$RFDB4ES.rar
- SHA256 f578d77e5264494fd9cf4b740953b12b348745c43cc256cc5339c6a91413f909
Overview
overview
9Static
static
7lcb spoofe...er.exe
windows7-x64
1lcb spoofe...er.exe
windows10-2004-x64
1lcb spoofe...er.bat
windows7-x64
1lcb spoofe...er.bat
windows10-2004-x64
1lcb spoofe...er.bat
windows7-x64
1lcb spoofe...er.bat
windows10-2004-x64
1lcb spoofe...ht.bat
windows7-x64
8lcb spoofe...ht.bat
windows10-2004-x64
8lcb spoofe...er.exe
windows7-x64
1lcb spoofe...er.exe
windows10-2004-x64
1lcb spoofe...er.exe
windows7-x64
1lcb spoofe...er.exe
windows10-2004-x64
1lcb spoofe...er.bat
windows7-x64
9lcb spoofe...er.bat
windows10-2004-x64
9lcb spoofe...er.exe
windows7-x64
9lcb spoofe...er.exe
windows10-2004-x64
9lcb spoofe...n1.bat
windows7-x64
7lcb spoofe...n1.bat
windows10-2004-x64
5lcb spoofe...n2.bat
windows7-x64
8lcb spoofe...n2.bat
windows10-2004-x64
8lcb spoofe...n3.bat
windows7-x64
7lcb spoofe...n3.bat
windows10-2004-x64
1lcb spoofe...AC.bat
windows7-x64
4lcb spoofe...AC.bat
windows10-2004-x64
4lcb spoofe...up.exe
windows7-x64
3lcb spoofe...up.exe
windows10-2004-x64
3lcb spoofe...ck.exe
windows7-x64
1lcb spoofe...ck.exe
windows10-2004-x64
1lcb spoofe...64.dll
windows7-x64
1lcb spoofe...64.dll
windows10-2004-x64
1lcb spoofe...64.dll
windows7-x64
1lcb spoofe...64.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
lcb spoofer_updated_quack/Loader.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
lcb spoofer_updated_quack/Loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
lcb spoofer_updated_quack/Serial Checker.bat
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
lcb spoofer_updated_quack/Serial Checker.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
lcb spoofer_updated_quack/cleaners/FortniteCleaner.bat
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
lcb spoofer_updated_quack/cleaners/FortniteCleaner.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
lcb spoofer_updated_quack/cleaners/Midnight.bat
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
lcb spoofer_updated_quack/cleaners/Midnight.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
lcb spoofer_updated_quack/cleaners/Toruney_Cleaner.exe
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
lcb spoofer_updated_quack/cleaners/Toruney_Cleaner.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
lcb spoofer_updated_quack/cleaners/cleaner.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
lcb spoofer_updated_quack/cleaners/cleaner.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/New Cleaner.bat
Resource
win7-20241023-en
Behavioral task
behavioral14
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/New Cleaner.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/applecleaner.exe
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/applecleaner.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/clean1.bat
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/clean1.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/clean2.bat
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/clean2.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/clean3.bat
Resource
win7-20241023-en
Behavioral task
behavioral22
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/clean3.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/eac install/EAC.bat
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/eac install/EAC.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/eac install/EasyAntiCheat_EOS_Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
lcb spoofer_updated_quack/cleaners/leakedshit/eac install/EasyAntiCheat_EOS_Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
lcb spoofer_updated_quack/lcb_spoof_crack.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
lcb spoofer_updated_quack/lcb_spoof_crack.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
lcb spoofer_updated_quack/libcrypto-3-x64.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
lcb spoofer_updated_quack/libcrypto-3-x64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
lcb spoofer_updated_quack/libssl-3-x64.dll
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
lcb spoofer_updated_quack/libssl-3-x64.dll
Resource
win10v2004-20241007-en
| resource | yara_rule |
|---|---|
| static1/unpack001/lcb spoofer_updated_quack/cleaners/leakedshit/applecleaner.exe | themida |
Embeds OpenSSL, may be used to circumvent TLS interception.
| resource | yara_rule |
|---|---|
| static1/unpack001/lcb spoofer_updated_quack/libcrypto-3-x64.dll | embeds_openssl |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/lcb spoofer_updated_quack/Loader.exe |
| unpack001/lcb spoofer_updated_quack/cleaners/Toruney_Cleaner.exe |
| unpack001/lcb spoofer_updated_quack/cleaners/cleaner.exe |
| unpack001/lcb spoofer_updated_quack/cleaners/leakedshit/applecleaner.exe |
| unpack001/lcb spoofer_updated_quack/lcb_spoof_crack.exe |
| unpack001/lcb spoofer_updated_quack/libcrypto-3-x64.dll |
| unpack001/lcb spoofer_updated_quack/libssl-3-x64.dll |
Unsigned PE
Checks for missing Authenticode signature.
count=19, id=259, version=30795,
count=212, id=261, version=30795,
count=24, id=260, version=30795,
count=8, id=253, version=33808,
count=12, id=259, version=33808,
count=19, id=260, version=33808,
count=101, id=261, version=33808,
count=2, id=260, version=33814,
count=9, id=261, version=33814,
count=126, id=260, version=34226,
count=26, id=260, version=31107,
count=34, id=257, version=30795,
count=7, id=156, version=21202,
count=373, id=1, productName=Unmarked objects,
count=9, id=265, version=34120,
count=1, id=255, version=34120,
count=1, id=258, version=34120,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=33218,
count=3, id=259, version=33218,
count=27, id=261, version=33218,
count=6, id=257, version=33218,
count=5, id=257, version=30795,
count=130, id=1, productName=Unmarked objects,
count=1, id=265, version=33522,
count=1, id=255, version=33522,
count=1, id=151,
count=1, id=258, version=33522,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=257, version=33731,
count=3, id=259, version=33731,
count=11, id=260, version=33731,
count=23, id=261, version=33731,
count=4, id=257, version=30795,
count=70, id=1, productName=Unmarked objects,
count=1, id=261, version=33811,
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=4, id=259, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=32, id=261, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=6, id=257, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=2, id=260, version=27412,
count=17, id=257, version=27412,
count=297, id=1, productName=Unmarked objects,
count=4, id=265, version=31107,
count=1, id=255, version=31107,
count=1, id=151,
count=1, id=258, version=31107,
Sep 12, 2023
SERIALNUMBER=2585063-4,CN=EasyAntiCheat Oy,O=EasyAntiCheat Oy,STREET=Tammasaarenkatu 3,L=Helsinki,ST=Uusimaa,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=2585063-4,CN=EasyAntiCheat Oy,O=EasyAntiCheat Oy,STREET=Tammasaarenkatu 3,L=Helsinki,ST=Uusimaa,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Unsigned PE
Checks for missing Authenticode signature.
count=19, id=259, version=30795,
count=212, id=261, version=30795,
count=24, id=260, version=30795,
count=8, id=253, version=33808,
count=12, id=259, version=33808,
count=19, id=260, version=33808,
count=101, id=261, version=33808,
count=2, id=260, version=33814,
count=9, id=261, version=33814,
count=126, id=260, version=34226,
count=26, id=260, version=31107,
count=34, id=257, version=30795,
count=7, id=156, version=21202,
count=373, id=1, productName=Unmarked objects,
count=9, id=265, version=34120,
count=1, id=255, version=34120,
count=1, id=258, version=34120,
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33030,
count=12, id=261, version=33030,
count=8, id=260, version=33030,
count=4, id=259, version=33030,
count=193, id=1, productName=Unmarked objects,
count=11, id=257, version=30795,
count=35, productName=Unmarked objects (old),
count=915, id=260, version=33130,
count=1, id=256, version=33130,
count=1, id=255, version=33130,
count=1, id=258, version=33130,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33030,
count=13, id=261, version=33030,
count=8, id=260, version=33030,
count=4, id=259, version=33030,
count=4, id=257, version=30795,
count=3, id=257, version=33130,
count=603, id=1, productName=Unmarked objects,
count=102, id=260, version=33130,
count=1, id=256, version=33130,
count=1, id=255, version=33130,
count=1, id=258, version=33130,