General

  • Target

    hayhayy_.rar

  • Size

    28.0MB

  • MD5

    17353b2c26876ffe2d87f5cfe9933359

  • SHA1

    89cfca87f28a12a955f668a9c081c1b3437a3d1e

  • SHA256

    b8e482ccfa00322f98de6d0c10d2374d0df5d048d8a6047ca807ed5420b83719

  • SHA512

    c8df1de6990797e3e28419715fb08df18d78fdb7b4507f61ee6468527d92b366a92c806cf21e8343f5b52fc5f1457fc9001718f0bf0313ddf2768196b8a45c01

  • SSDEEP

    786432:zFLVfiFELCKnktfnIf8wh17/+qIax/F4QuQwfpK8:zC2L/nktfnIUs7/+Gd9MfpK8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • hayhayy_.rar
    .rar
  • hayhayy_/Accord.dll.config
  • hayhayy_/VexorPriv.deps.json
  • hayhayy_/VexorPriv.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • hayhayy_/VexorPriv.dll.config
  • hayhayy_/VexorPriv.exe
    .exe windows:6 windows x64 arch:x64

    90d2464c05751e0163b327ef7e8a4518


    Headers

    Imports

    Sections

  • hayhayy_/VexorPriv.runtimeconfig.json
  • hayhayy_/bin/models/FN AIMBOT 1.onnx
  • hayhayy_/runtimes/win-arm/native/onnxruntime.dll
    .dll windows:6 windows

    c0b3d77fdce8a6e210b73b8ab89af645


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hayhayy_/runtimes/win-arm/native/onnxruntime.lib
  • hayhayy_/runtimes/win-arm64/native/onnxruntime.dll
  • hayhayy_/runtimes/win-arm64/native/onnxruntime.lib
  • hayhayy_/runtimes/win-x64/native/onnxruntime.dll
    .dll windows:6 windows x64 arch:x64

    39e1a29a795654c064e5e6ee1d09c320


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hayhayy_/runtimes/win-x64/native/onnxruntime.lib
  • hayhayy_/runtimes/win-x86/native/onnxruntime.dll
    .dll windows:6 windows x86 arch:x86

    9b9eefe3aa2efecf5bfc3511ac8762b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hayhayy_/runtimes/win-x86/native/onnxruntime.lib