Overview
overview
5Static
static
11/Source/e...set.js
windows10-2004-x64
31/Source/e...set.js
windows11-ltsc_2024-x64
31/Source/e...ig.vbs
windows10-2004-x64
51/Source/e...ig.vbs
windows11-ltsc_2024-x64
51/Source/e...le.bat
windows10-2004-x64
31/Source/e...le.bat
windows11-ltsc_2024-x64
31/Source/e...em.bat
windows10-2004-x64
31/Source/e...em.bat
windows11-ltsc_2024-x64
31/Source/e...ldo.js
windows10-2004-x64
31/Source/e...ldo.js
windows11-ltsc_2024-x64
31/Source/e...sh.bat
windows10-2004-x64
31/Source/e...sh.bat
windows11-ltsc_2024-x64
31/Source/s...bot.js
windows10-2004-x64
31/Source/s...bot.js
windows11-ltsc_2024-x64
31/Source/s...use.js
windows10-2004-x64
31/Source/s...use.js
windows11-ltsc_2024-x64
31/Source/s...ess.js
windows10-2004-x64
31/Source/s...ess.js
windows11-ltsc_2024-x64
31/Source/s...lox.js
windows10-2004-x64
31/Source/s...lox.js
windows11-ltsc_2024-x64
31/Source/s...ger.js
windows10-2004-x64
31/Source/s...ger.js
windows11-ltsc_2024-x64
31/Source/s...lor.js
windows10-2004-x64
31/Source/s...lor.js
windows11-ltsc_2024-x64
31/Source/s...ger.js
windows10-2004-x64
31/Source/s...ger.js
windows11-ltsc_2024-x64
31/Source/s...ols.js
windows10-2004-x64
31/Source/s...ols.js
windows11-ltsc_2024-x64
31/Source/s...ent.js
windows10-2004-x64
31/Source/s...ent.js
windows11-ltsc_2024-x64
31/Source/s...its.js
windows10-2004-x64
31/Source/s...its.js
windows11-ltsc_2024-x64
3General
- Target hbqqfm.zip
- Size 44.3MB
- Sample260925-y8dmcswdqa
- SHA256 edca5a812a2567a0f33e90802e23921380f5f2ed1bba4ff3fd92a46bb233eac6
- MD5 32a202bc0a94716cd0c277f48566113b
- SHA1 aa3857de41a749e967e9d68236eaddd6607a17f0
- SHA512 ca47e024c01b8fb4b86508d549b806178c0a6082b53bcd58e6e93312d7ee2f5005c2f3ecfdad21765368a1e27f11485c791f9984bad014f8a63940d75c9bc65c
- SSDEEP 786432:vAtZgYNenIOsJ3ieacWuzgchkJfP0ckwIE3U7ae5KIH4zRqss2bTIynCKu7rtVFt:fYwCgeqs0J4lE8ae5tqqss2bTIynrE/D
- TLSH T1AEA733B3C43E2C3CC14B5635CFE01B42B86E46CAB53099DAC194A5268EF35D3672A76D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
1/Source/external/Clipper2Lib/src/clipper.offset.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
1/Source/external/Clipper2Lib/src/clipper.offset.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
1/Source/external/freetype/include/freetype/config/ftconfig.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
1/Source/external/freetype/include/freetype/config/ftconfig.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
1/Source/external/keyauth/lib/curl/Makefile.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
1/Source/external/keyauth/lib/curl/Makefile.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
1/Source/external/keyauth/lib/curl/system.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
1/Source/external/keyauth/lib/curl/system.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
1/Source/external/lua/ldo.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
1/Source/external/lua/ldo.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
1/Source/external/zstd/lib/common/xxhash.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
1/Source/external/zstd/lib/common/xxhash.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
1/Source/source/features/combat/aimbot/aimbot.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
1/Source/source/features/combat/aimbot/aimbot.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
1/Source/source/features/combat/silent/mouse/mouse.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
1/Source/source/features/combat/silent/mouse/mouse.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
1/Source/source/features/exploits/character/headless/headless.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
1/Source/source/features/exploits/character/headless/headless.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
1/Source/source/features/exploits/character/korblox/korblox.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
1/Source/source/features/exploits/character/korblox/korblox.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
1/Source/source/features/exploits/character/materialchanger/materialchanger.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
1/Source/source/features/exploits/character/materialchanger/materialchanger.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
1/Source/source/features/exploits/character/recolor/recolor.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
1/Source/source/features/exploits/character/recolor/recolor.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
1/Source/source/features/exploits/character/skinchanger/skinchanger.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
1/Source/source/features/exploits/character/skinchanger/skinchanger.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
1/Source/source/features/exploits/environment/btools/btools.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
1/Source/source/features/exploits/environment/btools/btools.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
1/Source/source/features/exploits/locomotion/movement/movement.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
1/Source/source/features/exploits/locomotion/movement/movement.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
1/Source/source/features/exploits/locomotion/unified/unifiedexploits.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
1/Source/source/features/exploits/locomotion/unified/unifiedexploits.js
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target 1/Source/external/Clipper2Lib/src/clipper.offset.cpp
- Size 21KB
- SHA256 55a22d2db04ac81b11ed4194fa553606f344f47c2c63ff1afec37befc5f83c9b
- MD5 7e1e2199bc0beae798fbbe6f150d9d49
- SHA1 b3dd20de9c9aa42152c755649fce076ac6b296f6
- SHA512 4e520c887dc4fd234303eef048f493655257559e8270ec85df0725bf98cd7f2e75cbed9788a1a8f7a59dbe0119c45850d31789db311bdef5df94cc4ccf8c4a50
- SSDEEP 384:55rprTIHY7o3/axxPRWKBWyWKBiORVCpwVodBnxcdgVQB/+aWaqkS8S8+olix2+i:TpaY7oCpAOD5/zLqOhZFZ
- TLSH T1D8A2B81A3C99692A85D2F3C7913301C1D93DC0C1BAB259B7B58C65586F1E82F893DBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/external/freetype/include/freetype/config/ftconfig.h
- Size 23KB
- SHA256 7a7658e0ae677d375ca2b83e164a80027237a84ced77e0d5bf18d6ead065b97d
- MD5 e31d7e808da31cf25e6aec4eafdaa7b7
- SHA1 f20e8a4ae16fafcaffe3f0406658730c80b35acd
- SHA512 da4eec1e90b5b92605595292997755c890ed1a558f637a366e35552ae8377c10cb368c6069df3d0c3e442df1aa1df1df5b0a255a1ba468b06fb1283050cf885e
- SSDEEP 384:XpAUY4QtT3fP/bkJVJGU1H1i3UL3UnjqSdV/CD:XsfP/lY6o
- TLSH T182B26B155DE89DE3582204F27249F1E9D905C76F26C048F8382DBAFD1B0DA3251FA7EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target 1/Source/external/keyauth/lib/curl/Makefile.in
- Size 21KB
- SHA256 b99678d23139074bde35083fd780105262b5757d55f7c3a7ca6945bc2dcffc7d
- MD5 c86e54e49bf251eb162a6a1bae6584d8
- SHA1 6867a73b64415b5569229f4203d157f2416da433
- SHA512 07b9bd2de0dc46fb2ae55df079201ec9f3a2e84f864730bfb3376e3d44093ff1aa0f3755c312b29ca24b97bd2fdbd497e234f2a98a0963852d63ef4c5382e9c1
- SSDEEP 384:wqspDu6TSKW8+Iqps+it28ckoQh5frmWkYOkZjj2FVQM0Gqr3xHDIDgxBWPpTMI2:bspDBTSKW82diEJjWkYOkZjjQVEr3gSP
- TLSH T17FA2D63EE85D1E313A60D0E62ABA4197958363174A4A6E213FCDEE44730E44B717F573
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/external/keyauth/lib/curl/system.h
- Size 18KB
- SHA256 9eec4a36e131b02b793278fdf1975c50cdfa551d7d5fa8036a65c2254582530f
- MD5 90bbc243ef15033a186b3e32cead7008
- SHA1 91bfea075721a71211e920f5ab26d68291924246
- SHA512 08e117be36c70d7747428c0adba17844699ddc805efc8abff300ffe34b8f60a36e6bf7ced4ca7b64925f34d599325c2230ff0dad9092144b6a74c8abfcc59259
- SSDEEP 384:jseODo9QIsTqF6TOzbKQYH/nFkhRMw4BgqfWyj3xwZ4MMp3V1n+Xg5ZvZStfSqwh:jJW5b
- TLSH T1A082AB811E9B989481E69521704C59EB83C08A73F1103EE1B1BF988C9F4D625F5E7EFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/external/lua/ldo.c
- Size 34KB
- SHA256 009b4c97605a92037d8bd9a8d7d0c710045099e7175a602a22d75acaafea0e27
- MD5 07d09e81a798ac3782a0930dd5ed22e6
- SHA1 7c63573f27f9f4409522fb951af2ab443573ef63
- SHA512 170a94c1dc5b6769f676e9048e96a680bc0c6ec32f0ed2b05193147d27185a51224dff5a9916b09eec64434c266f2831cb0eb0d476ee9abca420b5e77e90b000
- SSDEEP 384:p1e56dzRx2jWo2xdZlGVuwwrYO9OkdSZk6D59Wt621gOZ7gVGgVGEMrls3q:ptdHdngwcOOqSGx62SggVXHUls3q
- TLSH T101F2E94F9CD1361345923B34A64BA3E89B98D96B5365D8C0BC8CD1643F1077ED27EAE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/external/zstd/lib/common/xxhash.h
- Size 256KB
- SHA256 8cb837b21a8fe9a6b9dbcd0961ab16e733bfcbfa9e003f3a496ce07ae80aa8ee
- MD5 75600583013f35d8800450f351bd22f0
- SHA1 53ecd6efdf69b314110cd582bfc49007787546c5
- SHA512 6e5d1fc4cc245c405381298c09933b5c292271ac2589d4cbb00eacbf65e4d965e1e15bf67ef9170398fe7de76d584654359716eead16f014f5d8cb3a2dc5bec9
- SSDEEP 3072:l41hHpGkGGvOihG8nuHVvdvt2ExfRDnWWQPwx5zfTtL1WM/TeXIoCHE3:ICinMdvt5tp7/T+I1HE3
- TLSH T1C344C84E39A24D220D8300F7329D13C3A315985BB35195E6744EB6293F0FEA5D3BAEE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/source/features/combat/aimbot/aimbot.cpp
- Size 27KB
- SHA256 9ebf1e447f3bb2ec055497444d7b50f6673d0d9ace101a1d9d7fc376eb26a9fb
- MD5 13d3b7bcdfb8c92e3faf2ee9e1f00676
- SHA1 6a1b41782fda98bbe81a209386d98e89c2c59294
- SHA512 6889c1ac12bd7a056269689cb7ce52605b79ab13ecaeda776b1ee35ec89da4f334c391942c69e2a36804c8f7852f7cadab1e37318c0065b525fc4cec10eb031a
- SSDEEP 384:KmwLZOG2G/rgVyUT+9lRS0uaCmtiNqiNvlTJH0XlWkz/1NucEVOP+nxI:KrZPLlZtsq2llH0XlWkz/1Nu1VOP+nxI
- TLSH T1AFC2C6A9B36F501751E2A666C87B204BFE3DC0E35B7954F1FC9C9540BC7908843AADCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/source/features/combat/silent/mouse/mouse.cpp
- Size 24KB
- SHA256 2906f9ca4a42ccff310857495fc1951c69badafa0fabce6c1beeb12f87f389d8
- MD5 64c8ff1f221e53d2cac31747411e5bc7
- SHA1 26f6658af1ebeebdc3c69698d1f46b957e6a757b
- SHA512 f81ff2dec81daf3bc8967fb9aaaa7844f649df851e0a5c199d4cbeaf039c5b12035bc425907268b65dd8047e0cac89dfc6dca500d20ad2594c29e8ec302ba908
- SSDEEP 384:Zd11UJs7lrgHr9s/IdVVUBygXuMwIo0EgPrLUI:ZdYJs7iHr9suVVUBygXuMwIo0Eg3UI
- TLSH T16BB2654577BFA09F199223404976A11EE92EF4F18B6342F1F4A9705471B804A83EDAEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/source/features/exploits/character/headless/headless.cpp
- Size 2KB
- SHA256 9f29f8fa3d50eba6aa8eb7f34c0bf56ebdca3ce4660cd1c491b1a04e6dd25cf7
- MD5 62ed0f0886d6c8617bc51973d78dc128
- SHA1 b3b11e8c9a39067076af1f5db4e6fa9634891af6
- SHA512 9248cc995f44b623ca2d58fbdafe6ca574463bf6d64c5a6e6ffda2e77e2a01bee4f293d49d5fc56577243709d489ce127068133dea4edd6e7042fffc0a8f5a1c
- TLSH T19751D01A77BDB40E02530705D632A041E81DD4F0572A97B4B06EA0A9F2BD59DD3CDDBB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 1/Source/source/features/exploits/character/korblox/korblox.cpp
- Size 3KB
- SHA256 e5981e0808093ada2975af71a3d3b38ae0137aaa1c2e70a61882b27df51f09a8
- MD5 2a8a35c82698e62aada919defd07578d
- SHA1 93c935f62eefcb817a6539df068cfe9085f89b5e
- SHA512 93cf72cf2ce364825586d44b060638ed6b0e706a7d34ceef035410037e2220261db4ee3a1d8d9e672629153b382f8a02ecca436e031a0e50bcc9566bf6bfbda4
- TLSH T15071A166F7BE640E01620D1BD5317855EC2DD4A083BB9AB1F09F60EDF0781DAC2CA4B9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 1/Source/source/features/exploits/character/materialchanger/materialchanger.cpp
- Size 9KB
- SHA256 4c7d8ba767ea74d143858038350a59ad8c698c236a691b6767756c407649a050
- MD5 6fa96f1ab71c813ef7b6adc25f0bad7c
- SHA1 885e50d80a0c160c35c5559584a93e3908979595
- SHA512 8b691547b77a56df253c642690266033cecc8414c85255c70004fb86bc3923b542297c0dac8ad89fd85d110b0a31672894bf1a2a0d232132bfa07f5dcc065d82
- SSDEEP 96:li8zP72O6H795bZw/yGOqGU52SdyLbCpHXILnypRQj05bRCEhVPr0fJ0ZHYqSnHs:li8zPaZ9HAyAuC4Lypyj+RjowvWox/ky
- TLSH T1A32255948FBC595F0451165998319981B82C807392A28DF3FE6CB2ACA3DD48FD39CA7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/source/features/exploits/character/recolor/recolor.cpp
- Size 5KB
- SHA256 926af784273b57d569f103de5bd0cacf61511e96511f61a1420a906856caaf9c
- MD5 501747b1f39be7171fc00cbf484d8e2d
- SHA1 9d5055e2dbe06b25c0600773b02694500a2ef834
- SHA512 5b5bf89f0f5f10982d7870e6ed438e2cfd6873dd1aad058cfa1983bb311dab5eec1fdd12fbfd9e1c58370b1c53cfd0418ffe77ce60998660fb656782dfc65df5
- SSDEEP 96:liT/9v7zaHiB6ErUoWPnI9sWUqJzVBTG7BZPQ9:liT/x7zaBoWPnIuWUiVBS7BZPG
- TLSH T14AB1EB52F6FE785B219309694532F306A92FE4B1473943F0F46E95E8A0F82C5879C8ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/source/features/exploits/character/skinchanger/skinchanger.cpp
- Size 24KB
- SHA256 219e49177631a7b60ae91b431ad160d43be964f3cf04a55263bb672a99de176c
- MD5 20044eba876294063c96215f9d1bfafc
- SHA1 23638f65793b0c9be0b2e9fb09cbf0e766428a4f
- SHA512 34816df2a29f45394e64a21f30fd46482f5196d7d60bf988784da87798408aef13b8e0066a37ef77484cc86f8e850b09c7d669d546b0a2c24cb6e1f007379894
- SSDEEP 768:ltkYPZmqhEeTb/KQbb+N/eZSUWFX486yb0N5CLK:ltpPZmqhXvSmipqSUWlT6yb0zCLK
- TLSH T13BB27637FAEF4E1F10D461183072AA05A71CC37AC25041BAFD7D850DAB9D86BD05EAAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/source/features/exploits/environment/btools/btools.cpp
- Size 12KB
- SHA256 cc5dcb7fe4fb74bd5ba00bb77aa4612d96c0ab423960cf2e6bf5fc14c4c83052
- MD5 997e55f71891c4c873781c7d3ce5a3e9
- SHA1 a0487da056167238e34da6944e5f99f1540cbe1a
- SHA512 2571324bed4dd27e3b78c3b052a01066a4e467700bf08bb9da5f836a66a9871982b136ee03023da4343ada71b0c5e696f1873d5f46be82169273909f7c7877c1
- SSDEEP 384:jmpMtMfFGEK1XrfGE1L1w1HM5ewgzMJcyj8:jmpMtMfFGEKVrfGEVS1HM5ewc
- TLSH T1A242551A197FB50B2553A53AAF5F6020E160915350D9EC10BC7DC0E07FE80A89EBF76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/source/features/exploits/locomotion/movement/movement.cpp
- Size 53KB
- SHA256 f6c2e7d88f0f1a495d2da8c7498a6e18bad5a003d147d889881e8fc23a462623
- MD5 88cd055d661f957bf4d23a905d1bb0a0
- SHA1 21a81e1f2acaae566cf9ed00c2ededa0c40a5f06
- SHA512 828a2830c6450eb24d1eeee8b15108d134622cf609566833d391c5f273974015c131d6ff6100524765087dcc8d93b3f0929a01b8c9ca05f9dd5a5234e852fee8
- SSDEEP 1536:UJ/EjXZCQsZXZrHYU62dOC3xsYYcfRoq53xNaRnxFdOyNNpBe8Ik//s:USjXcHYU62dOC39YcfRoa3xNGs
- TLSH T1D433C8E0737FA81E19B2251BD932211ADD2EC4F0577982F5F8DD4208B4B489A876D8DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 1/Source/source/features/exploits/locomotion/unified/unifiedexploits.cpp
- Size 25KB
- SHA256 46eaec461f3b05d49703923360c356b3aeaf06e8239e10bb463fba44a9a753f8
- MD5 8c1c3723dcbbff74c5084313b6f087a8
- SHA1 7375cc4ef4935342efe9c47c91faac2f70440472
- SHA512 6f6e005fbc3dbaad443718ed76638f61a36be29882fa81d07d753c05c9d74326b6a1f201beda53420e0a23d0e981e0d5da4f0de161eb8117212f658aab4eaf96
- SSDEEP 768:yTNkvReKeEWT/jGnDw0AtCz1Tc/TcNcByYxVpeg7pyQx:yTNC+0AtChTc/TcNoVpeg7pyQx
- TLSH T1BAC273C573FFA80E096657A6D931711BEC0DD4F0577682F1F0B94288B0A859AC3AC9DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10