Overview
overview
5Static
static
11/Source/e...set.js
windows10-2004-x64
31/Source/e...set.js
windows11-ltsc_2024-x64
31/Source/e...ig.vbs
windows10-2004-x64
51/Source/e...ig.vbs
windows11-ltsc_2024-x64
51/Source/e...le.bat
windows10-2004-x64
31/Source/e...le.bat
windows11-ltsc_2024-x64
31/Source/e...em.bat
windows10-2004-x64
31/Source/e...em.bat
windows11-ltsc_2024-x64
31/Source/e...ldo.js
windows10-2004-x64
31/Source/e...ldo.js
windows11-ltsc_2024-x64
31/Source/e...sh.bat
windows10-2004-x64
31/Source/e...sh.bat
windows11-ltsc_2024-x64
31/Source/s...bot.js
windows10-2004-x64
31/Source/s...bot.js
windows11-ltsc_2024-x64
31/Source/s...use.js
windows10-2004-x64
31/Source/s...use.js
windows11-ltsc_2024-x64
31/Source/s...ess.js
windows10-2004-x64
31/Source/s...ess.js
windows11-ltsc_2024-x64
31/Source/s...lox.js
windows10-2004-x64
31/Source/s...lox.js
windows11-ltsc_2024-x64
31/Source/s...ger.js
windows10-2004-x64
31/Source/s...ger.js
windows11-ltsc_2024-x64
31/Source/s...lor.js
windows10-2004-x64
31/Source/s...lor.js
windows11-ltsc_2024-x64
31/Source/s...ger.js
windows10-2004-x64
31/Source/s...ger.js
windows11-ltsc_2024-x64
31/Source/s...ols.js
windows10-2004-x64
31/Source/s...ols.js
windows11-ltsc_2024-x64
31/Source/s...ent.js
windows10-2004-x64
31/Source/s...ent.js
windows11-ltsc_2024-x64
31/Source/s...its.js
windows10-2004-x64
31/Source/s...its.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 20:27
Static task
static1
Behavioral task
behavioral1
Sample
1/Source/external/Clipper2Lib/src/clipper.offset.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
1/Source/external/Clipper2Lib/src/clipper.offset.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
1/Source/external/freetype/include/freetype/config/ftconfig.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
1/Source/external/freetype/include/freetype/config/ftconfig.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
1/Source/external/keyauth/lib/curl/Makefile.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
1/Source/external/keyauth/lib/curl/Makefile.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
1/Source/external/keyauth/lib/curl/system.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
1/Source/external/keyauth/lib/curl/system.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
1/Source/external/lua/ldo.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
1/Source/external/lua/ldo.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
1/Source/external/zstd/lib/common/xxhash.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
1/Source/external/zstd/lib/common/xxhash.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
1/Source/source/features/combat/aimbot/aimbot.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
1/Source/source/features/combat/aimbot/aimbot.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
1/Source/source/features/combat/silent/mouse/mouse.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
1/Source/source/features/combat/silent/mouse/mouse.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
1/Source/source/features/exploits/character/headless/headless.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
1/Source/source/features/exploits/character/headless/headless.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
1/Source/source/features/exploits/character/korblox/korblox.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
1/Source/source/features/exploits/character/korblox/korblox.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
1/Source/source/features/exploits/character/materialchanger/materialchanger.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
1/Source/source/features/exploits/character/materialchanger/materialchanger.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
1/Source/source/features/exploits/character/recolor/recolor.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
1/Source/source/features/exploits/character/recolor/recolor.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
1/Source/source/features/exploits/character/skinchanger/skinchanger.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
1/Source/source/features/exploits/character/skinchanger/skinchanger.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
1/Source/source/features/exploits/environment/btools/btools.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
1/Source/source/features/exploits/environment/btools/btools.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
1/Source/source/features/exploits/locomotion/movement/movement.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
1/Source/source/features/exploits/locomotion/movement/movement.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
1/Source/source/features/exploits/locomotion/unified/unifiedexploits.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
1/Source/source/features/exploits/locomotion/unified/unifiedexploits.js
Resource
win11ltsc2024-20260911-en
General
- Target 1/Source/external/zstd/lib/common/xxhash.bat
- Size 256KB
- Sample260925-y8dmcswdqa
- SHA256 8cb837b21a8fe9a6b9dbcd0961ab16e733bfcbfa9e003f3a496ce07ae80aa8ee
- MD5 75600583013f35d8800450f351bd22f0
- SHA1 53ecd6efdf69b314110cd582bfc49007787546c5
- SHA512 6e5d1fc4cc245c405381298c09933b5c292271ac2589d4cbb00eacbf65e4d965e1e15bf67ef9170398fe7de76d584654359716eead16f014f5d8cb3a2dc5bec9
- SSDEEP 3072:l41hHpGkGGvOihG8nuHVvdvt2ExfRDnWWQPwx5zfTtL1WM/TeXIoCHE3:ICinMdvt5tp7/T+I1HE3
- TLSH T1C344C84E39A24D220D8300F7329D13C3A315985BB35195E6744EB6293F0FEA5D3BAEE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4460 cmd.exe