General

  • Target

    BloodBathV1.rar

  • Size

    54.9MB

  • MD5

    8b67edffa5f605f6d49200f2f2dbad89

  • SHA1

    de164c426e6c3b10e686355addcc2e3093706530

  • SHA256

    63f0ffd7a6d08a21bf9f019d945be64aa202b18ed23cd284015cc1a4a05a0c01

  • SHA512

    c15ec46bd843ff187ff9fa0e5b87aff2ab5a4850b699f48bf8af96da042143f383c5005c3355a4e7cb208e6521447411f07c7400a2eab4c5fde22472c69b189a

  • SSDEEP

    786432:189rxx9wYFCqDdgo1mNfS0wPhv/WV32L2UTLLoGXSQoJLBBEdtnSuIg691g3J1O:y9HeYrUNscGaEYD9BEdxIg6/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BloodBathV1.rar
    .rar
  • bloodbathV1/.github/ISSUE_TEMPLATE/bug_report.yml
  • bloodbathV1/.github/ISSUE_TEMPLATE/config.yml
  • bloodbathV1/.github/ISSUE_TEMPLATE/feature_request.yml
  • bloodbathV1/BloodBathV1.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Code Sign

    Headers

    Imports

    Sections

  • loader-o.pyc
  • bloodbathV1/Install_New_theme.bat
    .bat .vbs
  • bloodbathV1/Install_Old_theme.bat
    .bat .vbs
  • bloodbathV1/READ ME.txt
  • bloodbathV1/Uninstall.bat
  • bloodbathV1/auto login.bat
    .bat .vbs
  • bloodbathV1/autoexecute/test.txt
  • bloodbathV1/bin/api-docs.json
  • bloodbathV1/bin/incognito-luau.dll
    .dll windows:6 windows x64 arch:x64

    dfd11645eb4732c0409f51f0532c3683


    Headers

    Imports

    Exports

    Sections

  • bloodbathV1/bin/save.json
  • bloodbathV1/injection.bat
    .bat .vbs
  • bloodbathV1/scripts/test.lua
  • bloodbathV1/tools/obfuscation.py
  • bloodbathV1/tools/update.py
  • bloodbathV1/tools/updater.py
  • bloodbathV1/workspace/.tests/appendfile.txt
  • bloodbathV1/workspace/.tests/getcustomasset.txt
  • bloodbathV1/workspace/.tests/isfile.txt
  • bloodbathV1/workspace/.tests/listfiles/test_1.txt
  • bloodbathV1/workspace/.tests/listfiles/test_2.txt
  • bloodbathV1/workspace/.tests/loadfile.txt
  • bloodbathV1/workspace/.tests/readfile.txt
  • bloodbathV1/workspace/.tests/writefile
  • bloodbathV1/workspace/.tests/writefile.txt
  • bloodbathV1/workspace/KavoConfig.JSON
  • bloodbathV1/workspace/NexusConfig.JSON
  • bloodbathV1/workspace/test.txt