Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
21/10/2023, 07:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rbxfpsunlocker.exe
Resource
win7-20231020-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
rbxfpsunlocker.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
rbxfpsunlocker.exe
-
Size
632KB
-
MD5
9e2178b886dabd38a24fd9a66def3402
-
SHA1
f29915d9f837e1cb33d132bd63069198af5459a1
-
SHA256
fbadb23695c70675b0b5da815c69df41c794796dbaee1abf0148a7b0b87dded7
-
SHA512
69163b511ad3ec3967256d1c8258fe89e00c7fd7f20e2bd58a2b36d610e6911c81e865083f121f52f265bd151bd422607d34a62fabfffdad1429a7f95008d34a
-
SSDEEP
12288:ViCBx5+Q8Z/+mwDSZbIcBYm+goASKgCC5ar:ViCBWLF+mwDc0c3+gTSKEa
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe 1228 rbxfpsunlocker.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1228 rbxfpsunlocker.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1228 rbxfpsunlocker.exe