Overview
overview
3Static
static
3New WinRAR...ve.rar
windows10-2004-x64
1New WinRAR...ve.rar
windows11-ltsc_2024-x64
1rb6/Extern...es.bat
windows10-2004-x64
3rb6/Extern...es.bat
windows11-ltsc_2024-x64
3rb6/Extern...pack.h
windows10-2004-x64
3rb6/Extern...pack.h
windows11-ltsc_2024-x64
3rb6/Extern...edit.h
windows10-2004-x64
3rb6/Extern...edit.h
windows11-ltsc_2024-x64
3rb6/Extern...type.h
windows10-2004-x64
3rb6/Extern...type.h
windows11-ltsc_2024-x64
3rb6/Extern...ro.cpp
windows10-2004-x64
3rb6/Extern...ro.cpp
windows11-ltsc_2024-x64
3rb6/Extern...ro.hpp
windows10-2004-x64
3rb6/Extern...ro.hpp
windows11-ltsc_2024-x64
3rb6/Rainbo...ot.cpp
windows10-2004-x64
3rb6/Rainbo...ot.cpp
windows11-ltsc_2024-x64
3rb6/Rainbo...io.cpp
windows10-2004-x64
3rb6/Rainbo...io.cpp
windows11-ltsc_2024-x64
3rb6/Rainbo...ot.cpp
windows10-2004-x64
3rb6/Rainbo...ot.cpp
windows11-ltsc_2024-x64
3rb6/Rainbo...es.cpp
windows10-2004-x64
3rb6/Rainbo...es.cpp
windows11-ltsc_2024-x64
3rb6/Rainbo...ad.cpp
windows10-2004-x64
3rb6/Rainbo...ad.cpp
windows11-ltsc_2024-x64
3rb6/Rainbo...w6.hpp
windows10-2004-x64
3rb6/Rainbo...w6.hpp
windows11-ltsc_2024-x64
3rb6/config.hpp
windows10-2004-x64
3rb6/config.hpp
windows11-ltsc_2024-x64
3rb6/direct...ok.cpp
windows10-2004-x64
3rb6/direct...ok.cpp
windows11-ltsc_2024-x64
3rb6/direct...ok.hpp
windows10-2004-x64
3rb6/direct...ok.hpp
windows11-ltsc_2024-x64
3General
- Target New WinRAR archive.rar
- Size 5.5MB
- Sample260822-ef5qlavwft
- SHA256 a57587b0d36061a56aff449976ba1776fcc9ec0acc7b34bd5a3394467350a22b
- MD5 8b06c41c7d54df8376153b7268efeaf8
- SHA1 6c0c4f8cac0815487276e1441958ec008e928947
- SHA512 f8bce86662dd0ba18675d114fa61e22fa8420145b1b0b783d6257783483c7cd6cfda006b6bf61efde08bce110f1570f5d018f370703f58bdc5951855b9c428e5
- SSDEEP 98304:JWa7Ztavc2GNcBu9qRRxLpqHeNFT3wRgSqvG0OXwq5QaEUYPRN6rkSHVuxFH8f:JWa7Zz2rLjqHeNFTwRgSq5OXwX5UQ/6D
- TLSH T10D46331388691EB33E02B21C735A3F917DF861C71C23C16D8DF1A6A5D87301996A9DAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
New WinRAR archive.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
New WinRAR archive.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
rb6/External/Zydis/dependencies/zycore/include/Zycore/Types.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
rb6/External/Zydis/dependencies/zycore/include/Zycore/Types.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
rb6/External/imgui/imstb_rectpack.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
rb6/External/imgui/imstb_rectpack.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
rb6/External/imgui/imstb_textedit.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
rb6/External/imgui/imstb_textedit.h
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
rb6/External/imgui/imstb_truetype.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
rb6/External/imgui/imstb_truetype.h
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
rb6/External/kiero/kiero.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
rb6/External/kiero/kiero.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
rb6/External/kiero/kiero.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
rb6/External/kiero/kiero.hpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
rb6/Rainbow Six Siege/fn/aimbot.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
rb6/Rainbow Six Siege/fn/aimbot.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
rb6/Rainbow Six Siege/fn/config_io.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
rb6/Rainbow Six Siege/fn/config_io.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
rb6/Rainbow Six Siege/fn/triggerbot.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
rb6/Rainbow Six Siege/fn/triggerbot.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
rb6/Rainbow Six Siege/fn/visuals_renderables.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
rb6/Rainbow Six Siege/fn/visuals_renderables.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
rb6/Rainbow Six Siege/fn/weapon_nospread.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
rb6/Rainbow Six Siege/fn/weapon_nospread.cpp
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
rb6/Rainbow Six Siege/rainbow6.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
rb6/Rainbow Six Siege/rainbow6.hpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
rb6/config.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
rb6/config.hpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
rb6/directx/Hook/InputHook/input_hook.cpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
rb6/directx/Hook/InputHook/input_hook.cpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
rb6/directx/Hook/InputHook/input_hook.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
rb6/directx/Hook/InputHook/input_hook.hpp
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target New WinRAR archive.rar
- Size 5.5MB
- SHA256 a57587b0d36061a56aff449976ba1776fcc9ec0acc7b34bd5a3394467350a22b
- MD5 8b06c41c7d54df8376153b7268efeaf8
- SHA1 6c0c4f8cac0815487276e1441958ec008e928947
- SHA512 f8bce86662dd0ba18675d114fa61e22fa8420145b1b0b783d6257783483c7cd6cfda006b6bf61efde08bce110f1570f5d018f370703f58bdc5951855b9c428e5
- SSDEEP 98304:JWa7Ztavc2GNcBu9qRRxLpqHeNFT3wRgSqvG0OXwq5QaEUYPRN6rkSHVuxFH8f:JWa7Zz2rLjqHeNFTwRgSq5OXwX5UQ/6D
- TLSH T10D46331388691EB33E02B21C735A3F917DF861C71C23C16D8DF1A6A5D87301996A9DAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target rb6/External/Zydis/dependencies/zycore/include/Zycore/Types.h
- Size 16KB
- SHA256 f22d2f1af6d3baf07af7b9734e74fef10f52574a2838c145cfd9f3ed1d97b5a9
- MD5 f29fbce2a8b3529d71b656c02e7674d3
- SHA1 161ec420402cfa5976bff4fb2bf64b961cae12a0
- SHA512 2073a43049032bbe85caab21eff2a31f3c87dad4d18852b29969cca90f7dd4eb2863cd010102687486514ff7ee3ffb57688c3eeb0dd0916d5a96cfed5d2645d4
- SSDEEP 192:/RQHR+4fnFr/ALTEYw+vLBUrsLB0LQgj/ltvRLPuH8JJLAegzxqMtFffrv37W+9g:ZEzf6TVPOdx5Mrp4K5Y
- TLSH T1AE72A9452D4A79F0C622D47215AD55E9C20FE42B2EC25860369DB6BC5F9E330A2FFBD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rb6/External/imgui/imstb_rectpack.h
- Size 20KB
- SHA256 61eb7950e45d4831faac6629a727ac464ddcfcf199eb27a7b47de02b898ab6ef
- MD5 897ce69d190ec38f9e3c08de9fd229de
- SHA1 e92dd356a3a23874c8de40b4d4617825b5b5dfd9
- SHA512 4b88d2e95a6add5d7f99d9f55ba41478c93694313675f1402cfd61d5580a152824075cf98758cd89c31d0d65ab54be0c316eb577150dc8832e66917abb343506
- SSDEEP 384:/E/y6kzHSyJm8Ss6Ra+Kid1zNOHxR4Z7/8FreybFre3ksUskqDM:/O6zyyc8Ss6Ra+KjxRY8FreybFreUskj
- TLSH T17D92C62B2CB216256B41D171974F7099E326D467D33AD620BE8EB3642FC006653FEBD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rb6/External/imgui/imstb_textedit.h
- Size 53KB
- SHA256 fd8408584842d13ca4a3f5b002a77c80491626d289a96463ba52c11981816024
- MD5 402f60752d999a5b9b340cb0b84ebe1a
- SHA1 36ec08d9bb7922da00b256dcfad368c68ff92080
- SHA512 b5cdaccf5192509d2a940a533a92e86adb84ce92b264a7c4d14fdb9b324482763d0260f46f442d9005249813abef6bfe47d974bd8a94c39e7433652b996bb829
- SSDEEP 768:ze3OmnixP8ZPNP6Mg+jkFmUfXW8n3WMl8aR8Os4Ln5IM6MPLKkIM:KuyhobLKkIM
- TLSH T1373313036553073A0C6EA173B6CF21F6BB26486FB269DB61B48E71181F510FA01BD5FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rb6/External/imgui/imstb_truetype.h
- Size 187KB
- SHA256 bb24084056cd1fe17078b755cbd600d23449173d6a927ad7f067d3ce6fbdd1f0
- MD5 fbaae2bd8e52e8d478b3ae18c7f5ecfd
- SHA1 5607261e339cc2b03861e313d59c335f4ee10e03
- SHA512 ee425cdaec3d160203499446232b1d9293108e21e2b8da6663ec46416999350f727286a3b2fe885c78dfbf39640e6779480d321b90fe68156ae89203b75ba57d
- SSDEEP 1536:Rbtrr6X9vAMNMFh1QkAmzz/Q7txtvmXM2dzo7gZDaXT82Wko37jByzKYqkIM:RbtG9vAMeFh1Dzzo7uzow2Wko3S
- TLSH T14E14F80419D314231913A5A9DB8F54E8B32ED0E7A2A9EC51B85E3A1C2F60439D3F5FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rb6/External/kiero/kiero.cpp
- Size 27KB
- SHA256 e27b5ca94626d6422e6a5b480aa85b974f4587a8bed8cf3896aec3f45ec43264
- MD5 2c883ba1bca68e88479ab2c2b30e980f
- SHA1 2a19f9018391c04a59b9bd5948b199cf6e30ad4a
- SHA512 661e8c79e224e84f711dd46646e4c7fc9247c377de67d0a58009f567ef8da817086bc1b69b92a8461df38f7ccb3f99f8a1f52bf450416f985c7616d8adb4fd17
- SSDEEP 384:w5mDaK0v3OrneBDn3OygdQZDcIK0b9EO97C3rDRi7thi0rxe666ET4vn:oKb9yGQCav97D7tcY6mvn
- TLSH T1B4C2A39DF22E6013586B944ABA1D3486C47E6A31D618CA778CBC5013FECC18FD47EA5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rb6/External/kiero/kiero.hpp
- Size 1KB
- SHA256 8703888e144aae7d76db126f56808eecbf4c64c30475a11262bee587c941a179
- MD5 9fd1066bff1a0ef2917a1c2ed33b3a63
- SHA1 0b6187f78bd1b9c9c8e0368a6c644e25d7a4a857
- SHA512 f109d3b4bb611374f7e4cc0cf8f1dc63baa757ceb07e1f02f07337c6e04748d637cebbde6a9225889f4029ef3033e7a382567ffd2fe55690b11db0bb07cc01d2
- TLSH T1C2218E1A188DB4A2E92A21DDD76D24132D9AED373A4790FCEC25366D39B410042F9DDA
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target rb6/Rainbow Six Siege/fn/aimbot.cpp
- Size 4KB
- SHA256 0a3b11eda01cbeb9d5cb28e83077eb4bf98c1613f5d0743aca5abdeace0d2163
- MD5 11d2fe67fd3a7456f9213d8ce6ce7458
- SHA1 b4da67ee387bcbe16c8007b3bc7f0f496702d989
- SHA512 7eba047b3731a9fc669493d9795f3eac6f3a0de67f1157df1457688e7fa467ec6f09690ba627d2b5f9b7b8ae304ee7c23b424db1b18b9cc5e943a3968c0097f4
- SSDEEP 96:VzPvV4XeJLK+i53BNcZuD6mKKI2UlGbwrLe9i:VzV8AW/bcZrKwrLn
- TLSH T17481B5AC16AE981A07F9B5F95C02445E303D40B23D259CE6AE2DC6345DEE11F821ADE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rb6/Rainbow Six Siege/fn/config_io.cpp
- Size 10KB
- SHA256 45c5aa8f6394d310efe1afd8ce2c31aa65cfadf9cf3df2337668a908d4135f16
- MD5 97a4f0b9bd50abfe8f52df468680542c
- SHA1 00bd8d4268ba02175833985a436a7cf8c0878018
- SHA512 bc5807e84f8e761d4854b22e3c5c4fab007603cb9b043026c1cd49f1887f8b7cfae80f887b8a78d3d90e4084a931323aad85a6ef436bef1c4f0e5ec686984fae
- SSDEEP 192:idbyyxylyTelOh9MF2f0RTPno0b8/M8nLUTHLig:idbyyxylyTelOhC8fQ7no0bmM8nLUvig
- TLSH T1F9222211EB5CE883A13D856969280027F61C8C6A6E74C8F4C76FC85AB41DE7BFE74C19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rb6/Rainbow Six Siege/fn/triggerbot.cpp
- Size 3KB
- SHA256 e19d83e1843fdb0fb1ac8aa32739944acd37a557c75c765907c30e5efce2a446
- MD5 af6ece273c556b60a755619957c2482f
- SHA1 f51579291d9cc0ec698a66f51f7285006b3c5609
- SHA512 0a7c2d3bb359721ebb177ad5a14f0aba2274314bcbdd79622dac3054f02ac8be2dacb3480002813c42adf88dadfde99b60b3178a69badb0ccb4cb22950b2b3e4
- TLSH T1DD7185D465BE348506D8389A5C62456E053E20E37E497EE9AC5E817823D1C0BF709CC7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target rb6/Rainbow Six Siege/fn/visuals_renderables.cpp
- Size 17KB
- SHA256 3f7b296f71dde8f8ab6dcd71b8e7da3a4f445eb61dcd105fd4efce0773a28551
- MD5 b05b822f0b9abc25c7dd4269af91735a
- SHA1 f07f9174559c4132b5b9fdc08cfe02a80a60d950
- SHA512 adbfdafb77ceee783210637f9595c94d17f78607bf6b3ef01b6be1ddb8a8259018def102605b6f95e6ef34370deb08f037f6ed6b50692e84452a7f187d37e7c9
- SSDEEP 192:EV0cToVkB+hjrTCR0tqC9E2Uh7NVBOkXJL9O1aOImnYlbFEYPukIRxCvQLM:E2na0tvElhZVNZL9iBlYlbFZukIRxCYA
- TLSH T11182865CDBFC10410BFB105B657A888E422DC0F37EB25DD26E5C827021DAD6AF7948E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rb6/Rainbow Six Siege/fn/weapon_nospread.cpp
- Size 493B
- SHA256 d23511349dab5c44552aa446d6761a9abbcfe69611b3a21c009a7f37568c38dc
- MD5 d3790bb1d6e4ce2c543f07996ade8172
- SHA1 ab307228d276b5bd3dd6e903c84f1673764fd2be
- SHA512 486d6edaaca2b4e9ec3208ebc04b7c300582ee7c5d4f213f303165e32296fc39cf005ef250577365d6ab3eea34bde5f87d59741a0ef316b7e2db8ec1262c5cbc
- TLSH T1C3F09798BD3CD8D6226310FA361A4C5945D0F0F118409DF64F268790F288FEEE82FA90
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target rb6/Rainbow Six Siege/rainbow6.hpp
- Size 399B
- SHA256 eaa1feadebf5794f14ba9ba51b6b852fe9c92414b1b893cafed3853548e02656
- MD5 8b92a6a73c8b649c80bacf8e0f93a70c
- SHA1 299e348a14f9acdc2137bc3f81b3ebaf5f35881a
- SHA512 040f28e1557450dd4a67efa258b222e6d85b2a2441440f7e1696a3a85d1e74010c0191ea4dd9b020f06fe23369d2ab28081fdb1e2328131d55c69febe14f0a9a
- TLSH T16EE0E519EF6DA4B7F03D93A88496863281442498050F78B2507691B5E6070F8500FE1A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target rb6/config.hpp
- Size 3KB
- SHA256 bc2d768172bd28b7fb19cbc4d33c60002498fb110120d60e69b8ee26dbe87c9a
- MD5 feae88ceef3243ca0d3ab5273258be9d
- SHA1 c50d800493e0d8fe9b95cac9a30ec1a03ceda0c8
- SHA512 e43a54038ad1eaaaf454b2b151c1fc7dd70a7ceb1945e8b12a386430c63fe79373d3eefe6ab6f87d7de6ef27cb88eecf738749232aae09f11955414305ad7c66
- TLSH T1EC6101473AD410E6F41B976BB5A6106078244ABB20BDAF34D87F813462DD85CBCBDC5A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target rb6/directx/Hook/InputHook/input_hook.cpp
- Size 636B
- SHA256 4cd934476423a38b92f1d4bb491ee0f609b73347cdb6060669e6653349149fdf
- MD5 e7751555575186b4dcb5c31b6e903ce0
- SHA1 5b7dafd27241428b3163505336db7a3729616627
- SHA512 2720652eb09a05d39f93a3b6aabc9e699d404410a6c5823bb6d368b7735772cacd2ac4f66538a4e1bb7e4e9c8c5675afe8e3755761c23e3da51a47bcb85bf15c
- TLSH T1C8F09E40B870B6E281B9017D16C70F3242BE2EB035AB04D0E881F535FD9F067A1228C4
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target rb6/directx/Hook/InputHook/input_hook.hpp
- Size 206B
- SHA256 0a6f82f94765f9b39fabcecf135670c940291227c52b89d6a3e74b4a086b5997
- MD5 1e4eadd15c96bbe839a88c66b530d559
- SHA1 1fb5eed4f80c311ed028a343af4f499eb7a1adea
- SHA512 4a76cc9bbfe3e65acec457d03883b4d9f40156fa53489324fdfa9d1ec30c9e008c824a8a0a151dd2c18a814c7724fee8dd5a746785e996dde83219ea5d239454
- TLSH T124D023507E367A9758BF116D955F323104382D3435214C6199C29D21BDC7002050CCD1
- MD5 SHA1 SHA512 TLSH
Score3/10