Overview

overview

7

Static

static

3

Ubisoft Fr...er.exe

windows10-2004-x64

7

Ubisoft Fr...er.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    28/05/2026, 15:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Ubisoft Friends Manager.exe
  • Size 21.7MB
  • Sample260528-ta3rdae12w
  • SHA256 d7a7cb9ae67567223f8e4ce632806f5384fd8a271644bc5bd37a3fc940278984
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 34 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ubisoft Friends Manager.exe
    "C:\Users\Admin\AppData\Local\Temp\Ubisoft Friends Manager.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2300
    • C:\Users\Admin\AppData\Local\Temp\Ubisoft Friends Manager.exe
      "C:\Users\Admin\AppData\Local\Temp\Ubisoft Friends Manager.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      PID:2068

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        qminimal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\PyQt6\Qt6\plugins\platforms\qminimal.dll
        • Size 59KB
        • SHA256 2b38c2183b39a9a20763aa2098e28608a1468b7a3c8bdaf6aa570f48dd6b3701
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qoffscreen.dll
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\PyQt6\Qt6\plugins\platforms\qoffscreen.dll
        • Size 108KB
        • SHA256 8819553a045e852d7910387b6d947cb85a50c7c5a20818bcd3a712401ab8068d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qmodernwindowsstyle.dll
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\PyQt6\Qt6\plugins\styles\qmodernwindowsstyle.dll
        • Size 212KB
        • SHA256 9b5ac8bbd61f12f03598cac505070aaae5b14f08371eb0cb64b54ece13000110
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\PyQt6\QtCore.pyd
        • Size 2.4MB
        • SHA256 5f24ce426fa4f2e4f7d0987ad136a95d09fa244e13408b5287e5895bd76d56c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\PyQt6\QtGui.pyd
        • Size 2.2MB
        • SHA256 6191700bf33248bddeb0018107982c1686e304869f906b690bff38ac3af66c93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\PyQt6\QtWidgets.pyd
        • Size 4.8MB
        • SHA256 b514c42c012101bd70a2baca65ca7757faf605992cec440e7802a1b21c2f967b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sip.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\PyQt6\sip.pyd
        • Size 108KB
        • SHA256 06a9913d4ceba21902f21d1838ee792adc6e90756ddcb55432c1e40a272e6c16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\Qt6Core.dll
        • Size 9.6MB
        • SHA256 0b0474bfb1d3465a597a51cd383d9c7d502f4b5e15f66b09956390c33ac406ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\_socket.pyd
        • Size 84KB
        • SHA256 7acc6c44436bf77be3c425d39f0acba03b42119513ef9db31a7039c969e056bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\_wmi.pyd
        • Size 38KB
        • SHA256 6793bd216b5a329689cde8b1532858d6731707ec5063897f979a81e57077402c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\charset_normalizer\md.pyd
        • Size 10KB
        • SHA256 89d8172b5f460c3fd85716c9641643fd7d893365a99867df4471b017f2995695
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\libssl-3.dll
        • Size 776KB
        • SHA256 1e4bc0638682bfcbb36f4465d6a2e9944d917a60f05ecc8ddf9e96847e05e13f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\select.pyd
        • Size 32KB
        • SHA256 01c8fef709b657b17e1db3754b05cb1070ad3e303dd531ef0f5545316df53aa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        backend_c.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\zstandard\backend_c.pyd
        • Size 513KB
        • SHA256 e05f3f106d6a907d3402a9543dbd0bef6cc28dbb63377685ebd65af87bfb03d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwindows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\PyQt6\Qt6\plugins\platforms\qwindows.dll
        • Size 904KB
        • SHA256 59fd19f3cc6f6b1e72134400451d9b6681f65732f8989cdfeda1570af168921d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\_bz2.pyd
        • Size 84KB
        • SHA256 64d9fbb516e08a6780dca160e40d8c6723d2a659b5ca3020de7a041305b3a3d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\_hashlib.pyd
        • Size 67KB
        • SHA256 1e079c6b44488e273bc62d9bcb27cec519e9916b47b8c2878ebade0772e0f484
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\_lzma.pyd
        • Size 155KB
        • SHA256 999ba26fe0b0376b7898d50ddb2f5012e7a64228e31fcdca99a4d7079df669e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\_queue.pyd
        • Size 34KB
        • SHA256 baa5a4cec6c369efc461f7109f1e6150c0afeef8ce53dbd9d673a00093cdadf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\_ssl.pyd
        • Size 177KB
        • SHA256 738c579ed151498337026ea1f5dc7688197b41b74e39f4d9de05261bb35d9206
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\charset_normalizer\md__mypyc.pyd
        • Size 124KB
        • SHA256 3ccacfdbf227750083980a7de0c982be26dfebac26e4fa599d1e7a5866e92a21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\gui.dll
        • Size 11.1MB
        • SHA256 d34625d253a82654d7a80113864b5405f27645dbac47a93ceb31ada514d9ec83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 e03dd02fdcfb791981c9962827cfcf495f2a47a514c1526efb57f847a9df514a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\msvcp140.dll
        • Size 544KB
        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\msvcp140_1.dll
        • Size 35KB
        • SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140_2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\msvcp140_2.dll
        • Size 273KB
        • SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\python3.dll
        • Size 70KB
        • SHA256 9b179a9e44badc9c9d327182996040c87be183ad4c9469645280ed3e4a2d7694
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\python313.dll
        • Size 5.8MB
        • SHA256 c9f98606d0d06f4e8ae75ae385021e58b57c90d4fd325c0313c8c42abe1ebf63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qt6gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\qt6gui.dll
        • Size 9.0MB
        • SHA256 25d6b5e9ccb63ab225a02e5da54902229350de5188e8352c918ec25bd3130da2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qt6widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\qt6widgets.dll
        • Size 6.2MB
        • SHA256 dbaffac274d96c4adadb170287ad46791e3ca34a546e4f7ee6b306fd6b921465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\unicodedata.pyd
        • Size 695KB
        • SHA256 cc1f066d88c26a21808ec6053c0989d702b6d46429bb4f363e4f29b67f311c89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2300_134244571602764657\vcruntime140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2068-114-0x00007FFFC5240000-0x00007FFFC546E000-memory.dmp
        Download

        memory/2068-105-0x00007FFFC5E10000-0x00007FFFC6083000-memory.dmp
        Download

        memory/2068-124-0x0000025494E60000-0x0000025495361000-memory.dmp
        Download

        memory/2068-130-0x0000025494E60000-0x0000025495361000-memory.dmp
        Download