Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3Chaos_V3_2...o).exe
windows7-x64
1Chaos_V3_2...o).exe
windows10-2004-x64
1Chaos_V3_2...V3.exe
windows7-x64
10Chaos_V3_2...V3.exe
windows10-2004-x64
10Chaos_V3_2...er.exe
windows7-x64
1Chaos_V3_2...er.exe
windows10-2004-x64
1Chaos_V3_2...nd.exe
windows7-x64
1Chaos_V3_2...nd.exe
windows10-2004-x64
1Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
25/04/2024, 21:38
Static task
static1
Behavioral task
behavioral1
Sample
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/Anti-Crash (Anti-Crash method by 13ooeo).exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/Anti-Crash (Anti-Crash method by 13ooeo).exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/Chaos Launcher V3.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/Chaos Launcher V3.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/fpsunlocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/fpsunlocker.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/pssuspend.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/pssuspend.exe
Resource
win10v2004-20240412-en
General
-
Target
Chaos_V3_2/Chaos_V3 (2)/Chaos V3/fpsunlocker.exe
-
Size
666KB
-
MD5
f0c71376e55ba3c65942e90348169921
-
SHA1
239085aa264e9eb743dde706231169820c32e03c
-
SHA256
94f4140b6e7c3e73364205829da26479dad5257752c009dca4dec4a6ce9f9637
-
SHA512
4ce20f764aac880362fbf9f9ade18c89e19eaa697e73cb08ce37b2eb25b3b655ec569de180c33ded00ca42147dd2c84d21b837224b318d56f258a6e881b6057f
-
SSDEEP
12288:4KOjJsDc2+WC+D+4H/xeGofENaTSuGCC709:4KyacgDD+4fwG1NaTSw
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe 556 fpsunlocker.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 556 fpsunlocker.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 556 fpsunlocker.exe