Resubmissions
01/02/2024, 03:27
240201-dz4f7sacg6302/03/2023, 22:56
230302-2wynjseg6s402/03/2023, 22:53
230302-2t28ysfb881Analysis
- max time kernel
149s - max time network
126s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
02/03/2023, 22:53
Static task
static1
Behavioral task
behavioral1
Sample
rbxfpsunlocker.exe
Resource
win7-20230220-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
rbxfpsunlocker.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target rbxfpsunlocker.exe
- Size 501KB
- Sample230302-2t28ysfb88
- SHA256 19f11c65f6c8dc386e9e8fdc79326fd7580395d9931a5e952feac40d26a88907
- MD5 f6722f9f28173138464a22fd516c0275
- SHA1 247c828444f9ed61037704b4e2b6f5431f410a73
- SHA512 2ddff2df9e550e6dae9b3ece908e9887e4ab4a26d056d73a6f224b0f0ad981c499819c211701f953abbc79512c821725330e35f905ea743d9aeb3f23a1646c50
- SSDEEP 6144:Ry2RPslBVptHpJA5mmWRTzSVRkzyNXf6tyRqgrOEqV7DIyohcqSHP4ooXHE:FPAJJBRaVS+NXGyRq/x7noCq+w/
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe 2724 rbxfpsunlocker.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2724 rbxfpsunlocker.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2724 rbxfpsunlocker.exe