undetek-v10.47.zip
- SHA256 72ad9b8b972a5f32b1bdb70e66a744b5582259f973213ff70e335a339577be54
Password
0734
Overview
overview
3Static
static
3undetek-v10.47.zip
windows10-2004-x64
1undetek-v10.47.zip
windows11-ltsc_2024-x64
1undetek-v1...de.txt
windows10-2004-x64
1undetek-v1...de.txt
windows11-ltsc_2024-x64
1undetek-v1...de.txt
windows10-2004-x64
1undetek-v1...de.txt
windows11-ltsc_2024-x64
1undetek-v1...AC.txt
windows10-2004-x64
1undetek-v1...AC.txt
windows11-ltsc_2024-x64
1undetek-v1...47.exe
windows10-2004-x64
1undetek-v1...47.exe
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
undetek-v10.47.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
undetek-v10.47.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
undetek-v10.47/Aimbot Guide.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
undetek-v10.47/Aimbot Guide.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
undetek-v10.47/Install Guide.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
undetek-v10.47/Install Guide.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
undetek-v10.47/VAC.txt
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
undetek-v10.47/VAC.txt
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
undetek-v10.47/undetek-v10.47.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
undetek-v10.47/undetek-v10.47.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target undetek-v10.47.zip
- Size 116KB
- Sample260922-3arhsahf49
- SHA256 72ad9b8b972a5f32b1bdb70e66a744b5582259f973213ff70e335a339577be54
- MD5 e800c992075823cadc0b7294305f5ac3
- SHA1 e95f48b534955e1e5f89d6f54688db892009f2c8
- SHA512 bc4e4c18af509d97013a872c1a2767699519c06a21c3f926dbeb9d41d8c9a1d87faf227cbf93dae35da3ad4716fac71ac4a69d598224fb07aa4a9d171e936bab
- SSDEEP 3072:fxNy8DUekl1SrgwHC0AGYIr7yE4GHGRdU:fh2l1SrgwtPYIr2XPdU
- TLSH T13FC312B2B82D5946F27C75B88F03F5FCB9B61633411E8C65D757B8D8022A88A148C66F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/undetek-v10.47/undetek-v10.47.exe
File Explorer
-
undetek-v10.47.zip.zip 116KB
-
undetek-v10.47/Aimbot Guide.txt1KB
-
undetek-v10.47/Install Guide.txt1KB
-
undetek-v10.47/VAC.txt279B
-
undetek-v10.47/undetek-v10.47.exe.exe 249KB
undetek-v10.47/Aimbot Guide.txt
- SHA256 8b25a277f4e3d687162417342550d5ab15bcbc8ac237b56c3db987771d892f54
- MD5 52c66b54a5e75f0cf811a41aa6558881
- SHA1 e20e71a36bf5978c189ebf59ada5a4254cf743a4
- SHA512 2e5e313d62dc7021f545f48ccd823464e7c30d46c4c7f06df0147d94f2d0541f557e37b710a9089d9b915dc0833f3b37f6d22bd7b1ec23da5ad73f56b7e6908c
- TLSH T1FD21B13FD20663F706B00A73B02C9AF2770F25F49316925A3E3A455C2219AB4427F4CD
- MD5 SHA1 SHA512 TLSH
undetek-v10.47/Install Guide.txt
- SHA256 c5ce94f365b46aabe6a77197e0b32a1f6a19a3efe3c09c4eda56d4e1b9aa30ed
- MD5 22bb0b4481a4520d8fd7aec8e784029c
- SHA1 17bc94e9432e7b3bc4a92619e77f422ad7323e4c
- SHA512 8efc55ef5eca8372c0294c69cfc2a1cf59e022d4397bb644a007765db83358d4e317c7f02d433078f4c298869a0d5375590824399d3f815497dd07864f963e19
- TLSH T1A121101BA66FE3F719311252425DBAA6D20A091F23364A123095803D256E7CECBEF4DC
- MD5 SHA1 SHA512 TLSH
undetek-v10.47/VAC.txt
- SHA256 c423908bd2a60cc070a999654a3cd501f6525e310005dae62664f614a4882621
- MD5 c70e3de0f2bc4e114f5a3980100e8086
- SHA1 6fae9a2f9c7e6028f141a281aa5e19ce096724b6
- SHA512 7ad6cca31d0fb81e962d5765179cc9230a7f91d496ef3cd8a3617f95f1564cd19692e41080fb4a4c76516df06c6abb09cc9a8eb69b61b9b01924ff728501a3db
- TLSH T1C3D02B5BCD9C028D1B26A0621142BA74D215F41DB3870A44189C016DDB7324AC2A603F
- MD5 SHA1 SHA512 TLSH
undetek-v10.47/undetek-v10.47.exe
- IMPHASH c21f7e17d1d746619c809b3ce642d7e8
- SHA256 b99a1776f3779e4b04529cbfa8eb8a7cf1cd407a19e78fa31a6010b339d9cf0d
- MD5 35c6e7a3338e536a9a97a049e4adc7dc
- SHA1 0bd9bc77b1df74c36922655ba44237d280e956d3
- SHA512 228dd6db1ed9d3037003e41f38ddf8973dae4ba6a95a1086cb1ce27d55f307d55ae3355220edc395e3f76ef291c5ed31ff9d102d35e1a3ff29e41f00b81d27dd
- SSDEEP 3072:xbwWE5nqVsRiV3nGNeGviwYap+JbdaWnnFBrYv/z3eNk+gCr:1GnqasVGlMxdHG73Q+Cr
- TLSH T1A6443A46B66994F5D4B2D23AC942297AF6B17C058371D7DF03903927AF33AE0C9393A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
0734
Minor OS version
0
Major OS version
6
Entry point
42484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
ReadProcessMemory
WriteProcessMemory
GetModuleHandleA
GetProcAddress
CreateToolhelp32Snapshot
VirtualProtectEx
Process32Next
WriteConsoleW
CreateFileW
HeapReAlloc
HeapSize
VirtualAllocEx
GetTickCount64
OpenProcess
CreateRemoteThread
Sleep
WaitForSingleObject
GetLastError
Process32First
CloseHandle
SetFilePointerEx
GetFileSizeEx
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetProcessHeap
GetStringTypeW
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
RtlUnwind
user32
GetAsyncKeyState
SendInput
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExW
ws2_32
socket
WSAGetLastError
recv
connect
closesocket
WSAStartup
WSACleanup
freeaddrinfo
getaddrinfo
send
Name
.text
Size
160KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=149, id=261, version=33145,
count=12, id=260, version=33145,
count=9, id=259, version=33145,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=46, id=261, version=35207,
count=9, id=257, version=33145,
count=125, id=1, productName=Unmarked objects,
count=3, id=261, version=35228,
count=1, id=258, version=35228,