3c0f9d4a5eb6d39a75d59509be7b6e215c1c1103642b4bf85a28231214d8e9a4 | Triage

Submit
Reports

Overview

overview

Static

static

3

FreeFireCheat.exe

windows7-x64

FreeFireCheat.exe

windows10-2004-x64

bin/d3dcom...43.dll

windows7-x64

3

bin/d3dcom...43.dll

windows10-2004-x64

3

bin/libEGL.dll

windows7-x64

1

bin/libEGL.dll

windows10-2004-x64

1

bin/libGLESv2.dll

windows7-x64

1

bin/libGLESv2.dll

windows10-2004-x64

1

bin/libcry...64.dll

windows7-x64

1

bin/libcry...64.dll

windows10-2004-x64

1

bin/natives_blob.js

windows7-x64

3

bin/natives_blob.js

windows10-2004-x64

3

bin/report...64.dll

windows7-x64

1

bin/report...64.dll

windows10-2004-x64

1

bin/report...em.dll

windows7-x64

1

bin/report...em.dll

windows10-2004-x64

1

bin/report...ew.dll

windows7-x64

1

bin/report...ew.dll

windows10-2004-x64

1

bin/report...er.dll

windows7-x64

1

bin/report...er.dll

windows10-2004-x64

1

bin/reports/cs2.exe

windows7-x64

1

bin/reports/cs2.exe

windows10-2004-x64

1

bin/report...47.dll

windows10-2004-x64

1

bin/report...lp.dll

windows7-x64

1

bin/report...lp.dll

windows10-2004-x64

1

bin/report...e2.dll

windows7-x64

1

bin/report...e2.dll

windows10-2004-x64

1

bin/report...io.dll

windows7-x64

1

bin/report...io.dll

windows10-2004-x64

1

bin/report...64.dll

windows7-x64

1

bin/report...64.dll

windows10-2004-x64

1

bin/report...em.dll

windows7-x64

1

Analysis

max time kernel
147s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
16-11-2024 06:00

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

FreeFireCheat.exe

Resource

win7-20240729-en

meduza collection discovery execution spyware stealer

windows7-x64

21 signatures

150 seconds

Behavioral task

behavioral2

Sample

FreeFireCheat.exe

Resource

win10v2004-20241007-en

meduza collection discovery execution spyware stealer

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral3

Sample

bin/d3dcompiler_43.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

bin/d3dcompiler_43.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

bin/libEGL.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

bin/libEGL.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

bin/libGLESv2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

bin/libGLESv2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

bin/libcrypto-1_1-x64.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

bin/libcrypto-1_1-x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

bin/natives_blob.js

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

bin/natives_blob.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

bin/reports/amd_ags_x64.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

bin/reports/amd_ags_x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

bin/reports/animationsystem.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

bin/reports/animationsystem.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

bin/reports/assetpreview.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

bin/reports/assetpreview.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

bin/reports/ati_compress_wrapper.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

bin/reports/ati_compress_wrapper.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

bin/reports/cs2.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

bin/reports/cs2.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

bin/reports/d3dcompiler_47.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

bin/reports/dbghelp.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

bin/reports/dbghelp.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

bin/reports/engine2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

bin/reports/engine2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

bin/reports/filesystem_stdio.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

bin/reports/filesystem_stdio.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

bin/reports/gfsdk_aftermath_lib.x64.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

bin/reports/gfsdk_aftermath_lib.x64.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

bin/reports/helpsystem.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

bin/libGLESv2.dll
Size

3.7MB
MD5

dd3f55559ca3eb1a89e7d696c8c5de53
SHA1

ce2785277d60aa366e6faf3c3318d5767a3d949e
SHA256

99f261fa5a69dd2b3bd6192aaf72a0d9f88d769a311fac87963658a7573ec669
SHA512

bd47d44177970c08bb645f0e92011b2c9143c016d2baaf03a55f26e5e4fc157f1273fda49320815c0cbaa34b531c7fd1f28fa37d2486104d486063b138d75739
SSDEEP

49152:oVgDuIkH0auiXZR2oWisTDLKvka5A9rC1Mw50uaj3cRhONxp7Im8TV659Zx/M70M:QgDWXv96pjkwpcTB5Vf

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\libGLESv2.dll,#1
1⤵
PID:3488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy