f2ff60957f197cf7781d73f0111bf3c7938e324cc8066eabe9f7eb34ee9c0c4f

Login
Reports

Overview

overview

Static

static

HWID Bypas...er.url

windows11-21h2-x64

HWID Bypas...te.url

windows11-21h2-x64

HWID Bypas...or.lnk

windows11-21h2-x64

HWID Bypas...te.url

windows11-21h2-x64

HWID Bypas...PN.url

windows11-21h2-x64

HWID Bypas...Ds.cmd

windows11-21h2-x64

HWID Bypas...id.exe

windows11-21h2-x64

HWID Bypas...64.exe

windows11-21h2-x64

HWID Bypas...Ds.cmd

windows11-21h2-x64

HWID Bypas...64.exe

windows11-21h2-x64

HWID Bypas...pt.lnk

windows11-21h2-x64

HWID Bypas...64.sys

windows11-21h2-x64

HWID Bypas...up.exe

windows11-21h2-x64

HWID Bypas...2G.url

windows11-21h2-x64

HWID Bypas...GA.url

windows11-21h2-x64

HWID Bypas...AH.url

windows11-21h2-x64

HWID Bypas...RU.exe

windows11-21h2-x64

HWID Bypas...ll.exe

windows11-21h2-x64

HWID Bypas...rt.exe

windows11-21h2-x64

HWID Bypas...64.exe

windows11-21h2-x64

HWID Bypas...ew.chm

windows11-21h2-x64

HWID Bypas...ew.exe

windows11-21h2-x64

Analysis

max time kernel
146s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
13/06/2024, 00:03

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

HWID Bypass/STEP 1 - Uninstall_Clear Traces/Download Revo Uninstaller.url

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

HWID Bypass/STEP 1 - Uninstall_Clear Traces/Updated Step 1 - Follow instructions on website.url

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

HWID Bypass/STEP 2 - Edit HWID Registry keys/1. Registry Editor.lnk

Resource

win11-20240611-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

HWID Bypass/STEP 2 - Edit HWID Registry keys/3. GUID Generator Website.url

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

HWID Bypass/STEP 3 - Mask _ Setup your IP Address/1. Download NordVPN.url

Resource

win11-20240508-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

HWID Bypass/STEP 4 - Change your Disk Serial NumberID/1. Change Disk IDs.cmd

Resource

win11-20240611-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

HWID Bypass/STEP 4 - Change your Disk Serial NumberID/_/Volumeid.exe

Resource

win11-20240508-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

HWID Bypass/STEP 4 - Change your Disk Serial NumberID/_/Volumeid64.exe

Resource

win11-20240508-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

HWID Bypass/STEP 5 - Change the HWIDs of everything/1. Change ALL HWIDs.cmd

Resource

win11-20240508-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

HWID Bypass/STEP 5 - Change the HWIDs of everything/_/AMIDEWINx64.exe

Resource

win11-20240611-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

HWID Bypass/STEP 5 - Change the HWIDs of everything/_/Command Prompt.lnk

Resource

win11-20240611-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

HWID Bypass/STEP 5 - Change the HWIDs of everything/_/amifldrv64.sys

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

HWID Bypass/STEP 6 - Change your MAC address/1. Install TMACv6.0.7_Setup.exe

Resource

win11-20240508-en

windows11-21h2-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

HWID Bypass/STEP 7 - Create or buy a new game account/G2G.url

Resource

win11-20240419-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

HWID Bypass/STEP 7 - Create or buy a new game account/MMOGA.url

Resource

win11-20240508-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

HWID Bypass/STEP 7 - Create or buy a new game account/MMOGAH.url

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

HWID Bypass/STEP 8 - Change Monitor HWID/CRU.exe

Resource

win11-20240611-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

HWID Bypass/STEP 8 - Change Monitor HWID/reset-all.exe

Resource

win11-20240611-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

HWID Bypass/STEP 8 - Change Monitor HWID/restart.exe

Resource

win11-20240508-en

windows11-21h2-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

HWID Bypass/STEP 8 - Change Monitor HWID/restart64.exe

Resource

win11-20240508-en

windows11-21h2-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

HWID Bypass/STEP 9 - Hide Mouse, Keyboard, and Controller serial numbers/USBDeview.chm

Resource

win11-20240508-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

HWID Bypass/STEP 9 - Hide Mouse, Keyboard, and Controller serial numbers/USBDeview.exe

Resource

win11-20240611-en

windows11-21h2-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target
HWID Bypass/STEP 1 - Uninstall_Clear Traces/Updated Step 1 - Follow instructions on website.url
Size 148B
Sample240613-acantswemd
SHA256 c7a9eb7d13feaaccf24d3cc3a591fe47dbcd1b228bd287c75422776aeb71a4e5
MD5 ef9fa18d6d49e92eaf2324b0d014813a
SHA1 f68a93434a8829909bb047bffb57b8271121f78d
SHA512 5c44360313ce713b3fceaf1a16de6ce66fd2f567d225f80b813f88125a0e3bca21bfd0f4b3ad2a083398778a2183ac2df3e629f5cd57f46215db4e8fbc618b22
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\HWID Bypass\STEP 1 - Uninstall_Clear Traces\Updated Step 1 - Follow instructions on website.url"
1⤵
PID:1660

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads