Overview
overview
5Static
static
519a3e0-Awe...23.zip
windows10-2004-x64
119a3e0-Awe...23.zip
windows11-21h2-x64
1Awesomekil...nk.txt
windows10-2004-x64
1Awesomekil...nk.txt
windows11-21h2-x64
3Awesomekil...cs.zip
windows10-2004-x64
1Awesomekil...cs.zip
windows11-21h2-x64
1Awesomekil...nk.txt
windows10-2004-x64
1Awesomekil...nk.txt
windows11-21h2-x64
3Awesomekil...te.jpg
windows10-2004-x64
1Awesomekil...te.jpg
windows11-21h2-x64
Awesomekil...ay.ini
windows10-2004-x64
1Awesomekil...ay.ini
windows11-21h2-x64
3Awesomekil...om.ini
windows10-2004-x64
1Awesomekil...om.ini
windows11-21h2-x64
3Awesomekil...om.ini
windows10-2004-x64
1Awesomekil...om.ini
windows11-21h2-x64
3Awesomekil...ur.ini
windows10-2004-x64
1Awesomekil...ur.ini
windows11-21h2-x64
3Awesomekil...11.dll
windows10-2004-x64
1Awesomekil...11.dll
windows11-21h2-x64
1Awesomekil...6e.dll
windows10-2004-x64
1Awesomekil...6e.dll
windows11-21h2-x64
1Awesomekil...gi.dll
windows10-2004-x64
1Awesomekil...gi.dll
windows11-21h2-x64
1Awesomekil...ion.fx
windows10-2004-x64
3Awesomekil...ion.fx
windows11-21h2-x64
3Awesomekil...oom.fx
windows10-2004-x64
3Awesomekil...oom.fx
windows11-21h2-x64
3Awesomekil...ect.fx
windows10-2004-x64
3Awesomekil...ect.fx
windows11-21h2-x64
3Awesomekil...ass.fx
windows10-2004-x64
3Awesomekil...ass.fx
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
31/05/2026, 10:42
Static task
static1
Behavioral task
behavioral1
Sample
19a3e0-Awesomekills_Graphics_12.23.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
19a3e0-Awesomekills_Graphics_12.23.zip
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
Awesomekills_Graphics_12.23/Installing/1. Install VisualV/Link.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Awesomekills_Graphics_12.23/Installing/1. Install VisualV/Link.txt
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
Awesomekills_Graphics_12.23/Installing/2. Install Awesomekills Graphics.oiv/Awesomekills Graphics.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Awesomekills_Graphics_12.23/Installing/2. Install Awesomekills Graphics.oiv/Awesomekills Graphics.zip
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
Awesomekills_Graphics_12.23/Installing/3. Install Reshade/Link.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Awesomekills_Graphics_12.23/Installing/3. Install Reshade/Link.txt
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
Awesomekills_Graphics_12.23/Installing/4. Delete reshade-shaders folder from your GTAV folder/Delete.jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Awesomekills_Graphics_12.23/Installing/4. Delete reshade-shaders folder from your GTAV folder/Delete.jpg
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesomekills_NORT_Gameplay.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesomekills_NORT_Gameplay.ini
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesom.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesom.ini
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesom.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesom.ini
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/advancedblur.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/advancedblur.ini
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/d3d11.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/d3d11.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/d3dcompiler_46e.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/d3dcompiler_46e.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/dxgi.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/dxgi.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbadaptation.fx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbadaptation.fx
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbbloom.fx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbbloom.fx
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbeffect.fx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbeffect.fx
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbeffectpostpass.fx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbeffectpostpass.fx
Resource
win11-20260513-en
windows11-21h2-x64
General
- Target Awesomekills_Graphics_12.23/Installing/4. Delete reshade-shaders folder from your GTAV folder/Delete.jpg
- Size 473KB
- Sample260531-mrrbcaey7t
- SHA256 6314854e82c577458f8477e32068368120aa308768400837e332ae3a74dc56ef
- MD5 4b57ea286d48d8f79f743f002aef63aa
- SHA1 4559535bcd7364691d1da858e3cfe93146c4d2ef
- SHA512 3ca9780dfe4a7903be665a90897ca9ca4f0052f9932e6b41af600201789e1ea7665cc1de61b19c6fa4dd3a841820e2cbed6185ae58565d62c675f68820d98039
- SSDEEP 12288:gJOytnz+Ls1SLJo+e4gCny6moftWzXjB4:aPnz+4SmT4gh6moftSB4
- TLSH T1A3A4C1A289B57F12FD220D2953A16FAA114D182F5BE51308F49ECF873387D9A709F842
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5000 mspaint.exe 5000 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 5000 mspaint.exe 5000 mspaint.exe 5000 mspaint.exe 5000 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Awesomekills_Graphics_12.23\Installing\4. Delete reshade-shaders folder from your GTAV folder\Delete.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5000
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4488