Vyron Spoofer.zip
- SHA256 3d445f2b4e5ec21b7ea9fd54f8816c60002fbe5c6fde029771ec6caedf1db2de
Overview
overview
10Static
static
10Vyron Spoofer.zip
windows7-x64
1Vyron Spoofer.zip
windows10-2004-x64
1Vyron Spoo....4.exe
windows7-x64
7Vyron Spoo....4.exe
windows10-2004-x64
7$PLUGINSDIR/INetC.dll
windows7-x64
3$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDIR/app-64.7z
windows7-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
3$PLUGINSDI...rd.bmp
windows7-x64
3$PLUGINSDI...rd.bmp
windows10-2004-x64
7$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows7-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows7-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3Uninstall ...es.exe
windows7-x64
7Uninstall ...es.exe
windows10-2004-x64
7Vyron Spoo...ht.otf
windows7-x64
3Vyron Spoo...ht.otf
windows10-2004-x64
7Vyron Spoo...ld.ttf
windows7-x64
3Vyron Spoo...ld.ttf
windows10-2004-x64
7Behavioral task
behavioral1
Sample
Vyron Spoofer.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Vyron Spoofer.zip
Resource
win10v2004-20240910-en
Behavioral task
behavioral3
Sample
Vyron Spoofer/Gift/Mechvibes.Setup.2.3.4.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Vyron Spoofer/Gift/Mechvibes.Setup.2.3.4.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/INetC.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/WinShell.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/app-64.7z
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Uninstall Mechvibes.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Uninstall Mechvibes.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral29
Sample
Vyron Spoofer/Install These/LEMONMILK-Light.otf
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Vyron Spoofer/Install These/LEMONMILK-Light.otf
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Vyron Spoofer/Install These/Poppins-SemiBold.ttf
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Vyron Spoofer/Install These/Poppins-SemiBold.ttf
Resource
win10v2004-20240802-en
| resource | yara_rule |
|---|---|
| static1/unpack001/Vyron Spoofer/Spoofer/Guna.UI2.dll | family_agenttesla |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Vyron Spoofer/Gift/Mechvibes.Setup.2.3.4.exe |
| unpack002/$PLUGINSDIR/INetC.dll |
| unpack002/$PLUGINSDIR/StdUtils.dll |
| unpack002/$PLUGINSDIR/System.dll |
| unpack002/$PLUGINSDIR/UAC.dll |
| unpack002/$PLUGINSDIR/WinShell.dll |
| unpack003/Mechvibes.exe |
| unpack003/ffmpeg.dll |
| unpack003/libEGL.dll |
| unpack003/libGLESv2.dll |
| unpack003/resources/app.asar.unpacked/node_modules/iohook/builds/electron-v73-win32-x64/build/Release/iohook.node |
| unpack003/resources/app.asar.unpacked/node_modules/iohook/builds/electron-v73-win32-x64/build/Release/uiohook.dll |
| unpack003/resources/app.asar.unpacked/node_modules/iohook/builds/node-v64-win32-x64/build/Release/iohook.node |
| unpack003/resources/app.asar.unpacked/node_modules/iohook/builds/node-v64-win32-x64/build/Release/uiohook.dll |
| unpack003/resources/elevate.exe |
| unpack003/swiftshader/libEGL.dll |
| unpack003/swiftshader/libGLESv2.dll |
| unpack002/$PLUGINSDIR/nsDialogs.dll |
| unpack002/$PLUGINSDIR/nsExec.dll |
| unpack002/$PLUGINSDIR/nsProcess.dll |
| unpack002/$PLUGINSDIR/nsis7z.dll |
| unpack002/Uninstall Mechvibes.exe |
| unpack004/$PLUGINSDIR/StdUtils.dll |
| unpack004/$PLUGINSDIR/System.dll |
| unpack004/$PLUGINSDIR/UAC.dll |
| unpack004/$PLUGINSDIR/WinShell.dll |
| unpack004/$PLUGINSDIR/nsDialogs.dll |
| unpack004/$PLUGINSDIR/nsExec.dll |
| unpack004/$PLUGINSDIR/nsProcess.dll |
| unpack001/Vyron Spoofer/Spoofer/Aqua.Newtonsoft.Json.dll |
| unpack001/Vyron Spoofer/Spoofer/Aqua.dll |
| unpack001/Vyron Spoofer/Spoofer/BouncyCastle.Crypto.dll |
| unpack001/Vyron Spoofer/Spoofer/Remote.Linq.Newtonsoft.Json.dll |
| unpack001/Vyron Spoofer/Spoofer/Remote.Linq.dll |
| unpack001/Vyron Spoofer/Spoofer/VMProtectSDK64.dll |
| unpack001/Vyron Spoofer/Spoofer/Vyron V1.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=3, id=4, version=8047,
count=4, id=14, version=7299,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=83, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=4, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
Sep 6, 2024
Sep 6, 2024
count=57, id=261, version=23524,
count=1, id=260, version=23524,
count=2, id=257, version=26213,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1166, id=1, productName=Unmarked objects,
count=4, id=259, version=26213,
count=27, id=261, version=26213,
count=14, id=260, version=26213,
count=1, id=256, version=26213,
count=136, id=265, version=26213,
count=2, id=253, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=260, version=26706,
count=1, id=259, version=26706,
count=4, id=257, version=26706,
count=22, id=261, version=26706,
count=2, id=257, version=23917,
count=3, id=257, version=27035,
count=114, id=1, productName=Unmarked objects,
count=2, id=261, version=27035,
count=1, id=256, version=27035,
count=1, id=255, version=27035,
count=1, id=258, version=27035,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=10, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=259, version=26706,
count=7, id=257, version=23917,
count=69, id=1, productName=Unmarked objects,
count=5, id=260, version=27035,
count=1, id=256, version=27035,
count=1, id=255, version=27035,
count=1, id=258, version=27035,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=260, version=26706,
count=1, id=259, version=26706,
count=4, id=257, version=26706,
count=20, id=261, version=26706,
count=2, id=257, version=23917,
count=3, id=257, version=27035,
count=111, id=1, productName=Unmarked objects,
count=2, id=261, version=27035,
count=1, id=256, version=27035,
count=1, id=255, version=27035,
count=1, id=258, version=27035,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=10, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=259, version=26706,
count=7, id=257, version=23917,
count=69, id=1, productName=Unmarked objects,
count=5, id=260, version=27035,
count=1, id=256, version=27035,
count=1, id=255, version=27035,
count=1, id=258, version=27035,
Unsigned PE
Checks for missing Authenticode signature.
count=9, id=241, version=40116,
count=119, id=243, version=40116,
count=24, id=242, version=40116,
count=17, id=259, version=23907,
count=30, id=261, version=23907,
count=17, id=260, version=23907,
count=7, id=203, version=65501,
count=89, id=1, productName=Unmarked objects,
count=1, id=264, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=46, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=25, id=1, productName=Unmarked objects,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=259, version=26213,
count=152, id=261, version=26213,
count=35, id=261, version=26706,
count=16, id=260, version=26706,
count=20, id=259, version=26706,
count=19, id=260, version=26213,
count=15, id=257, version=26213,
count=190, id=1, productName=Unmarked objects,
count=43, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=131, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=3, id=4, version=8047,
count=4, id=14, version=7299,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=83, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=4, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=46, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=25, id=1, productName=Unmarked objects,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Sep 6, 2024
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
Sep 6, 2024
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=206, version=65501,
count=46, id=171, productName=VS2010 build 30319, version=30319,
count=20, id=158, productName=VS2010 build 30319, version=30319,
count=105, id=170, productName=VS2010 build 30319, version=30319,
count=17, id=203, version=65501,
count=199, id=1, productName=Unmarked objects,
count=70, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
AgentTesla payload
Nov 25, 2023
Sep 6, 2024
Mar 8, 2023
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Sep 6, 2024
Sep 6, 2024
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.