Overview
overview
7Static
static
3Your.Only....PC.url
windows7-x64
1Your.Only....PC.url
windows10-2004-x64
1Your.Only....LE.cmd
windows7-x64
1Your.Only....LE.cmd
windows10-2004-x64
1Your.Only....LE.exe
windows7-x64
1Your.Only....LE.exe
windows10-2004-x64
1Your.Only....x86_64
ubuntu-22.04-amd64
6Your.Only....api.so
ubuntu-22.04-amd64
1Your.Only....64.dll
windows7-x64
1Your.Only....64.dll
windows10-2004-x64
1Your.Only....fg.dll
windows7-x64
1Your.Only....fg.dll
windows10-2004-x64
1Your.Only....bfg.so
ubuntu-22.04-amd64
1Your.Only....40.dll
windows7-x64
1Your.Only....40.dll
windows10-2004-x64
1Your.Only....up.exe
windows7-x64
7Your.Only....up.exe
windows10-2004-x64
7Your.Only....up.exe
windows7-x64
7Your.Only....up.exe
windows10-2004-x64
7Your.Only....st.exe
windows7-x64
7Your.Only....st.exe
windows10-2004-x64
6Your.Only....64.exe
windows7-x64
7Your.Only....64.exe
windows10-2004-x64
7Your.Only....86.exe
windows7-x64
7Your.Only....86.exe
windows10-2004-x64
7Your.Only....64.exe
windows7-x64
7Your.Only....64.exe
windows10-2004-x64
7Your.Only....86.exe
windows7-x64
7Your.Only....86.exe
windows10-2004-x64
7Your.Only....st.msi
windows7-x64
6Your.Only....st.msi
windows10-2004-x64
6Analysis
- max time kernel
91s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 23:15
Static task
static1
Behavioral task
behavioral1
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/YourOnlyMoveIsHUSTLE.cmd
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/YourOnlyMoveIsHUSTLE.cmd
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/YourOnlyMoveIsHUSTLE.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/YourOnlyMoveIsHUSTLE.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/YourOnlyMoveIsHUSTLE.x86_64
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral8
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/libsteam_api.so
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral9
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/steam_api64.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/steam_api64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/tbfg.dll
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/tbfg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/tbfg.so
Resource
ubuntu2204-amd64-20240729-en
Behavioral task
behavioral14
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/vcruntime140.dll
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/vcruntime140.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/dotNetFx40_Full_setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/dotNetFx40_Full_setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/dxwebsetup.exe
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/dxwebsetup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/oalinst.exe
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/oalinst.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/vcredist_2015-2019_x64.exe
Resource
win7-20240903-en
Behavioral task
behavioral23
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/vcredist_2015-2019_x64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/vcredist_2015-2019_x86.exe
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/vcredist_2015-2019_x86.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/vcredist_x64.exe
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/vcredist_x64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/vcredist_x86.exe
Resource
win7-20240708-en
Behavioral task
behavioral29
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/vcredist_x86.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/xnafx40_redist.msi
Resource
win7-20241010-en
Behavioral task
behavioral31
Sample
Your.Only.Move.is.HUSTLE.v1.9.19/_Redist/xnafx40_redist.msi
Resource
win10v2004-20241007-en
General
- Target Your.Only.Move.is.HUSTLE.v1.9.19/Your.Only.Move.is.HUSTLE.v1.9.19/YourOnlyMoveIsHUSTLE.exe
- Size 41.0MB
- Sample241109-28jedsvalh
- SHA256 9cb277ae5c9d1c89058426270cdc0c58e22a4d9b148ac3aebf1fe20b50a62bfd
- MD5 677c486cadd78c34c882aa6c8161132c
- SHA1 f015bfb07d9f8a54bf50937ba8822adb6e9e1cd7
- SHA512 485fc618c164697f8a8a4767f0aa495477c417238482e734125e99dcf259aa3527837bfc39787b1b650de937d109d17b8a3406b639e93de4615eed1d60b0dab6
- SSDEEP 393216:sAnZtt1CNkTixGEmgiKGWYiGcbfVxBHkSF8uvywzluXQr9LKVF+S3ea3QgiHkXWS:snPEXDyiIQe5l
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2812 YourOnlyMoveIsHUSTLE.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Your.Only.Move.is.HUSTLE.v1.9.19\Your.Only.Move.is.HUSTLE.v1.9.19\YourOnlyMoveIsHUSTLE.exe"C:\Users\Admin\AppData\Local\Temp\Your.Only.Move.is.HUSTLE.v1.9.19\Your.Only.Move.is.HUSTLE.v1.9.19\YourOnlyMoveIsHUSTLE.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2812