Overview
overview
7Static
static
3Bin/Extens...er.exe
windows7-x64
1Bin/Extens...er.exe
windows10-2004-x64
1Nihon.exe
windows7-x64
1Nihon.exe
windows10-2004-x64
7Nihon.exe.xml
windows7-x64
1Nihon.exe.xml
windows10-2004-x64
1Scripts/Aimbot 3.0.js
windows7-x64
1Scripts/Aimbot 3.0.js
windows10-2004-x64
1Scripts/Aimbot.js
windows7-x64
1Scripts/Aimbot.js
windows10-2004-x64
1Scripts/CC Aimbot.js
windows7-x64
1Scripts/CC Aimbot.js
windows10-2004-x64
1Scripts/De... v2.js
windows7-x64
1Scripts/De... v2.js
windows10-2004-x64
1Scripts/De...rer.js
windows7-x64
1Scripts/De...rer.js
windows10-2004-x64
1Scripts/Mad City 2.js
windows7-x64
1Scripts/Mad City 2.js
windows10-2004-x64
1Scripts/Orca Hub.js
windows7-x64
1Scripts/Orca Hub.js
windows10-2004-x64
1Scripts/OxieHub.js
windows7-x64
1Scripts/OxieHub.js
windows10-2004-x64
1Scripts/TopKek V3.js
windows7-x64
1Scripts/TopKek V3.js
windows10-2004-x64
1loader.dll
windows7-x64
1loader.dll
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
26-04-2024 16:16
Static task
static1
Behavioral task
behavioral1
Sample
Bin/Extensions/FpsUnlocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Bin/Extensions/FpsUnlocker.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Nihon.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Nihon.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Nihon.exe.xml
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Nihon.exe.xml
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Scripts/Aimbot 3.0.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Scripts/Aimbot 3.0.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Scripts/Aimbot.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Scripts/Aimbot.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
Scripts/CC Aimbot.js
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Scripts/CC Aimbot.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
Scripts/Dex Explorer v2.js
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
Scripts/Dex Explorer v2.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
Scripts/Dex Explorer.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Scripts/Dex Explorer.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
Scripts/Mad City 2.js
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Scripts/Mad City 2.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
Scripts/Orca Hub.js
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
Scripts/Orca Hub.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Scripts/OxieHub.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Scripts/OxieHub.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
Scripts/TopKek V3.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Scripts/TopKek V3.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
loader.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
loader.dll
Resource
win10v2004-20240419-en
General
-
Target
Scripts/Orca Hub.js
-
Size
337KB
-
MD5
43a5e8e3568866547fc895697f0724a2
-
SHA1
87220ac44f6b382833ee71d64a48dd44bf0420fc
-
SHA256
8b978e5a46f1887998cb26b0f4ecb6ae2a70e991dc4154f1b659ec38e30df464
-
SHA512
7fbd8c5a5b8b7c8c5cc58a1298ed829ba9d952e410efe19bcbbb4284ba21c9dbcb1d55f3b6e20884a0b088979fe271bb2a430b586e77032b94f5280ebdf432f5
-
SSDEEP
3072:/Gq1S9UrOJ5zrBoPz1rV3Ghf+4mPWEXod/2QG:/Gq1S9UrOJ5zr2Pz1rc+4+
Malware Config
Signatures
Processes
-
C:\Windows\system32\wscript.exewscript.exe "C:\Users\Admin\AppData\Local\Temp\Scripts\Orca Hub.js"1⤵PID:2368
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3720 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:81⤵PID:2756