General
- Target Saryx OGFN Spoofer (unlocked).exe
- Size 2.6MB
- Sample261027-24btraxthz
- SHA256 7a630f502adb6d0bd9832a2c24ebe14569a382b6f14894822535a3653de06823
- MD5 8a13cb68ec8bece95e7035b39a6b6959
- SHA1 3ac27a6dfaaa8fb82673c52c6a6baa51237478a1
- SHA512 b0a1158134435f31ebc01210d5dd23e926093e94f1acf09696e3f51c19339613014792dd75c8373d6f2618a6beb5240f6b0723c94c377e2ae074481c5c281085
- SSDEEP 49152:53TYnhdBHLacCbrvn2rBdZBKYZYdQ4ZwM1ghkv5Ov0f:1cnv4vn2rBdZBKYZYdzw
- TLSH T1E1D5CF5E5AAD04ECD2A6C27CC55B4707F7F27C4D03209FEB16E08DA50E17AE5663AB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Saryx OGFN Spoofer (unlocked).exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Saryx OGFN Spoofer (unlocked).exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Saryx OGFN Spoofer (unlocked).exe
- Size 2.6MB
- SHA256 7a630f502adb6d0bd9832a2c24ebe14569a382b6f14894822535a3653de06823
- MD5 8a13cb68ec8bece95e7035b39a6b6959
- SHA1 3ac27a6dfaaa8fb82673c52c6a6baa51237478a1
- SHA512 b0a1158134435f31ebc01210d5dd23e926093e94f1acf09696e3f51c19339613014792dd75c8373d6f2618a6beb5240f6b0723c94c377e2ae074481c5c281085
- SSDEEP 49152:53TYnhdBHLacCbrvn2rBdZBKYZYdQ4ZwM1ghkv5Ov0f:1cnv4vn2rBdZBKYZYdzw
- TLSH T1E1D5CF5E5AAD04ECD2A6C27CC55B4707F7F27C4D03209FEB16E08DA50E17AE5663AB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext