bd0ef1d7654394b817189894517246b9e5e6e818c3de3c257987370e08ebbe6f | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
RoPro_Updated.rar
Size 3.2MB
Sample240608-klj9qsbd98
SHA256 bd0ef1d7654394b817189894517246b9e5e6e818c3de3c257987370e08ebbe6f
MD5 9edaad4ec627f61edc361fc6839282d1
SHA1 907192571caa4deffdc4b4969076596c7a20ee47
SHA512 6d8f64dd5853668930b05cdd8ba1e426e5f46c06465b67b4a8e65bd9e8d184ae732f5ba68051f8ee21323954e5c65ed14181da4b21c49946d882617dae2e0cc5
SSDEEP 98304:41TyUwaqr3zXSGbRYmoHIbL/5T7Dsr5Lwm0WrdNM:iDwa+D3umoHIbLVDsrRwm0AdNM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Targets

- Target
  RoPro_Updated.rar
- Size 3.2MB
- SHA256 bd0ef1d7654394b817189894517246b9e5e6e818c3de3c257987370e08ebbe6f
- MD5 9edaad4ec627f61edc361fc6839282d1
- SHA1 907192571caa4deffdc4b4969076596c7a20ee47
- SHA512 6d8f64dd5853668930b05cdd8ba1e426e5f46c06465b67b4a8e65bd9e8d184ae732f5ba68051f8ee21323954e5c65ed14181da4b21c49946d882617dae2e0cc5
- SSDEEP 98304:41TyUwaqr3zXSGbRYmoHIbL/5T7Dsr5Lwm0WrdNM:iDwa+D3umoHIbLVDsrRwm0AdNM
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  RoPro/background.js
- Size 83KB
- SHA256 2415d0ce173731864840f9acdce5b87210491310bd834fcfa4a0b206da025cc5
- MD5 bb21c62b2bfe92d2c5fde76c7d14f79e
- SHA1 8fb872e9dd01ece83806e81a40d3f0a5811e3e9e
- SHA512 5e3a9d20938a94f3d0d1e4b739ab1fd4f0dd86953a82352e0922bd6851f4832465216f65bee70383698037dee39473b8771e6d94c1011368036f743ad2e09d81
- SSDEEP 768:8p9KrxSfuVGc7/ktNh3SFxhIix/RwnwUbOlr2kq4M64OdCac:8irxSfuz/ktNh3SFxhIix/RZh/c
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral3 behavioral4
- Target
  RoPro/js/libraries/jquery-3.5.1.min.js
- Size 90KB
- SHA256 18321141edfa52c3d5026bec05e01de7b5a87799de71b7d53f09279b9bfae9ec
- MD5 07ecc3a30dbc79e3954935fad5695cc1
- SHA1 657aa27ba82cd587b35206fd1650577f8b7f34cb
- SHA512 cadbf9ec22575f0c9e230fe0a5dde64747f3eb57f8bfb8f57f1f71803aeb95b82f23a29f0b64e610d01aad2bbffcef0d5c1d6ec0eff004c6bf2f8ede1df53760
- SSDEEP 1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvak+:/Yh8eip3huuf6IidlrvakdtQ47GKu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral5 behavioral6
- Target
  RoPro/js/libraries/semantic.js
- Size 741KB
- SHA256 b7eb6120e15b428977faf701dc2ee445b4b8f631b6fcb0b9744a7b34bc41a6e0
- MD5 d1ccd3d6baac5c8718d86156f0706252
- SHA1 9cf938ee2c7af6981c5430608ad8cb2f61a1e228
- SHA512 48f5d69a5cd89676c9b2fd735f57ddd685d06eb270257416334e504e2f9f4c2a82350883667200d5b9275622a57f3afeb5a738b654d4274a6517d9aa9b13235c
- SSDEEP 6144:0W/lkkkAVBW7+tBqw2a4MheUqMgWJvVqQiUg47jRZkdfb9pSkR4TbVvuqKKmpov5:1tJJvX1V/G4
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral7 behavioral8
- Target
  RoPro/js/page/additionalMenuItems.js
- Size 14KB
- SHA256 d7f1d85e53bb2565a758e9e1eaf06a3f8c64faabd43e3e60c65cc6edb347bf56
- MD5 d50590a949a3736a156f26cb7d3d3d23
- SHA1 382db99d4b3d86663132e575dd41148a2e851b45
- SHA512 b43701f74412bf73d0684e5c11aae66e4640e6ffac06f3a616fe9098fe801b941d34673c137f20273341bf732c2dfe9c7c0e72505e4d478437c464de3b3183b6
- SSDEEP 384:weUHawB47vqooQwVXqAGMjfO1tCC4TRU0UZiGfYilCi2I33yFAZqPy/7dS:Y6wB47vqpQwVXqTMjfotQTRU0UgGf1lE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral10 behavioral9
- Target
  RoPro/js/page/avatar.js
- Size 50KB
- SHA256 c2d8e600c30a066faefaf9365512315767cabdc7f08dfd03e218389cc6ee90fa
- MD5 bbb2e48cb3d7510022aa6e238dfdb44e
- SHA1 1ae55445987f87fc8e0592629458f5c9ff378fc5
- SHA512 fe6a89d10133e3611a47083e456a9eeca19b12890fc62c7c1068d3a57c4e0d8e7c8bd44c4d8cd3064df7f0723d509fb43257412350c62381078810c1340fdee1
- SSDEEP 1536:Tc6c1PEPUVf6w/8eePTAbH9U+T9BUmaye3yeC9T0ED0hIynmYFO70nZiUqmM8o/s:KhUE9iZwT4FO70EUWy5Ijyh
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral11 behavioral12
- Target
  RoPro/js/page/catalog.js
- Size 6KB
- SHA256 1337b702766b601f6eb87605d2cc81f71f60f16859dfd82060d82fec8bd6416f
- MD5 0feb1084e68596cd2978a60daf370c85
- SHA1 02a1d70003b8da08914f838abe8a692f842fdd96
- SHA512 2b0e8a936f532d62a0bbd6929ede5d53c3acabd89a7cca64c37cc85e72d4e93e4fe9fd4dee605e2a223c177913a44b5c5e41551bdd2217dfe5585cca1475b7c6
- SSDEEP 96:3B3HaVV/fdieXi4CXEk9xxwAIiNJPQWe8lwWE0oboowo0CzTvxh5HoORsonyB03A:wtn3CUk9Lffze8lZiqpiTJU+p8lwC
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral13 behavioral14
- Target
  RoPro/js/page/comments.js
- Size 12KB
- SHA256 10bb742f5ca8a8e05a20c867fba586d3fee92e4822b366b0a0395932d5039fbf
- MD5 4ebec99419279c8e6246cebfae90ed79
- SHA1 31546a3491359cac313f98704ad290c450101973
- SHA512 a40ce2257b83f1492bba075b497bda136b85e33fd1185f44322496dadcc737cb2ab5fccc89019e89b98765a2f62ce4ad734f6b22f0129523a0165dd3494b9d49
- SSDEEP 192:wRIagYEziNbuyqY5k2ZfZ+qnhipBbrMPbpLybnD:waagYEwJqY+2ZfZ+qnhipNQzpSD
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral15 behavioral16
- Target
  RoPro/js/page/fetchAngular.js
- Size 4KB
- SHA256 dd68d435adab47a61e9ab3bd7cc55e8890d7a194ee1a7b3e05d450d3be5cae26
- MD5 497e4a0b07f0fbdb7c1919c992112f10
- SHA1 126e8bd5bd0ba8ba7194679489a635a388f44632
- SHA512 25280ccc0ad1787295713fdccde60bcae6b66fa654463c61cd6be39c3dc6aa04361b6b313c0efed28314b79bcc0727e44b5022d1d965b99a581bcef25c7b37b1
- SSDEEP 96:3B3HaVV/z5nS7jZGj6NpY8oq++E0DeHa2+/N26u+9q+nUoVPWAvBAoMPUtsUP0Pd:wL5nS7jZGj6NpY8oq++E0DeHa2+V26u9
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral17 behavioral18
- Target
  RoPro/js/page/fetchAvatar.js
- Size 3KB
- SHA256 67bf601a2217839601ec14502d37081fa6a5031a08c40b5aafebfb80fd825b2e
- MD5 d5a8886936fd2da8a9413d9953184ba6
- SHA1 2edc3a399f06da2bf7d42af7b2e48dd21d8b8ff2
- SHA512 c2d4db2fc58b35559dd13375ca6a01b0b8e061eba75f277aa7e3f31824b67adbbe01d53526168d0ca28e89332df3f5ea8349a32043890406214821bfb3636e25
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral19 behavioral20
- Target
  RoPro/js/page/fetchServers.js
- Size 2KB
- SHA256 c6817088aca995d4c63af119b20f18df1dde1fad5e6d386ae350eaa02ea249e2
- MD5 b445fea883f88f79ae8adb6a58512ca8
- SHA1 f836c3b14f7ef4dbba116227bd3ee7ac3d545ba0
- SHA512 ad6c36a96f9b49614d3f2b5d08d144292aa19ae5cdd249646c198d653a92aab903cbb4a38fc350afd8f6f4afcd4f20db01fdd2855a0afdbfb1820d73673d692e
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral21 behavioral22
- Target
  RoPro/js/page/friends.js
- Size 27KB
- SHA256 d6f4aed452baa3ec1e764bb8c0ee847d2715d109aaf089e9ca204a6101c67dc6
- MD5 819f2f9fd2f255f12637d45d1eba1109
- SHA1 bb95a140172963f2276b9b2e061fb6c020347dcf
- SHA512 b9ac9e8e76794f9ac23f291d5e0acda4055f153e21bf11376b78652eb041a9e3ec0041a358b5e72c90ddf8b3d053883b1a7a532b74d45021d6bf78f0c2a71393
- SSDEEP 768:Bu9uTu4u3uRuiubutuUuUuvukuGuAusuyukuIuOunu/uUuzunuPUuB79uKuxDRa8:Bu9uTu4u3uRuiubutuUuUuvukuGuAusl
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral23 behavioral24
- Target
  RoPro/js/page/gameFilter.js
- Size 37KB
- SHA256 381ea50415e155195c047f3dd8199cc7430db2d3d19a41053041d201b0a09376
- MD5 ece490f585fd70e7662feaaae498e343
- SHA1 9805283ed8ce38c601c3776b675d2a7a5c1ba086
- SHA512 dc71476ba69b3c7bc8632feddbae439d9985b2b48539ed146f597d34cda390f3948d87c3b320b5999888c27b86b4f6335f82ab122ec808dbee926b486ed7a680
- SSDEEP 768:peGWbo1TG9GV/D25D2tvDGkDfGM3SlG93kV/D25D2tvDGVb/Fe8kkrB6K/D25D24:j1AGV/D25D2BDGkD+M3S+3kV/D25D2BP
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral25 behavioral26
- Target
  RoPro/js/page/gamePage.js
- Size 138KB
- SHA256 edf516088b6f8f7920d6f312f006f0090c2daf273d40a5a772d71b7c76575d70
- MD5 33552b5075ccbb0c7ae1e3f490e46f74
- SHA1 c9375bd36e2336bc52ca7eabe7038f87e20e67d6
- SHA512 4f69f59d9b3ec8481a6a91ade37daac2d7feb5248cbdc5e6e958bc4e3830d821248f7504db76951be2b39d3bdafd6528ef702d8e39d20c6e2e024f5c89be05dc
- SSDEEP 3072:UH4qeKP/kPR1gbZxtx3R0hg+aA+PQSbQSkQSpgz+gzZgzbgz+gzj56n5cluMCNaZ:UH4qeMM1gbZxtx3R0W+aA+PQSbQSkQSE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral27 behavioral28
- Target
  RoPro/js/page/groupPage.js
- Size 3KB
- SHA256 9308bed13e6e8105aeec403d834ae11220a30af014bfd165abd4df88e839e426
- MD5 93da799b3cfc2994b0bd46dbbfb95dcd
- SHA1 d537dd511d4f030784fefb13190600f0a61afc34
- SHA512 db8597858914a5c649eec92b91b52156b4c3d098c32719ba0a20c6c505345eb9d86135e97577385c9288b43704f21fc2569571c7e674a9c2c913b722f882552b
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral29 behavioral30
- Target
  RoPro/js/page/home.js
- Size 40KB
- SHA256 2e7e4899a5bc459e6e4c879f314195ed2b1413d1dddf1712d4cb2c18c7b607cb
- MD5 8f6bcbb3d27d668562f23d980953b042
- SHA1 69b1c91bff39b7d39266684242521f1a9119e1f5
- SHA512 71d19a0f49f9ead6426edbe6e2f5456093ac5eef362a5f65ea9842dc033963379f238d083fe6c886dc786cbee9bc75aef1b4a2dadb8b9a8f5174016bc33b0cc2
- SSDEEP 768:VciyCBuPnrBuPn6BuPn6BuPn6BuPnm79EqfYMTMqi++/Urcq6QBEQnh/1hpoULaK:CmBuvrBuv6Buv6Buv6Buvm79EqfYMTMQ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32