Overview
overview
5Static
static
3NetflixCE ...io.exe
windows7-x64
5NetflixCE ...io.exe
windows10-2004-x64
5NetflixCE ...ct.lua
windows7-x64
3NetflixCE ...ct.lua
windows10-2004-x64
3NetflixCE ...64.pot
windows7-x64
1NetflixCE ...64.pot
windows10-2004-x64
1NetflixCE ...ua.exe
windows7-x64
1NetflixCE ...ua.exe
windows10-2004-x64
1NetflixCE ...er.exe
windows7-x64
1NetflixCE ...er.exe
windows10-2004-x64
1Analysis
-
max time kernel
60s -
max time network
56s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
23-04-2024 22:54
Static task
static1
Behavioral task
behavioral1
Sample
NetflixCE V4/NetflixCE/RobloxStudio.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NetflixCE V4/NetflixCE/RobloxStudio.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
NetflixCE V4/NetflixCE/autorun/DotNetInject.lua
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
NetflixCE V4/NetflixCE/autorun/DotNetInject.lua
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
NetflixCE V4/NetflixCE/languages/cheatengine-x86_64.pot
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
NetflixCE V4/NetflixCE/languages/cheatengine-x86_64.pot
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
NetflixCE V4/NetflixCE/lua_extra/lua.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
NetflixCE V4/NetflixCE/lua_extra/lua.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
NetflixCE V4/rbxfpsunlocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
NetflixCE V4/rbxfpsunlocker.exe
Resource
win10v2004-20240412-en
General
-
Target
NetflixCE V4/rbxfpsunlocker.exe
-
Size
605KB
-
MD5
09d083f0e2c1e8a3561209902333ad8f
-
SHA1
d9692d3aba34a39aeb9e53cb3d25562b94e2e597
-
SHA256
83dfcb08ea4aa1b857d952a8a177db775d1a7e9cfc30b528848a4a29c8dbf0b9
-
SHA512
c71371263cacc4872a4bf621614940f08c9436062683be5de921ae6e509079e25ea380623e8945d40858819a664bd76590defb2a89949e8e5666190f1024ca6b
-
SSDEEP
12288:IKOjJsDc2+WC+D+4H/xeGofENaTSuGCC709:IKyacgDD+4fwG1NaTSw
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes:
rbxfpsunlocker.exepid process 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe 4700 rbxfpsunlocker.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
rbxfpsunlocker.exepid process 4700 rbxfpsunlocker.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
rbxfpsunlocker.exepid process 4700 rbxfpsunlocker.exe