4558e5347818874f767466464daa78d5fcbf4180e2e4214e8bcd241cf8cf4288 | Triage

Submit
Reports

Overview

overview

Static

static

Furk-Ultra...ss.bat

windows7-x64

7

Furk-Ultra...ss.bat

windows10-2004-x64

8

Furk-Ultra...ra.exe

windows7-x64

6

Furk-Ultra...ra.exe

windows10-2004-x64

6

Furk-Ultra...it.dll

windows7-x64

1

Furk-Ultra...it.dll

windows10-2004-x64

1

Furk-Ultra...on.dll

windows7-x64

1

Furk-Ultra...on.dll

windows10-2004-x64

1

Furk-Ultra... V2.js

windows7-x64

3

Furk-Ultra... V2.js

windows10-2004-x64

3

Furk-Ultra...ock.js

windows7-x64

3

Furk-Ultra...ock.js

windows10-2004-x64

3

Furk-Ultra...der.js

windows7-x64

3

Furk-Ultra...der.js

windows10-2004-x64

3

Furk-Ultra...ipt.js

windows7-x64

3

Furk-Ultra...ipt.js

windows10-2004-x64

3

Furk-Ultra...rer.js

windows7-x64

3

Furk-Ultra...rer.js

windows10-2004-x64

3

Furk-Ultra...Hub.js

windows7-x64

3

Furk-Ultra...Hub.js

windows10-2004-x64

3

Furk-Ultra...ass.js

windows7-x64

3

Furk-Ultra...ass.js

windows10-2004-x64

3

Furk-Ultra...ode.js

windows7-x64

3

Furk-Ultra...ode.js

windows10-2004-x64

3

Furk-Ultra...ce.dll

windows7-x64

1

Furk-Ultra...ce.dll

windows10-2004-x64

1

Furk-Ultra...ss.exe

windows7-x64

7

Furk-Ultra...ss.exe

windows10-2004-x64

8

Furk-Ultra...s1.exe

windows7-x64

7

Furk-Ultra...s1.exe

windows10-2004-x64

7

Furk-Ultra...er.dll

windows7-x64

3

Furk-Ultra...er.dll

windows10-2004-x64

3

Analysis

max time kernel
136s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
05-11-2024 04:46

Sharing

Static task

static1

pyinstaller blankgrabber empyrean

6 signatures

Behavioral task

behavioral1

Sample

Furk-Ultra-main/Bypass.bat

Resource

win7-20240903-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

Furk-Ultra-main/Bypass.bat

Resource

win10v2004-20241007-en

collection credential_access defense_evasion discovery execution persistence privilege_escalation spyware stealer upx

windows10-2004-x64

24 signatures

150 seconds

Behavioral task

behavioral3

Sample

Furk-Ultra-main/FurkUltra.exe

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

Furk-Ultra-main/FurkUltra.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

Furk-Ultra-main/ICSharpCode.AvalonEdit.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Furk-Ultra-main/ICSharpCode.AvalonEdit.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Furk-Ultra-main/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Furk-Ultra-main/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Furk-Ultra-main/Scripts/Dex Explorer V2.js

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Furk-Ultra-main/Scripts/Dex Explorer V2.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Furk-Ultra-main/Scripts/FPS Aimlock.js

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Furk-Ultra-main/Scripts/FPS Aimlock.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Furk-Ultra-main/Scripts/Hitbox Extender.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Furk-Ultra-main/Scripts/Hitbox Extender.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Furk-Ultra-main/Scripts/Kick Off Script.js

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Furk-Ultra-main/Scripts/Kick Off Script.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Furk-Ultra-main/Scripts/Old DEX Explorer.js

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Furk-Ultra-main/Scripts/Old DEX Explorer.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Furk-Ultra-main/Scripts/TopKek ScriptHub.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Furk-Ultra-main/Scripts/TopKek ScriptHub.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Furk-Ultra-main/Scripts/[FE] Chat Bypass.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Furk-Ultra-main/Scripts/[FE] Chat Bypass.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Furk-Ultra-main/Scripts/[FE] God Mode.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Furk-Ultra-main/Scripts/[FE] God Mode.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Furk-Ultra-main/System.Diagnostics.DiagnosticSource.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Furk-Ultra-main/System.Diagnostics.DiagnosticSource.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Furk-Ultra-main/bin/Bypass.exe

Resource

win7-20241010-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

Furk-Ultra-main/bin/Bypass.exe

Resource

win10v2004-20241007-en

collection credential_access defense_evasion discovery execution persistence privilege_escalation spyware stealer upx

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral29

Sample

Furk-Ultra-main/bin/Bypass1.exe

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

Furk-Ultra-main/bin/Bypass1.exe

Resource

win10v2004-20241007-en

discovery persistence privilege_escalation spyware stealer upx

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral31

Sample

Furk-Ultra-main/bin/Helper.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

Furk-Ultra-main/bin/Helper.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Furk-Ultra-main/Newtonsoft.Json.dll
Size

683KB
MD5

6815034209687816d8cf401877ec8133
SHA1

1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
SHA256

7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
SHA512

3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
SSDEEP

12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Furk-Ultra-main\Newtonsoft.Json.dll,#1
1⤵
PID:4384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy