Overview
overview
7Static
static
3Bin/Extens...er.exe
windows7-x64
1Bin/Extens...er.exe
windows10-2004-x64
1Nihon.exe
windows7-x64
1Nihon.exe
windows10-2004-x64
7Nihon.exe.xml
windows7-x64
1Nihon.exe.xml
windows10-2004-x64
1Scripts/Aimbot 3.0.js
windows7-x64
1Scripts/Aimbot 3.0.js
windows10-2004-x64
1Scripts/Aimbot.js
windows7-x64
1Scripts/Aimbot.js
windows10-2004-x64
1Scripts/CC Aimbot.js
windows7-x64
1Scripts/CC Aimbot.js
windows10-2004-x64
1Scripts/De... v2.js
windows7-x64
1Scripts/De... v2.js
windows10-2004-x64
1Scripts/De...rer.js
windows7-x64
1Scripts/De...rer.js
windows10-2004-x64
1Scripts/Mad City 2.js
windows7-x64
1Scripts/Mad City 2.js
windows10-2004-x64
1Scripts/Orca Hub.js
windows7-x64
1Scripts/Orca Hub.js
windows10-2004-x64
1Scripts/OxieHub.js
windows7-x64
1Scripts/OxieHub.js
windows10-2004-x64
1Scripts/TopKek V3.js
windows7-x64
1Scripts/TopKek V3.js
windows10-2004-x64
1loader.dll
windows7-x64
1loader.dll
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
56s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
26/04/2024, 16:16
Static task
static1
Behavioral task
behavioral1
Sample
Bin/Extensions/FpsUnlocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Bin/Extensions/FpsUnlocker.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Nihon.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Nihon.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Nihon.exe.xml
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Nihon.exe.xml
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Scripts/Aimbot 3.0.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Scripts/Aimbot 3.0.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Scripts/Aimbot.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Scripts/Aimbot.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
Scripts/CC Aimbot.js
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Scripts/CC Aimbot.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
Scripts/Dex Explorer v2.js
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
Scripts/Dex Explorer v2.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
Scripts/Dex Explorer.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Scripts/Dex Explorer.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
Scripts/Mad City 2.js
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Scripts/Mad City 2.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
Scripts/Orca Hub.js
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
Scripts/Orca Hub.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Scripts/OxieHub.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Scripts/OxieHub.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
Scripts/TopKek V3.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Scripts/TopKek V3.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
loader.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
loader.dll
Resource
win10v2004-20240419-en
General
-
Target
Bin/Extensions/FpsUnlocker.exe
-
Size
488KB
-
MD5
52f46ced3b06b19eac3369fbdb4ee2ee
-
SHA1
1bc549fa770b1bf3925248a3853a87af9948381f
-
SHA256
d0685e397486bd9f54eda33133e87e3970dedf5038ef0e4d058de34d796d72ac
-
SHA512
d65a7f73a497e18d0123306c3e940cdd5b22f61ad88fcd9a334c95bab0db665a8e61d11c9c78a656cbfdd7a691e782351fa712aa97c6f38f1d641ae91e3d23af
-
SSDEEP
6144:9nsLTb6hU1R1IDT3nn/b10WyIZUdA8CQ3mAg0y0Noh+p9NWRzbX:6TbgrDT3n/b6qiA8CQqvYogp/6
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe 1520 FpsUnlocker.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1520 FpsUnlocker.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1520 FpsUnlocker.exe