Overview
overview
10Static
static
10Vortex-123.rar
windows7-x64
7Vortex-123.rar
windows10-2004-x64
1Vortex/Vortex.exe
windows7-x64
7Vortex/Vortex.exe
windows10-2004-x64
8Vortex/__p...12.pyc
windows7-x64
3Vortex/__p...12.pyc
windows10-2004-x64
3Vortex/lib...12.pyc
windows7-x64
3Vortex/lib...12.pyc
windows10-2004-x64
3Vortex/lib/aimbot.py
windows7-x64
3Vortex/lib/aimbot.py
windows10-2004-x64
3Analysis
-
max time kernel
92s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2024 11:03
Behavioral task
behavioral1
Sample
Vortex-123.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Vortex-123.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Vortex/Vortex.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Vortex/Vortex.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Vortex/__pycache__/lunar.cpython-312.pyc
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Vortex/__pycache__/lunar.cpython-312.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Vortex/lib/__pycache__/aimbot.cpython-312.pyc
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Vortex/lib/__pycache__/aimbot.cpython-312.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Vortex/lib/aimbot.py
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
Vortex/lib/aimbot.py
Resource
win10v2004-20241007-en
General
-
Target
Vortex-123.rar
-
Size
84.3MB
-
MD5
4c5c9413090814a0b07c31dbc97ce852
-
SHA1
7c1f3350bc6a945ae677a626ad26dc4ab7117d98
-
SHA256
222a95474744c4152632a32f39113b2e4463b687176165a156ea37b0128ae4ea
-
SHA512
d9841011728fb83ff373a4b506f6997dd4a1b976d6dc56e8239cdf57b742dd53774f283342e915dcfac45ccd88f365c254f9e73e31202ceab84fa6eb783a07f1
-
SSDEEP
1572864:2QPM6CUzkTuolSCJXaGNaZuQ993ymQr+JK7RFuNqi4i7lHxjIPm9/LSAMICDzG:HPFdzjolShuQ9hymBJK87hNyDICDy
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4272 7zFM.exe Token: 35 4272 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4272 7zFM.exe