General

  • Target

    Oneclick-main.zip

  • Size

    1.7MB

  • MD5

    b5284dfa8dda5391cb11c1d428ee403a

  • SHA1

    b6a89f9718ae3a894aaf03ffefbfc9c57af721aa

  • SHA256

    6740d0ca97c88527b23da8c7f6e03066f9c529d0a2e8ff88ddbfed5f0fd34b27

  • SHA512

    c86c92ccad1f112fb0dee768e529bc7a92326574c70626641d4eb2b29cc7b5108407cb728ce62f0b5975b47fbc03e36799ec89780460db76f5424db7ad44d7ff

  • SSDEEP

    24576:hFuTk2CVpuhzK+paNNH2lTnEBvq/JXT/G7agj0HRm7FGYgyKZdyxBh5hOY3i/TwN:hF72Wd+TEZwpi26IRu6yKnyxBFOV/T3C

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Oneclick-main.zip
    .zip
  • Oneclick-main/Changelog.md
  • Oneclick-main/Downloads/AMD.bat
  • Oneclick-main/Downloads/FortniteOptimizerTools.zip
    .zip
  • FortniteOptimizerTools/Fortnite Configs/DX 12/GameUserSettings.ini
  • FortniteOptimizerTools/Fortnite Configs/High Meshes/GameUserSettings.ini
  • FortniteOptimizerTools/Fortnite Configs/Low Meshes/GameUserSettings.ini
  • Oneclick-main/Downloads/OneclickTools.zip
    .zip
  • OneclickTools/Amd/1- What's AMD.txt
  • OneclickTools/Amd/AMD.bat
  • OneclickTools/DPC Checker/1- What's dpclat.txt
  • OneclickTools/DPC Checker/dpclat.exe
    .exe windows:4 windows x86 arch:x86

    6109c06809e7a16475b9b07ee9115652


    Code Sign

    Headers

    Imports

    Sections

  • OneclickTools/Dcontrol/1- What's dControl.txt
  • OneclickTools/Dcontrol/dControl.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • OneclickTools/NSudo/1- What's NSudo.txt
  • OneclickTools/NSudo/NSudoLG.exe
    .exe windows:6 windows x64 arch:x64

    1188b455132bc86c7e9e68ae98ce4171


    Headers

    Imports

    Sections

  • OneclickTools/OOshutup10/1- What's OOSU10.txt
  • OneclickTools/OOshutup10/OOSU10.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • OneclickTools/OOshutup10/QuakedOOshutup10.cfg
  • OneclickTools/Orca/1- What's Orca.txt
  • OneclickTools/Orca/Orca.bat
  • OneclickTools/Power Plan/1- What are these pow files.txt
  • OneclickTools/Power Plan/Quaked Ultimate Performance Idle Off.pow
  • OneclickTools/Power Plan/Quaked Ultimate Performance.pow
  • OneclickTools/Sound/1- What's Sound.txt
  • OneclickTools/Sound/Sound.bat
    .bat .vbs
  • OneclickTools/Timer Resolution/1- What's SetTimerResolution.txt
  • OneclickTools/Timer Resolution/SetTimerResolution.exe
    .exe windows:6 windows x64 arch:x64

    c1c671ec492bcf13ef9a966821b522cb


    Headers

    Imports

    Sections

  • Oneclick-main/Downloads/OpenShellTheme.xml
    .xml
  • Oneclick-main/Downloads/Orca.bat
  • Oneclick-main/Downloads/PowerPlans.zip
    .zip
  • PowerPlans/Quaked Ultimate Performance Idle Off.pow
  • PowerPlans/Quaked Ultimate Performance.pow
  • Oneclick-main/Downloads/QuakedOOshutup10.cfg
  • Oneclick-main/Downloads/QuakedOptimizedNVProflie.nip
  • Oneclick-main/Downloads/Sound.bat
    .bat .vbs
  • Oneclick-main/Downloads/What gets downloaded.md
  • Oneclick-main/Help/Oneclick Help.md
  • Oneclick-main/Help/Oneclick Recommendations.md
  • Oneclick-main/Help/Windows Version Support.md
  • Oneclick-main/License
  • Oneclick-main/README.md
  • Oneclick-main/Unsupported Features.md