Overview
overview
3Static
static
3Debug/Fast...ox.dll
windows10-2004-x64
1Debug/Scri... V2.js
windows10-2004-x64
1Debug/Scri...ock.js
windows10-2004-x64
1Debug/Scri...ipt.js
windows10-2004-x64
1Debug/Scri...tor.js
windows10-2004-x64
1Debug/Scri...Hub.js
windows10-2004-x64
1Debug/Scri...ass.js
windows10-2004-x64
1Debug/Scri...ode.js
windows10-2004-x64
1Debug/WeAr...PI.dll
windows10-2004-x64
1Debug/nigg...er.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Debug/FastColoredTextBox.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
Debug/Scripts/Dex Explorer V2.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Debug/Scripts/FPS Aimlock.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
Debug/Scripts/Kick Off Script.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Debug/Scripts/Lumber Dominator.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
Debug/Scripts/TopKek ScriptHub.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Debug/Scripts/[FE] Chat Bypass.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
Debug/Scripts/[FE] God Mode.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Debug/WeAreDevs_API.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral10
Sample
Debug/nigga executer.exe
Resource
win10v2004-20230220-en
General
-
Target
Nigga_executer_2.zip
-
Size
1008KB
-
MD5
0df89117e71cebdc4d23e61311a5f448
-
SHA1
fb3a59279498cdb1285926516ae28d28714efd49
-
SHA256
79b87fa862ee2a022a2e829c5a1e3baf577016a92f4febdee85bd60a30ab3b5f
-
SHA512
81df9c1467a9cde4f2bcc5e19aeee893d60cc65fa02aa13d1d40734a4efbf3b0357db745a2f8ff7c579eaf24033fc8c6cf00a4509477c08e58c960f381c9df11
-
SSDEEP
24576:suOvjqrjbrQg7tZjcK4wk2kbxN57JPOgJ1sO/S/WlT46EWO3cnf4k:sDiQgrXk2kbxTtOgP/SO546+2R
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Debug/FastColoredTextBox.dll unpack001/Debug/WeAreDevs_API.dll unpack001/Debug/nigga executer.exe
Files
-
Nigga_executer_2.zip.zip
-
Debug/FastColoredTextBox.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/Scripts/Advanced Prison Life UI.txt
-
Debug/Scripts/Anti-AFK.txt
-
Debug/Scripts/AutoRob.txt
-
Debug/Scripts/BrokenBonesIV.txt
-
Debug/Scripts/ClickTeleport.txt
-
Debug/Scripts/Dex Explorer V2.txt.js
-
Debug/Scripts/Enable Reset Character.txt
-
Debug/Scripts/FPS Aimlock.lua.js
-
Debug/Scripts/Infinite Donuts.lua
-
Debug/Scripts/Kick Off Script.txt.js
-
Debug/Scripts/Lumber Dominator.txt.js
-
Debug/Scripts/MM2 Auto Farm.txt
-
Debug/Scripts/MM2.lua
-
Debug/Scripts/Paint N Guess Auto.lua
-
Debug/Scripts/Prison Life GUI v2.2.lua
-
Debug/Scripts/PrisonBreakerX.lua
-
Debug/Scripts/PrisonHax.txt
-
Debug/Scripts/PrisonHaxx.lua
-
Debug/Scripts/SharkBite.txt
-
Debug/Scripts/Speed Run 4 Farm.txt
-
Debug/Scripts/TopKek ScriptHub.txt.js
-
Debug/Scripts/Unrestricted Btools.txt
-
Debug/Scripts/Weightlifting Simulator 2 GUI.txt
-
Debug/Scripts/[FE] Chat Bypass.txt.js
-
Debug/Scripts/[FE] E to TP.txt
-
Debug/Scripts/[FE] Fly.txt
-
Debug/Scripts/[FE] God Mode.txt.js
-
Debug/Scripts/[FE] Infinite Yield.txt
-
Debug/Scripts/[FE] Invisible Character.lua
-
Debug/Scripts/[FE] Invisible Fling.txt
-
Debug/Scripts/[FE] Speed Cheat.txt
-
Debug/Scripts/[[BEST]] Script LIST.txt
-
Debug/WeAreDevs_API.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/nigga executer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/nigga executer.exe.config
-
Debug/nigga executer.pdb