Overview
overview
5Static
static
11/Source/e...set.js
windows10-2004-x64
31/Source/e...set.js
windows11-ltsc_2024-x64
31/Source/e...ig.vbs
windows10-2004-x64
51/Source/e...ig.vbs
windows11-ltsc_2024-x64
51/Source/e...le.bat
windows10-2004-x64
31/Source/e...le.bat
windows11-ltsc_2024-x64
31/Source/e...em.bat
windows10-2004-x64
31/Source/e...em.bat
windows11-ltsc_2024-x64
31/Source/e...ldo.js
windows10-2004-x64
31/Source/e...ldo.js
windows11-ltsc_2024-x64
31/Source/e...sh.bat
windows10-2004-x64
31/Source/e...sh.bat
windows11-ltsc_2024-x64
31/Source/s...bot.js
windows10-2004-x64
31/Source/s...bot.js
windows11-ltsc_2024-x64
31/Source/s...use.js
windows10-2004-x64
31/Source/s...use.js
windows11-ltsc_2024-x64
31/Source/s...ess.js
windows10-2004-x64
31/Source/s...ess.js
windows11-ltsc_2024-x64
31/Source/s...lox.js
windows10-2004-x64
31/Source/s...lox.js
windows11-ltsc_2024-x64
31/Source/s...ger.js
windows10-2004-x64
31/Source/s...ger.js
windows11-ltsc_2024-x64
31/Source/s...lor.js
windows10-2004-x64
31/Source/s...lor.js
windows11-ltsc_2024-x64
31/Source/s...ger.js
windows10-2004-x64
31/Source/s...ger.js
windows11-ltsc_2024-x64
31/Source/s...ols.js
windows10-2004-x64
31/Source/s...ols.js
windows11-ltsc_2024-x64
31/Source/s...ent.js
windows10-2004-x64
31/Source/s...ent.js
windows11-ltsc_2024-x64
31/Source/s...its.js
windows10-2004-x64
31/Source/s...its.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/09/2026, 20:27
Static task
static1
Behavioral task
behavioral1
Sample
1/Source/external/Clipper2Lib/src/clipper.offset.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
1/Source/external/Clipper2Lib/src/clipper.offset.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
1/Source/external/freetype/include/freetype/config/ftconfig.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
1/Source/external/freetype/include/freetype/config/ftconfig.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
1/Source/external/keyauth/lib/curl/Makefile.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
1/Source/external/keyauth/lib/curl/Makefile.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
1/Source/external/keyauth/lib/curl/system.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
1/Source/external/keyauth/lib/curl/system.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
1/Source/external/lua/ldo.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
1/Source/external/lua/ldo.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
1/Source/external/zstd/lib/common/xxhash.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
1/Source/external/zstd/lib/common/xxhash.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
1/Source/source/features/combat/aimbot/aimbot.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
1/Source/source/features/combat/aimbot/aimbot.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
1/Source/source/features/combat/silent/mouse/mouse.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
1/Source/source/features/combat/silent/mouse/mouse.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
1/Source/source/features/exploits/character/headless/headless.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
1/Source/source/features/exploits/character/headless/headless.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
1/Source/source/features/exploits/character/korblox/korblox.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
1/Source/source/features/exploits/character/korblox/korblox.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
1/Source/source/features/exploits/character/materialchanger/materialchanger.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
1/Source/source/features/exploits/character/materialchanger/materialchanger.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
1/Source/source/features/exploits/character/recolor/recolor.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
1/Source/source/features/exploits/character/recolor/recolor.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
1/Source/source/features/exploits/character/skinchanger/skinchanger.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
1/Source/source/features/exploits/character/skinchanger/skinchanger.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
1/Source/source/features/exploits/environment/btools/btools.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
1/Source/source/features/exploits/environment/btools/btools.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
1/Source/source/features/exploits/locomotion/movement/movement.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
1/Source/source/features/exploits/locomotion/movement/movement.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
1/Source/source/features/exploits/locomotion/unified/unifiedexploits.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
1/Source/source/features/exploits/locomotion/unified/unifiedexploits.js
Resource
win11ltsc2024-20260911-en
General
- Target 1/Source/external/keyauth/lib/curl/Makefile.bat
- Size 21KB
- Sample260925-y8dmcswdqa
- SHA256 b99678d23139074bde35083fd780105262b5757d55f7c3a7ca6945bc2dcffc7d
- MD5 c86e54e49bf251eb162a6a1bae6584d8
- SHA1 6867a73b64415b5569229f4203d157f2416da433
- SHA512 07b9bd2de0dc46fb2ae55df079201ec9f3a2e84f864730bfb3376e3d44093ff1aa0f3755c312b29ca24b97bd2fdbd497e234f2a98a0963852d63ef4c5382e9c1
- SSDEEP 384:wqspDu6TSKW8+Iqps+it28ckoQh5frmWkYOkZjj2FVQM0Gqr3xHDIDgxBWPpTMI2:bspDBTSKW82diEJjWkYOkZjjQVEr3gSP
- TLSH T17FA2D63EE85D1E313A60D0E62ABA4197958363174A4A6E213FCDEE44730E44B717F573
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 3504 cmd.exe