6633dc1065eb03be134931bd57332c8ed34a289d5fe181e156c303b36dc0fbce

Login
Reports

Overview

overview

Static

static

HWID Spoof...er.url

windows11-21h2-x64

HWID Spoof...te.url

windows11-21h2-x64

HWID Spoof...or.lnk

windows11-21h2-x64

HWID Spoof...te.url

windows11-21h2-x64

HWID Spoof...PN.url

windows11-21h2-x64

HWID Spoof...Ds.cmd

windows11-21h2-x64

HWID Spoof...id.exe

windows11-21h2-x64

HWID Spoof...64.exe

windows11-21h2-x64

HWID Spoof...Ds.cmd

windows11-21h2-x64

HWID Spoof...64.exe

windows11-21h2-x64

HWID Spoof...pt.lnk

windows11-21h2-x64

HWID Spoof...64.sys

windows11-21h2-x64

HWID Spoof...up.exe

windows11-21h2-x64

HWID Spoof...RU.exe

windows11-21h2-x64

HWID Spoof...ll.exe

windows11-21h2-x64

HWID Spoof...rt.exe

windows11-21h2-x64

HWID Spoof...64.exe

windows11-21h2-x64

HWID Spoof...ew.chm

windows11-21h2-x64

HWID Spoof...ew.exe

windows11-21h2-x64

Analysis

max time kernel
91s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
01/09/2024, 14:34

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

HWID Spoofer/STEP 1 - Uninstall_Clear Traces/Download Revo Uninstaller.url

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

HWID Spoofer/STEP 1 - Uninstall_Clear Traces/Updated Step 1 - Follow instructions on website.url

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

HWID Spoofer/STEP 2 - Edit HWID Registry keys/1. Registry Editor.lnk

Resource

win11-20240802-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

HWID Spoofer/STEP 2 - Edit HWID Registry keys/3. GUID Generator Website.url

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

HWID Spoofer/STEP 3 - Mask your IP Address/1. Download NordVPN.url

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

HWID Spoofer/STEP 4 -Disk Serial NumberID/1. Change Disk IDs.cmd

Resource

win11-20240802-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

HWID Spoofer/STEP 4 -Disk Serial NumberID/_/Volumeid.exe

Resource

win11-20240802-en

windows11-21h2-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

HWID Spoofer/STEP 4 -Disk Serial NumberID/_/Volumeid64.exe

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

HWID Spoofer/STEP 5 - HWIDs of everything/1. Change ALL HWIDs.cmd

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

HWID Spoofer/STEP 5 - HWIDs of everything/_/AMIDEWINx64.exe

Resource

win11-20240802-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

HWID Spoofer/STEP 5 - HWIDs of everything/_/Command Prompt.lnk

Resource

win11-20240802-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

HWID Spoofer/STEP 5 - HWIDs of everything/_/amifldrv64.sys

Resource

win11-20240802-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

HWID Spoofer/STEP 6 - MAC address/1. Install TMACv6.0.7_Setup.exe

Resource

win11-20240802-en

windows11-21h2-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

HWID Spoofer/STEP 8 - Monitor HWID/CRU.exe

Resource

win11-20240802-en

windows11-21h2-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral15

Sample

HWID Spoofer/STEP 8 - Monitor HWID/reset-all.exe

Resource

win11-20240802-en

windows11-21h2-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral16

Sample

HWID Spoofer/STEP 8 - Monitor HWID/restart.exe

Resource

win11-20240802-en

windows11-21h2-x64

7 signatures

150 seconds

discovery

Behavioral task

behavioral17

Sample

HWID Spoofer/STEP 8 - Monitor HWID/restart64.exe

Resource

win11-20240802-en

windows11-21h2-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

HWID Spoofer/STEP 9 - Hide Mouse, Keyboard, and Controller serial numbers (not need for every game)/USBDeview.chm

Resource

win11-20240802-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

HWID Spoofer/STEP 9 - Hide Mouse, Keyboard, and Controller serial numbers (not need for every game)/USBDeview.exe

Resource

win11-20240802-en

windows11-21h2-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target
HWID Spoofer/STEP 4 -Disk Serial NumberID/_/Volumeid64.exe
Size 165KB
Sample240901-rxexqatfjd
SHA256 fb0d02ea26bb1e5df5a07147931caf1ae3d7d1d9b4d83f168b678e7f3a1c0ecd
MD5 81a45f1a91448313b76d2e6d5308aa7a
SHA1 0d615343d5de03da03bce52e11b233093b404083
SHA512 675662f84dfcbf33311f5830db70bff50b6e8a34a4a926de6369c446ea2b1cf8a63e9c94e5a5c2e1d226248f0361a1698448f82118ac4de5a92b64d8fdf8815d
SSDEEP 3072:PngbfXWm18pX82lOl7NuT7DLM5Weo5UFs5QM8JwDmtFk1glurXEa:/gbfXWVoRNuT7DkbFsKM1glI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\HWID Spoofer\STEP 4 -Disk Serial NumberID\_\Volumeid64.exe
"C:\Users\Admin\AppData\Local\Temp\HWID Spoofer\STEP 4 -Disk Serial NumberID\_\Volumeid64.exe"
1⤵
PID:1976

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads