Overview
overview
8Static
static
3HWID Spoof...x).zip
windows10-2004-x64
1HWID Spoof...x).zip
windows11-21h2-x64
1TraceX Fin...er.bat
windows10-2004-x64
3TraceX Fin...er.bat
windows11-21h2-x64
3TraceX Fin...rs.ps1
windows10-2004-x64
3TraceX Fin...rs.ps1
windows11-21h2-x64
3TraceX Fin...ds.ps1
windows10-2004-x64
3TraceX Fin...ds.ps1
windows11-21h2-x64
3TraceX Fin...ds.ps1
windows10-2004-x64
3TraceX Fin...ds.ps1
windows11-21h2-x64
3TraceX Fin...ss.ps1
windows10-2004-x64
3TraceX Fin...ss.ps1
windows11-21h2-x64
3TraceX Fin...id.ps1
windows10-2004-x64
3TraceX Fin...id.ps1
windows11-21h2-x64
3TraceX Fin...ds.ps1
windows10-2004-x64
3TraceX Fin...ds.ps1
windows11-21h2-x64
3TraceX Fin...nt.ps1
windows10-2004-x64
3TraceX Fin...nt.ps1
windows11-21h2-x64
3TraceX Fin...ls.ps1
windows10-2004-x64
3TraceX Fin...ls.ps1
windows11-21h2-x64
3TraceX Fin...pn.ps1
windows10-2004-x64
8TraceX Fin...pn.ps1
windows11-21h2-x64
8TraceX Fin...er.ps1
windows10-2004-x64
3TraceX Fin...er.ps1
windows11-21h2-x64
3TraceX Fin...me.ps1
windows10-2004-x64
3TraceX Fin...me.ps1
windows11-21h2-x64
3TraceX Fin...e.ovpn
windows10-2004-x64
3TraceX Fin...e.ovpn
windows11-21h2-x64
3TraceX Fin...64.exe
windows10-2004-x64
1TraceX Fin...64.exe
windows11-21h2-x64
1TraceX Fin...er.ps1
windows10-2004-x64
3TraceX Fin...er.ps1
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
96s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/06/2026, 19:41
Static task
static1
Behavioral task
behavioral1
Sample
HWID Spoofer Final (tracex).zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
HWID Spoofer Final (tracex).zip
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
TraceX Final/Run-TraceX-HWID-Spoofer.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
TraceX Final/Run-TraceX-HWID-Spoofer.bat
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
TraceX Final/scripts/TraceX-Helpers.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
TraceX Final/scripts/TraceX-Helpers.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
TraceX Final/scripts/change_disk_ids.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
TraceX Final/scripts/change_disk_ids.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
TraceX Final/scripts/change_hardware_ids.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
TraceX Final/scripts/change_hardware_ids.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
TraceX Final/scripts/change_mac_address.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
TraceX Final/scripts/change_mac_address.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
TraceX Final/scripts/change_monitor_hwid.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
TraceX Final/scripts/change_monitor_hwid.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
TraceX Final/scripts/change_registry_hwids.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
TraceX Final/scripts/change_registry_hwids.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
TraceX Final/scripts/create_restore_point.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
TraceX Final/scripts/create_restore_point.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
TraceX Final/scripts/hide_peripheral_serials.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
TraceX Final/scripts/hide_peripheral_serials.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
TraceX Final/scripts/setup_vpn.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
TraceX Final/scripts/setup_vpn.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
TraceX Final/scripts/tracex_cleaner.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
TraceX Final/scripts/tracex_cleaner.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
TraceX Final/scripts/uninstall_game.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
TraceX Final/scripts/uninstall_game.ps1
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
TraceX Final/templates/nordvpn_template.ovpn
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
TraceX Final/templates/nordvpn_template.ovpn
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
TraceX Final/tools/AMIDEWINx64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
TraceX Final/tools/AMIDEWINx64.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
TraceX Final/tools/HWID-Spoofer.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
TraceX Final/tools/HWID-Spoofer.ps1
Resource
win11-20260513-en
windows11-21h2-x64
General
- Target TraceX Final/tools/AMIDEWINx64.exe
- Size 455KB
- Sample260608-yd7lysew21
- SHA256 13037eedd91f9313ec0d807947db65c639642e5ae6497e87d12fa6d19951f78e
- MD5 9adfcdac59db3286690c7eede8da2528
- SHA1 0b54d251438a634bd13b49a1f20587cf03d4598d
- SHA512 fde1700cdb4212593ec2733944a169c7d02f436ca6831719a33482fbfd0be289697c9aa6ce7ddfb6c245e87952b35416929bbf69753d21a24197ac6c2d1243cc
- SSDEEP 6144:PRx1SY2XTh/Fq+1VU1/SznTh8NUc9v4/nOmNAFw+lgBwFejOLlC:PR/2N/I+rUqE9inOmNAFwa/TQ
- TLSH T1B0A4084AEB5224E0D876D1B8C981521AF6B0BC7847349BDB729C41090F76AEC9E3DF58
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: LoadsDriver 1 IoCs
pid Process 680 Process not Found
Processes
-
C:\Users\Admin\AppData\Local\Temp\TraceX Final\tools\AMIDEWINx64.exe"C:\Users\Admin\AppData\Local\Temp\TraceX Final\tools\AMIDEWINx64.exe"1⤵PID:5496
-
C:\Users\Admin\AppData\Local\Temp\TraceX Final\tools\amifldrv64.sys"C:\Users\Admin\AppData\Local\Temp\TraceX Final\tools\amifldrv64.sys"1⤵PID:488