Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
02/02/2023, 05:00
Static task
static1
Behavioral task
behavioral1
Sample
rbxfpsunlocker-x64.zip
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral2
Sample
rbxfpsunlocker-x64.zip
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
rbxfpsunlocker.exe
Resource
win7-20221111-en
windows7-x64
Behavioral task
behavioral4
Sample
rbxfpsunlocker.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
General
-
Target
rbxfpsunlocker.exe
-
Size
501KB
-
MD5
f6722f9f28173138464a22fd516c0275
-
SHA1
247c828444f9ed61037704b4e2b6f5431f410a73
-
SHA256
19f11c65f6c8dc386e9e8fdc79326fd7580395d9931a5e952feac40d26a88907
-
SHA512
2ddff2df9e550e6dae9b3ece908e9887e4ab4a26d056d73a6f224b0f0ad981c499819c211701f953abbc79512c821725330e35f905ea743d9aeb3f23a1646c50
-
SSDEEP
6144:Ry2RPslBVptHpJA5mmWRTzSVRkzyNXf6tyRqgrOEqV7DIyohcqSHP4ooXHE:FPAJJBRaVS+NXGyRq/x7noCq+w/
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe 2500 rbxfpsunlocker.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2500 rbxfpsunlocker.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2500 rbxfpsunlocker.exe