Overview
overview
7Static
static
3Bin/Extens...er.exe
windows7-x64
1Bin/Extens...er.exe
windows10-2004-x64
1Nihon.exe
windows7-x64
1Nihon.exe
windows10-2004-x64
7Nihon.exe.xml
windows7-x64
1Nihon.exe.xml
windows10-2004-x64
1Scripts/Aimbot 3.0.js
windows7-x64
1Scripts/Aimbot 3.0.js
windows10-2004-x64
1Scripts/Aimbot.js
windows7-x64
1Scripts/Aimbot.js
windows10-2004-x64
1Scripts/CC Aimbot.js
windows7-x64
1Scripts/CC Aimbot.js
windows10-2004-x64
1Scripts/De... v2.js
windows7-x64
1Scripts/De... v2.js
windows10-2004-x64
1Scripts/De...rer.js
windows7-x64
1Scripts/De...rer.js
windows10-2004-x64
1Scripts/Mad City 2.js
windows7-x64
1Scripts/Mad City 2.js
windows10-2004-x64
1Scripts/Orca Hub.js
windows7-x64
1Scripts/Orca Hub.js
windows10-2004-x64
1Scripts/OxieHub.js
windows7-x64
1Scripts/OxieHub.js
windows10-2004-x64
1Scripts/TopKek V3.js
windows7-x64
1Scripts/TopKek V3.js
windows10-2004-x64
1loader.dll
windows7-x64
1loader.dll
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
26-04-2024 16:16
Static task
static1
Behavioral task
behavioral1
Sample
Bin/Extensions/FpsUnlocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Bin/Extensions/FpsUnlocker.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Nihon.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Nihon.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Nihon.exe.xml
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Nihon.exe.xml
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
Scripts/Aimbot 3.0.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Scripts/Aimbot 3.0.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Scripts/Aimbot.js
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Scripts/Aimbot.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
Scripts/CC Aimbot.js
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Scripts/CC Aimbot.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
Scripts/Dex Explorer v2.js
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
Scripts/Dex Explorer v2.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
Scripts/Dex Explorer.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Scripts/Dex Explorer.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
Scripts/Mad City 2.js
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Scripts/Mad City 2.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
Scripts/Orca Hub.js
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
Scripts/Orca Hub.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Scripts/OxieHub.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Scripts/OxieHub.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
Scripts/TopKek V3.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Scripts/TopKek V3.js
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
loader.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
loader.dll
Resource
win10v2004-20240419-en
General
-
Target
Scripts/Aimbot 3.0.js
-
Size
98KB
-
MD5
a026af0c23f83d6ec3ee17a4453c7dcf
-
SHA1
e707b0ebf1eac194e90c70767ee29a1c37e1a4a2
-
SHA256
81fe4c1f8cbcf06e43a347fd8c39ceef960995031ae71db385c28636dfce3ec8
-
SHA512
9817501504aa1b4777f8d0b10c9776d224e0aa38e9ca91a6c80d472d5b5ceafac2e507c335a2bd9959073d74912825e1361bae699404b8c3bcdd9306b85c1b79
-
SSDEEP
1536:3N+t5Lq6w48qJ4UJe6wyG9EeG251GX/J3GC1Zqn+MVpx2RnB:kt5L0UJe6wyG9EeG251GX/J3GC1ciVB
Malware Config
Signatures
Processes
-
C:\Windows\system32\wscript.exewscript.exe "C:\Users\Admin\AppData\Local\Temp\Scripts\Aimbot 3.0.js"1⤵PID:3372
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1408 --field-trial-handle=2676,i,447940133669489189,1353734109898858672,262144 --variations-seed-version /prefetch:81⤵PID:3464