Overview
overview
8Static
static
3ScreamSploit.rar
windows7-x64
3ScreamSploit.rar
windows10-2004-x64
3ScreamSplo...ts.dll
windows7-x64
1ScreamSplo...ts.dll
windows10-2004-x64
1ScreamSplo...LL.dll
windows7-x64
5ScreamSplo...LL.dll
windows10-2004-x64
5ScreamSplo...it.dll
windows7-x64
1ScreamSplo...it.dll
windows10-2004-x64
1ScreamSplo...on.dll
windows7-x64
1ScreamSplo...on.dll
windows10-2004-x64
1ScreamSplo...on.xml
windows7-x64
3ScreamSplo...on.xml
windows10-2004-x64
1ScreamSplo...de.dll
windows7-x64
3ScreamSplo...de.dll
windows10-2004-x64
8ScreamSplo...PI.dll
windows7-x64
1ScreamSplo...PI.dll
windows10-2004-x64
1ScreamSplo...it.exe
windows7-x64
6ScreamSplo...it.exe
windows10-2004-x64
7ScreamSplo...er.exe
windows7-x64
3ScreamSplo...er.exe
windows10-2004-x64
3ScreamSplo...ng.xml
windows7-x64
3ScreamSplo...ng.xml
windows10-2004-x64
1ScreamSplo...er.exe
windows7-x64
3ScreamSplo...er.exe
windows10-2004-x64
3ScreamSplo...32.dll
windows7-x64
3ScreamSplo...32.dll
windows10-2004-x64
3ScreamSplo...es.lua
windows7-x64
3ScreamSplo...es.lua
windows10-2004-x64
3ScreamSplo..._FE.iy
windows7-x64
3ScreamSplo..._FE.iy
windows10-2004-x64
3ScreamSplo...ey.lua
windows7-x64
3ScreamSplo...ey.lua
windows10-2004-x64
3Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/08/2024, 20:09
Static task
static1
Behavioral task
behavioral1
Sample
ScreamSploit.rar
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ScreamSploit.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
ScreamSploit/EasyExploits.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
ScreamSploit/EasyExploits.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
ScreamSploit/EasyExploitsDLL.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
ScreamSploit/EasyExploitsDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
ScreamSploit/ICSharpCode.AvalonEdit.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
ScreamSploit/ICSharpCode.AvalonEdit.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
ScreamSploit/Newtonsoft.Json.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
ScreamSploit/Newtonsoft.Json.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
ScreamSploit/Newtonsoft.Json.xml
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
ScreamSploit/Newtonsoft.Json.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
ScreamSploit/OxygenBytecode.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
ScreamSploit/OxygenBytecode.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
ScreamSploit/OxygenU_API.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
ScreamSploit/OxygenU_API.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
ScreamSploit/ScreamSploit.exe
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
ScreamSploit/ScreamSploit.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
ScreamSploit/ScreamUpdater.exe
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
ScreamSploit/ScreamUpdater.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
ScreamSploit/bin/lua_highlighting.xml
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
ScreamSploit/bin/lua_highlighting.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
ScreamSploit/bin/rbxfpsunlocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
ScreamSploit/bin/rbxfpsunlocker.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
ScreamSploit/discord-rpc-w32.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
ScreamSploit/discord-rpc-w32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
ScreamSploit/scripts/PhantomForces.lua
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
ScreamSploit/scripts/PhantomForces.lua
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
ScreamSploit/workspace/IY_FE.iy
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
ScreamSploit/workspace/IY_FE.iy
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
ScreamSploit/workspace/VJKey.lua
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
ScreamSploit/workspace/VJKey.lua
Resource
win10v2004-20240802-en
General
-
Target
ScreamSploit/bin/lua_highlighting.xml
-
Size
3KB
-
MD5
6da13a5dc6fc3ac051b712ebeb0ccf9e
-
SHA1
40f1f8f2b1a920098fc5dd81a6d790f9a1bfb7af
-
SHA256
c996fc0c386f8797b11d7d7104694b726b29d3c7e874c98f24ec39edbd8c69b2
-
SHA512
e4c388cc8e64e925c16a117ebf63d3675516fbac07149d9f6a0570724db11776147ac64f0d5fc3aa745df575026738b804fb919666c62189a3cfaa72b15b2aa7
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\ScreamSploit\bin\lua_highlighting.xml"1⤵PID:4152