Overview
overview
10Static
static
3OblivionCh....1.rar
windows7-x64
10OblivionCh....1.rar
windows10-2004-x64
1OblivionCh...s.admx
windows7-x64
3OblivionCh...s.admx
windows10-2004-x64
3OblivionCh...er.pdb
windows7-x64
3OblivionCh...er.pdb
windows10-2004-x64
3OblivionCh...ui.ini
windows7-x64
1OblivionCh...ui.ini
windows10-2004-x64
1OblivionCh...n.json
windows7-x64
3OblivionCh...n.json
windows10-2004-x64
3OblivionCh...ingw.h
windows7-x64
3OblivionCh...ingw.h
windows10-2004-x64
3OblivionCh...sert.h
windows7-x64
3OblivionCh...sert.h
windows10-2004-x64
3OblivionCh...onio.h
windows7-x64
3OblivionCh...onio.h
windows10-2004-x64
3OblivionCh...type.h
windows7-x64
3OblivionCh...type.h
windows10-2004-x64
3OblivionCh.../dir.h
windows7-x64
3OblivionCh.../dir.h
windows10-2004-x64
3OblivionCh...rect.h
windows7-x64
3OblivionCh...rect.h
windows10-2004-x64
3OblivionCh...rent.h
windows7-x64
3OblivionCh...rent.h
windows10-2004-x64
3OblivionCh.../dos.h
windows7-x64
3OblivionCh.../dos.h
windows10-2004-x64
3OblivionCh...rrno.h
windows7-x64
3OblivionCh...rrno.h
windows10-2004-x64
3OblivionCh...xcpt.h
windows7-x64
3OblivionCh...xcpt.h
windows10-2004-x64
3OblivionCh...cntl.h
windows7-x64
3OblivionCh...cntl.h
windows10-2004-x64
3Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
14-01-2025 21:10
Static task
static1
Behavioral task
behavioral1
Sample
OblivionCheatVIP 2.1.rar
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral2
Sample
OblivionCheatVIP 2.1.rar
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
OblivionCheatVIP 2.1/Addons/Microsoft/WinMaps.admx
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
OblivionCheatVIP 2.1/Addons/Microsoft/WinMaps.admx
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
OblivionCheatVIP 2.1/Addons/Zlib/6.5/Oblivion Client - Installer.pdb
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
OblivionCheatVIP 2.1/Addons/Zlib/6.5/Oblivion Client - Installer.pdb
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
OblivionCheatVIP 2.1/Addons/Zlib/6.5/imgui.ini
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral8
Sample
OblivionCheatVIP 2.1/Addons/Zlib/6.5/imgui.ini
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
OblivionCheatVIP 2.1/Addons/Zlib/6.5/login.json
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral10
Sample
OblivionCheatVIP 2.1/Addons/Zlib/6.5/login.json
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/_mingw.h
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral12
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/_mingw.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/assert.h
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral14
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/assert.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/conio.h
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral16
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/conio.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/ctype.h
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral18
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/ctype.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/dir.h
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/dir.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/direct.h
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/direct.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/dirent.h
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral24
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/dirent.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/dos.h
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral26
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/dos.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/errno.h
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral28
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/errno.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/excpt.h
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral30
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/excpt.h
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/fcntl.h
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
OblivionCheatVIP 2.1/Compilers/tinycc/include/fcntl.h
Resource
win10v2004-20241007-en
windows10-2004-x64
General
-
Target
OblivionCheatVIP 2.1.rar
-
Size
45.5MB
-
MD5
e1bdb1bb87c0e037710f6305c54c969a
-
SHA1
9b9f9848036fb35395e50b515ed45169d6883436
-
SHA256
f139ed18bca38e4e61fa88f94f0a070d217df1c1f647191510253352724ea1b5
-
SHA512
d839d93fbf3547f84ea465f6e9423b5d70b70e840c9f2e0df906cb8f483ea58524c5c79f6badb1f9b2df7a0e7b640904ebca488e36a07dc2dd62edf0f74ccc13
-
SSDEEP
786432:u5r8IfJQOhn0irjgZzaSiI5RTbhVRaqm9hrb/CU0ItR8uZQouD:gRJhhnPruJXByqgPtR8uSD
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3720 7zFM.exe Token: 35 3720 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3720 7zFM.exe