Overview
overview
8Static
static
3FiveM Menu.exe
windows10-2004-x64
8FiveM Menu.exe
windows11-ltsc_2024-x64
8x64/ExtraBypass.dll
windows10-2004-x64
1x64/ExtraBypass.dll
windows11-ltsc_2024-x64
1x64/SQLite...op.dll
windows10-2004-x64
1x64/SQLite...op.dll
windows11-ltsc_2024-x64
1x64/sciter.dll
windows10-2004-x64
1x64/sciter.dll
windows11-ltsc_2024-x64
1x64/wintun.dll
windows10-2004-x64
1x64/wintun.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
72s - max time network
68s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/10/2026, 00:56
Static task
static1
Behavioral task
behavioral1
Sample
FiveM Menu.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
FiveM Menu.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
x64/ExtraBypass.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
x64/ExtraBypass.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
x64/SQLite.Interop.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
x64/SQLite.Interop.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
x64/sciter.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
x64/sciter.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
x64/wintun.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
x64/wintun.dll
Resource
win11ltsc2024-20260911-en
General
- Target x64/ExtraBypass.dll
- Size 133KB
- Sample261017-bae17sft5k
- SHA256 daa3e138c21b572cb7955ee35f2fb1398b47313837c73f5999a385e1957bc392
- MD5 f808357eb75ce997e02ed7c936f33b81
- SHA1 94eb0afd7193de15f94d5788a8b56e65933b2683
- SHA512 ee3b8a35183a29edf1f699bcb00463fae1d6ce0227616b90ef13979f18025ed26f4441055e872b625e87fcedfd35951467d104fab97856190a77c62d5178f280
- SSDEEP 3072:y/Mc90jGyW2CAqrC3Q8S+vEyBUB+5vnA8wvsl:yUO0jGE9qrwQ2NVpevsl
- TLSH T151D36C47B7B410BFE4778274C8D30A12D7B6B8251B609B9F07A046592F237E19D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 564 rundll32.exe