Analysis
- max time kernel
149s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 00:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RBX - Injector_[unknowncheats.me]_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
RBX - Injector_[unknowncheats.me]_.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target RBX - Injector_[unknowncheats.me]_.exe
- Size 468KB
- Sample260806-afnd4atzdx
- SHA256 9540f4773fec09d0ce952d082e5e097cf8dfa03ac0b78216c2d18cabc4e483f1
- MD5 e13b105caceb95bdab647abdf5e6e39c
- SHA1 9760d1cafdf22924329455b8147d11f4f9b25c85
- SHA512 29d81bdc050f2b302d9ccb0c77b0e253e8ec6119c8ad1333ccc2f2ea3e777eb2ca219be3341d3a3c16110dc66888193f9404b7c17e2bcdf0b81296e530d10643
- SSDEEP 6144:lwHBZ0JBCTPo2WToXqaTQ+gAW+pMFYK0MjHJfVDn+fhBnwBQn+XpS7A3PUikgifK:lSR7zAAPMFYK0Mjp9n+f6Qh1Yifn/aP
- TLSH T1B8A49F41F1A954FCD02B9138C6C6AD0BFE773448172056CB63D499E42FA36F4ABBB612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe 3868 RBX - Injector_[unknowncheats.me]_.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3868 RBX - Injector_[unknowncheats.me]_.exe - Suspicious behavior: RenamesItself 1 IoCs
pid Process 3868 RBX - Injector_[unknowncheats.me]_.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3868 RBX - Injector_[unknowncheats.me]_.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\RBX - Injector_[unknowncheats.me]_.exe"C:\Users\Admin\AppData\Local\Temp\RBX - Injector_[unknowncheats.me]_.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
PID:3868