Analysis
- max time kernel
298s - max time network
203s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/05/2026, 14:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rbxfpsunlocker.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
43 signatures
300 seconds
Behavioral task
behavioral2
Sample
rbxfpsunlocker.exe
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
300 seconds
General
- Target rbxfpsunlocker.exe
- Size 488KB
- Sample260503-rcwpqset5p
- SHA256 d0685e397486bd9f54eda33133e87e3970dedf5038ef0e4d058de34d796d72ac
- MD5 52f46ced3b06b19eac3369fbdb4ee2ee
- SHA1 1bc549fa770b1bf3925248a3853a87af9948381f
- SHA512 d65a7f73a497e18d0123306c3e940cdd5b22f61ad88fcd9a334c95bab0db665a8e61d11c9c78a656cbfdd7a691e782351fa712aa97c6f38f1d641ae91e3d23af
- SSDEEP 6144:9nsLTb6hU1R1IDT3nn/b10WyIZUdA8CQ3mAg0y0Noh+p9NWRzbX:6TbgrDT3n/b6qiA8CQqvYogp/6
- TLSH T1D2B405D5E6EC30F4D36681388876C52FE6727C5D032186AB23E46E1B3F266E05DFA611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe 5144 rbxfpsunlocker.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5144 rbxfpsunlocker.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 5144 rbxfpsunlocker.exe