin/d3dcompiler_43.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

bin/d3dcompiler_43.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

bin/libEGL.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

bin/libEGL.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

bin/libGLESv2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

bin/libGLESv2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

bin/libcrypto-1_1-x64.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

bin/libcrypto-1_1-x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

bin/natives_blob.js

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

bin/natives_blob.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

bin/reports/amd_ags_x64.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

bin/reports/amd_ags_x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

bin/reports/animationsystem.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

bin/reports/animationsystem.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

bin/reports/assetpreview.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

bin/reports/assetpreview.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

bin/reports/ati_compress_wrapper.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

bin/reports/ati_compress_wrapper.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

bin/reports/cs2.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

bin/reports/cs2.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

bin/reports/d3dcompiler_47.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

bin/reports/dbghelp.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

bin/reports/dbghelp.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

bin/reports/engine2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

bin/reports/engine2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

bin/reports/filesystem_stdio.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

bin/reports/filesystem_stdio.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

bin/reports/gfsdk_aftermath_lib.x64.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

bin/reports/gfsdk_aftermath_lib.x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

bin/reports/helpsystem.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

bin/reports/dbghelp.dll
Size

1.5MB
MD5

a5e4b3ff51cf5b7926d9651908feb666
SHA1

4ef5d229709e40f3f84e46c3a28341eadbd1a044
SHA256

13f0c74845318b52b76e6000564b1a99c37de48422b44ac74d034fa222c65a23
SHA512

0615ff581b648715461349b1622fbc208042fc8c395cb2d271203b25b036f59edb0fc3470065dc15061af1be0fff48981f55bbea7f00c88906e9b470764a86fa
SSDEEP

24576:xU5lL6v/X5lknycQFrQ8gKt/X95WqbQLZopKjMcqpzd1YWLfY:Kni/X5lknDFUCaQLq8

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\reports\dbghelp.dll,#1
1⤵
PID:4488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy