Overview
overview
3Static
static
1AIMi - AI Aimbot.zip
windows7-x64
1AIMi - AI Aimbot.zip
windows10-2004-x64
1AIMi - AI ...ts.txt
windows7-x64
1AIMi - AI ...ts.txt
windows10-2004-x64
1AIMi - AI ...est.py
windows7-x64
3AIMi - AI ...est.py
windows10-2004-x64
3AIMi - AI ...ect.py
windows7-x64
3AIMi - AI ...ect.py
windows10-2004-x64
3AIMi - AI ...labels
windows7-x64
3AIMi - AI ...labels
windows10-2004-x64
3AIMi - AI ...ny.cfg
windows7-x64
3AIMi - AI ...ny.cfg
windows10-2004-x64
3AIMi - AI ...eights
windows7-x64
3AIMi - AI ...eights
windows10-2004-x64
3AIMi - AI ...nsfile
windows7-x64
1AIMi - AI ...nsfile
windows10-2004-x64
1AIMi - AI ...kefile
windows7-x64
1AIMi - AI ...kefile
windows10-2004-x64
1AIMi - AI ...n.json
windows7-x64
3AIMi - AI ...n.json
windows10-2004-x64
3AIMi - AI ...og.old
windows7-x64
3AIMi - AI ...og.old
windows10-2004-x64
3AIMi - AI ...compat
windows7-x64
1AIMi - AI ...compat
windows10-2004-x64
1AIMi - AI ...ontrol
windows7-x64
1AIMi - AI ...ontrol
windows10-2004-x64
1AIMi - AI ...yright
windows7-x64
1AIMi - AI ...yright
windows10-2004-x64
1AIMi - AI ...nstall
windows7-x64
3AIMi - AI ...nstall
windows10-2004-x64
3AIMi - AI ...rrides
windows7-x64
3AIMi - AI ...rrides
windows10-2004-x64
3Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
15-11-2023 16:37
Static task
static1
Behavioral task
behavioral1
Sample
AIMi - AI Aimbot.zip
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
AIMi - AI Aimbot.zip
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
AIMi - AI Aimbot/assets/requirements.txt
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
AIMi - AI Aimbot/assets/requirements.txt
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
AIMi - AI Aimbot/gpu test.py
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
AIMi - AI Aimbot/gpu test.py
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
AIMi - AI Aimbot/lib/detect.py
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
AIMi - AI Aimbot/lib/detect.py
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
AIMi - AI Aimbot/models/coco-dataset.labels
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
AIMi - AI Aimbot/models/coco-dataset.labels
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
AIMi - AI Aimbot/models/yolov3-tiny.cfg
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
AIMi - AI Aimbot/models/yolov3-tiny.cfg
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
AIMi - AI Aimbot/models/yolov3-tiny.weights
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
AIMi - AI Aimbot/models/yolov3-tiny.weights
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
AIMi - AI Aimbot/nvidia docker/Jenkinsfile
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
AIMi - AI Aimbot/nvidia docker/Jenkinsfile
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
AIMi - AI Aimbot/nvidia docker/Makefile
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
AIMi - AI Aimbot/nvidia docker/Makefile
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
AIMi - AI Aimbot/nvidia docker/daemon.json
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
AIMi - AI Aimbot/nvidia docker/daemon.json
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
AIMi - AI Aimbot/nvidia docker/debian/changelog.old
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
AIMi - AI Aimbot/nvidia docker/debian/changelog.old
Resource
win10v2004-20231020-en
Behavioral task
behavioral23
Sample
AIMi - AI Aimbot/nvidia docker/debian/compat
Resource
win7-20231025-en
Behavioral task
behavioral24
Sample
AIMi - AI Aimbot/nvidia docker/debian/compat
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
AIMi - AI Aimbot/nvidia docker/debian/control
Resource
win7-20231023-en
Behavioral task
behavioral26
Sample
AIMi - AI Aimbot/nvidia docker/debian/control
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
AIMi - AI Aimbot/nvidia docker/debian/copyright
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
AIMi - AI Aimbot/nvidia docker/debian/copyright
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
AIMi - AI Aimbot/nvidia docker/debian/nvidia-docker2.install
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
AIMi - AI Aimbot/nvidia docker/debian/nvidia-docker2.install
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
AIMi - AI Aimbot/nvidia docker/debian/nvidia-docker2.lintian-overrides
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
AIMi - AI Aimbot/nvidia docker/debian/nvidia-docker2.lintian-overrides
Resource
win10v2004-20231020-en
General
-
Target
AIMi - AI Aimbot/nvidia docker/debian/control
-
Size
664B
-
MD5
3456539154bb50cb1dcf22d1d45e398b
-
SHA1
873a394d2ec91ed94a8c4905c75dd91d79602328
-
SHA256
ef3f9107d1c259bc32121046b2203b08b3584ef81b6d4c932cb003192cd721d5
-
SHA512
9aa5c7d5f4347ae7e2547fb3caf949b9f42e9c0af6713e932eff51ebf85939e310e3ccba557d0df53adc498d610385587fe80d19e609fd24b297bd69e90f9db4
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeManageVolumePrivilege 4024 svchost.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\AIMi - AI Aimbot\nvidia docker\debian\control"1⤵PID:4380
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵PID:872
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4024