Extracted

• • Target

    Battly-Launcher-Windows.exe

  • Size

    183.1MB

  • MD5

    777dae8f41c5c9ba97b798fcd52612de

  • SHA1

    03ec3ee7b1e1a47dc8b0e7f5f980ebd7071c469b

  • SHA256

    a1941786149857faebfd4f2731022d8af6aaa984b981bffd40bd123472b0beb4

  • SHA512

    792ccba986338f3a3d5475d615fa276a73c52eb483484ee2fda16a143f1100afdfd0dea2bb309bfba54202e07707df7bb025677f6477bf44ddb8f2282093f592

  • SSDEEP

    3145728:qJcuNt6i+X0MdTUPo+YFawtU4odz5zA436E7IkGl0BkChNw5+VTmms+B6Q8k:ScuN7+QYFjmPz5zAJ0wahNw5+VTTs+Bl

  Score

  10^/10

  spywarestealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory

  behavioral1

• • Target

    resources/app/node_modules/adm-zip/adm-zip.js

  • Size

    30KB

  • MD5

    9b6da3cd4a4ce0963e80d0e6dc1a11f1

  • SHA1

    fce6550c2231f60425661f2f7db99efff491cdff

  • SHA256

    cb49867d6ffe8e7c08ad0e6466c86450b0f81910069ed1ad9d5b7b9c27367929

  • SHA512

    38f325ced4315f7fd39f9ec885e1a35f8d5c49bfe9721c3ae0b54d040c76e7df3e6d557f76bb5783594b0fe5c15f9e73f8c7a21fee373ecbd97ed9220d3127ba

  • SSDEEP

    384:T4XzvHf944AOOLlPHWuFz5AjHxLPVzVbAB1kfVeHW3W5SqdCLFWYi82et/2Ktvbe:UzvF4DPHzFn11IqdCpoFaU

  Score

  3^/10

  execution
  behavioral2

• • Target

    resources/app/node_modules/adm-zip/headers/entryHeader.js

  • Size

    11KB

  • MD5

    db0294dd88cf4922e3cbb5e45d087287

  • SHA1

    f46ea2a1a7e9cb0c6c25fc436743b78d95da1841

  • SHA256

    d3ca0adfd642be6287daf5a7cc8d3959332f31ba52b6ef1a53e4520bf4175f3f

  • SHA512

    2f77a248db215a4d7287dfe7227adc1bbd4239d31731a743994dd4a4e4f0aa061dacb3fc9d79f22364d3771ac3b36d41dca5788b34892c94f8cb8d2d95a6b661

  • SSDEEP

    192:ybVz3fxOy27Ad1mMcyfPrzq638jfhDq5YoYfXSlAHhDQf:y5fxOv7VMcyfPXqm8jfhD+

  Score

  3^/10

  execution
  behavioral3

• • Target

    resources/app/node_modules/adm-zip/headers/index.js

  • Size

    94B

  • MD5

    64bc889b89f1c8a04a698a8f74e24e5b

  • SHA1

    68781da04cf1ebc4f03434ea5b2b65f10cca07e6

  • SHA256

    536e4b5bf009a3d9f6eccfbbc4157cb6de663d889e0826ea5f6e5fa17aaeb8bf

  • SHA512

    9eb207fa61862aebd9cc5a89f85757313c7f163ea0f5a15c16250f79845b9caa1d8109bc3e634a9ed3fb0616c71aed3005ace48eff0941518c778c3063613975

  Score

  3^/10

  execution
  behavioral4

• • Target

    resources/app/node_modules/adm-zip/headers/mainHeader.js

  • Size

    4KB

  • MD5

    1d35f59aece6922da87e6183e7f8379b

  • SHA1

    b772c6b2285d6f7c099bfd7ace005e730bd12c78

  • SHA256

    3269b558fd8990df8ae1f500268e0512854c04bffefcaa0e584360de1809b84a

  • SHA512

    3cb59c8fb586a89936ad4fbd4d29c54cfe8e0ae9abcc4ff70ef03a3cdbefff9b4a5d91658da79e6746ab01af9cfc57dd908b8e478ee4aee5848e0252a1f68603

  • SSDEEP

    96:riWDe6p2ciGztwfWH7gNJzaI2mhUJfPok1:rFDe6pPyEp1

  Score

  3^/10

  execution
  behavioral5

• • Target

    resources/app/node_modules/adm-zip/methods/deflater.js

  • Size

    1021B

  • MD5

    41fd6791497f7d74ee56a7753e08da66

  • SHA1

    bd62d07bfe703da89172fcfeaa8848d6ba5c68b4

  • SHA256

    6dc41b2460594cfa5136b797653c166b2f7403820a40f2fca17cca35a5de1b5f

  • SHA512

    5f16aeb477321470986a8c9807ebf3b75e979e5fb34156028ef56f44f38c4f4d72d9d086784e9dfedeffa61f91f973b6ac7e7ba1730eebd86bb549de2dbb4761

  Score

  3^/10

  execution
  behavioral6

• • Target

    resources/app/node_modules/adm-zip/methods/index.js

  • Size

    128B

  • MD5

    74d54dda1e050cad9b31da325f92fb01

  • SHA1

    683b0412f3bdb3ae54cd809e37f456dade4d046a

  • SHA256

    d67714f1a04be942f90be77069af3ff4214aa8ee84b26edeff3a87eb0d8e2dc0

  • SHA512

    88ff974e69207c427ce1c9161489a275c4328ba392da65b268614fd5c66ef9feb10dafe1464dcc5873221de61bdb045dcf47092760c973ec06825158978df3e6

  Score

  3^/10

  execution
  behavioral7

• • Target

    resources/app/node_modules/adm-zip/methods/inflater.js

  • Size

    936B

  • MD5

    ddf58fccf9d270a32d6fe17fe86a26f9

  • SHA1

    c720d51c923aa71bce2a27a3d081af09de0e2a67

  • SHA256

    ac2c664bd94fe9daee76174aa00d149d60bbbe6ae5d5865b14bd76e9b7d2d612

  • SHA512

    bc5914af2950f7e87b0071d54f885b7ef494cee1f036e9fe2e31365506ab78a6327dd25d2c565c09b0ecd465ddc79bb8fc5ff7b6c3a9b15a4d4f044fe816d610

  Score

  3^/10

  execution
  behavioral8

• • Target

    resources/app/node_modules/adm-zip/methods/zipcrypto.js

  • Size

    5KB

  • MD5

    84d22177957b42a5f8cef39e729bcaef

  • SHA1

    6a6dea4aab4c6c8b1b4b19a246f01b03cb114711

  • SHA256

    2b76c14cac47da833e1bdf690faf68acc0f5ceb645605df876f42e67801d2f1c

  • SHA512

    a94de7eb1aac18bba8854041a8d9a2f035dacc338e007462d891c6557f68c7a6d179d82078f0bddc047e29766f961e7c83c5a278a08e8b3b72917f61625320e0

  • SSDEEP

    96:kRFxIiQ1K80cAAbZPxijV/7jRcDG2+2Ihpq68rMyA+GBBEF/yJ/rshl2kJGWvLoC:kOiQ1fUAbZ0jxdz2+thJ8FoDJ/g+K1EC

  Score

  3^/10

  execution
  behavioral9

• • Target

    resources/app/node_modules/adm-zip/util/constants.js

  • Size

    6KB

  • MD5

    9557c90a448baec12cf2cb2f97e2c5a2

  • SHA1

    19ece17c4aed05723601ec510ad2020fb462cf52

  • SHA256

    208e943a2e5faad056047f3c7991cce3cde637d8e272a564f2546210ebdf2069

  • SHA512

    433a683e049a8d2fa321e9cf6932c2f5075c83f1713a9d0514956310174ef2959d0c8378a039d27d0a34f321262f6cf7eee40066ca54da1b57c5483b6d00f089

  • SSDEEP

    96:Dtbl0W6xP0XM0gly+ESo5Etdt0f2cnHBE8WdQx8Z5h+IrrOnQTUlZmsA:DxyWCsXM06I/uSjG8WdQx8Z5h7rrO72

  Score

  3^/10

  execution
  behavioral10

• • Target

    resources/app/node_modules/adm-zip/util/errors.js

  • Size

    1KB

  • MD5

    ac3d2bb07fc89b31183b6786ce467fb3

  • SHA1

    61964b0caf0c374fb311fbc914e7adfee6911f0f

  • SHA256

    56ee85e2b90ec4a41df0813c4e7e08f617da69a82663149a8f9cc110deff43ea

  • SHA512

    1ae94c25cc424f1a4ba7cbe7b08d9809022ac96d4f7ea0f98b10cf4e3bec913793957da17bb811c41153724d0da4f7f8c2850b0140fc4ba74ed553fc25695cd0

  Score

  1^/10
  behavioral11

• • Target

    resources/app/node_modules/adm-zip/util/fattr.js

  • Size

    1KB

  • MD5

    943088ca25b0e25de119778524c8d91c

  • SHA1

    6cbf8576406db664ea30c0ce8085cc590a248202

  • SHA256

    cecf4e89cd49c408dacf19894756926cb73bae801f4f44e66011826230ef1975

  • SHA512

    9892ad5a63788aa2e2a50927990caf7371b3432cf0a7633d6dba3d6f861d1e59eb8a43f6b5ad7127c16cdf153ad0aef1f9163d2c59af9058f427cb55c70662b0

  Score

  3^/10

  execution
  behavioral12

• • Target

    resources/app/node_modules/adm-zip/util/fileSystem.js

  • Size

    353B

  • MD5

    85d7973afdda48fd2333b486d4b4afaf

  • SHA1

    dd0ab76f06f12996cdb07bc8613d7f56aed7f0ac

  • SHA256

    c0e0fdf6ca6d8dd98041adc6d8674f6bb02b94145abc98f08f24f1d0e4a8b5ad

  • SHA512

    ea038e326f763da409672e4e1d87170220aa8c1fab1144a3d5f62d1a5db44f2be2c456a08ca4d1c3f776f9c5020e9573b6b146a28a74c329dd51daa961d6cbfe

  Score

  3^/10

  execution
  behavioral13

• • Target

    resources/app/node_modules/adm-zip/util/index.js

  • Size

    179B

  • MD5

    6eadaab125a2caf89f2e762259d16df4

  • SHA1

    680d2665f43dd5074b5eb34d7a22f337d39659dc

  • SHA256

    a231e422e9f88464dbaf2ca91c0b7acd141f84e475de7847538d3f53890fd274

  • SHA512

    feb0b65be5cf28c68fcd414a4ba0d659e9298a3a029c1ddef0b5f0d4ac77a355ddb6592aa9c3808b6f40266232c244456a28d49f24700941c6505adc81086eb8

  Score

  3^/10

  execution
  behavioral14

• • Target

    resources/app/node_modules/adm-zip/util/utils.js

  • Size

    7KB

  • MD5

    b7a147df232c33b9733089d358e8919f

  • SHA1

    62f476f4fd0f58d0f6affedadc39da4eed9622e0

  • SHA256

    476362e756eeab1eb18548732f27ed8786cea36d6c33aa27d75a74fb70b4a2e0

  • SHA512

    e0c2641d2b2626c145fd829d48c2154431179011946898714aca55be10209c816649ae79cf0fdadf76933079c28114b2c9000ebcd557a5e324448561cbd62b72

  • SSDEEP

    192:giQAJ3zMRGhO3l3a2iCjgqiuA7cHBrQrlMh6n2d+MYKI6j8Ok86+IEiQkGyTh9d:bz2wSqrl7kZIlj23Yak87Ih7Thn

  Score

  3^/10

  execution
  behavioral15

• • Target

    resources/app/node_modules/adm-zip/zipEntry.js

  • Size

    11KB

  • MD5

    c553c1da54ed2015dea9f514d4dfbd42

  • SHA1

    fc47ac41e724cac3f6deab99730276fb7e4b76a0

  • SHA256

    699358b454fd68983c363f2df22ada2fac0ad3ebfc4890f80efe7e49461f8c78

  • SHA512

    808c6912f5dcd11afe4f130dbadc28911fa5402eb60cf2e2df66fd82c80a74772a9527cb731d4b16ea67abf6255e8f5a28e81955bfc78af90f5e6df98cce8dd4

  • SSDEEP

    192:SCNPhBeY942jhUHaD8QIyrjHqgshbokySgyuqyDYyyyn32S2WsYlr98bvxrgLxOB:SKBeMJjXQQdq9EYUfp2SpsGr9WNgtI

  Score

  3^/10

  execution
  behavioral16

• • Target

    resources/app/node_modules/adm-zip/zipFile.js

  • Size

    13KB

  • MD5

    e6dca10b65f08b4623cd2c5f186e85a4

  • SHA1

    cec0a45acdf6d9688db89be2dba81fa85761d29f

  • SHA256

    015cb9553db23bc281ee784f7eb974cbd026dace0322a0989b0a400bbcd68e8c

  • SHA512

    aa0a7f6e81ba719f9e25796453ec72d62a9894d3dcdef860ee6d22a282bb351ee19439c5f7bb2a747bd1d7187fd467a1a721409f38e064885fe9f9717ad8d604

  • SSDEEP

    192:OsWm/ZVXhCztlExKoOlvJ+6nV/VfZNybEwmLuYiKRw73V7zdqDeZmgm4yDfmUFEa:OYxyPExpu+yfrFtieeQDVmhEP

  Score

  3^/10

  execution
  behavioral17

• • Target

    resources/app/node_modules/ansi-styles/index.js

  • Size

    4KB

  • MD5

    9d4acb14d5449b232b22bfe40453b00c

  • SHA1

    5f96df8b074e4854c03db87ef309eb6c741f4618

  • SHA256

    d3f197d370760ddd8753c1355b4bdb585a787f1baa92bb8ed217f170c138b594

  • SHA512

    34ddb9208914ac53ed7c0e7162f74d0313a8f348f34db824414028313c03de674995ac98bbf856f5219d44d1af1455fa41678eb14dbc4639567b9227ef11ca31

  • SSDEEP

    96:gojeeng/nq55QwQIiZz5x36AYWND6brk1k+c6hj+pz/1nd3VOaGcAGTAG2sqPIdi:Weg/q5NQIiZ91dNWbr8k+c6qnRVOaMlR

  Score

  3^/10

  execution
  behavioral18

• • Target

    resources/app/node_modules/async/all.js

  • Size

    3KB

  • MD5

    6c9c5e791341f1eca157c9b71fc8136d

  • SHA1

    271034a9847242ea97482fc963fd35892a9fd6c8

  • SHA256

    ece0cc0d74146d57247415a3b4adcaa6fd807150489d60eeb6bfbfb656469b2c

  • SHA512

    deb87d1e92d4d0cf40797d2313863e4541248daccdd71126f33a9c0d564858a724cb55f2d9d3b0ddee7fd7ecdf2d118b23daea13a749fa03bc17c30f502f412f

  Score

  3^/10

  execution
  behavioral19

• • Target

    resources/app/node_modules/async/allLimit.js

  • Size

    1KB

  • MD5

    a609703c2671aae5ddf2d83dd6ad453c

  • SHA1

    e45f016e6ad89d52fb790c1d02f326c8916d33c0

  • SHA256

    98a3b10fe47ff3c6badee2bff517542fd191af1b9eb2026663e1be5290053e07

  • SHA512

    f7ca50a989c0dd5dd99f35e9ed0cb09bff42bcdcc17c1c62087b87b1655d3b20377aaba44565cd835d616af3234cc99b0c597ec02459e4dc684d4e33cb88a62b

  Score

  3^/10

  execution
  behavioral20

• • Target

    resources/app/node_modules/async/allSeries.js

  • Size

    1KB

  • MD5

    083c43efcca1e589556ffe47875b2d0a

  • SHA1

    67be41dd4412f9c6098bb6b6cd8f02ee45a4a092

  • SHA256

    220c55b8ff121b0be9407af3bfc9df6d663b45d9ddef78bffa2314ad5c623de6

  • SHA512

    3cfd82af8047fd6b9908aff7a68d0c5856d7c691806dfb8d2adc0873f1b327f296c5c1b7fcf99a320f1cf4d4abc5f5639a7055fb7e927f8afe47fa45fa70815d

  Score

  3^/10

  execution
  behavioral21

• • Target

    resources/app/node_modules/async/any.js

  • Size

    3KB

  • MD5

    dd1d46dcf0067e976fb81c43cd677448

  • SHA1

    445ea3bfd270ba215429840f5231c1b4424befa1

  • SHA256

    7700408ab16a80d509d14c0de299547fef3877915232c6af2c4a5c106f148c38

  • SHA512

    8e7a13c13594aed306d966d7c8ce7238f7529f14a55db67b01fae3fd6e39bd4f2b6140ab136bf248c3e57e9caeda439f82e7f8bba2ba59e657f8404bcfe0f5da

  Score

  3^/10

  execution
  behavioral22

• • Target

    resources/app/node_modules/async/anyLimit.js

  • Size

    1KB

  • MD5

    4882ebfed6d40d01b563bacc413f8764

  • SHA1

    1992217ac8a3ceddab3347d165a79f987f46c1e6

  • SHA256

    e8cf3c5eac466034ee0e2aeb4db77650b5c653889e95f471df548a789747cc5e

  • SHA512

    3b13de88030267e2abbed40c5a377d6d1e3403648550db4987e4f3f5705ce447dc94c403eca7f8dd3d58fd562d17a8d529fd7ff8f2504ebd206d4c1cd77d5e5c

  Score

  3^/10

  execution
  behavioral23

• • Target

    resources/app/node_modules/async/anySeries.js

  • Size

    1KB

  • MD5

    95d30db94de4aa6d1d9da3fcad4072f3

  • SHA1

    cf521d2a2ffb90462f58e6d0a71d09c17b29b667

  • SHA256

    0f52489058f5c9f0ec97cd11c042d50cf53aa949880d7beca337f47df1edc4c7

  • SHA512

    5d89ebf77d0eccd83a2938714d995ddee0cfed3be08c8a2b6419956e897e2180d3db0ad52b64a67505f0439bf2f2348b657d9e9daf9f8977c68e7d1c69cd82e4

  Score

  3^/10

  execution
  behavioral24

• • Target

    resources/app/node_modules/async/reduce.js

  • Size

    4KB

  • MD5

    724bb52915e1158b4dff6f26ef4baf72

  • SHA1

    ad0aa6a0ac5576433051167524923e6aa794c96a

  • SHA256

    f1e4594194164d2504946c85c8e983346b25f9be8239178defec27e912b56c21

  • SHA512

    657c3dec82c5c6c34accdbc9d96e2be59a592e60241960810f10a662f5305c21dcef8cf006fcdefb0d48d30ccdd30d9dd6c263c089a88591f18a83a2f390eaaa

  • SSDEEP

    96:y6Kcr3mvLCw7I20odkC2z2yS4NBsBMV30scZ2OFbnkhdQ70M:y6KcOLfdkC2zpNBsBI3zo2skhK70M

  Score

  3^/10

  execution
  behavioral25

• • Target

    resources/app/node_modules/async/reduceRight.js

  • Size

    1KB

  • MD5

    e36ee4d4e33d0a23862c360842105b44

  • SHA1

    84e0166688b5fd278ad22a724f088bb947b75c07

  • SHA256

    208fc2365801877db94f1a64ea205783809a8852786e9e638898f26d6cb23c89

  • SHA512

    b0c7b73c3321b49ad37db3d8a323ab82c98b7adc820c83c3c015a83a305c99463473840689cd898c8a88bdfde293298096f71ac83eac42373abab2dcbf161619

  Score

  3^/10

  execution
  behavioral26

• • Target

    resources/app/node_modules/async/reflect.js

  • Size

    2KB

  • MD5

    250df19e4944b1e1289ce6c312962826

  • SHA1

    8811c06d02fb70392f02f89ace526736a6c37ae9

  • SHA256

    8768cd08c4a162c46ebd6baf95fe450c3755096dd9bf2a2c60aed82cba25a1cf

  • SHA512

    27d78c1798ce96cb73bd67650bfc7abdf4f978b75b31e6c39e8057a1a731cb33d70cff5936528ce69832173cfed2e42a451d001b8a0b3b4dc2bc3590a0baf5bc

  Score

  3^/10

  execution
  behavioral27

• • Target

    resources/app/node_modules/async/reflectAll.js

  • Size

    2KB

  • MD5

    4fffc0f082f132c267b936ae6cb2ca3b

  • SHA1

    eb08020b2a58c11f21748cb4481a0916cd5a7fac

  • SHA256

    4d43aeabf089d7c98479bc29b29c9b557e281acb8c6e01b32d6c78ec1e15f1b7

  • SHA512

    f9ace6c2c8757b4c70c82d2a345546c89db95fc0c5f69766078cd2df2c72f4472945861393c81b0bdf3a3533673cc21097a106abcf43bcddad48e31a6a529fb1

  Score

  3^/10

  execution
  behavioral28

• • Target

    resources/app/node_modules/async/reject.js

  • Size

    2KB

  • MD5

    b8f43e0673e6162e5adf5dd59d6319d8

  • SHA1

    241ba6008e432a8744aa0b429d77a22ad677decd

  • SHA256

    9ba2b7c360fc5feb1042eff789da432a4612b9489e83de29caabf300236a99b9

  • SHA512

    8f5c574138ac9b6f7910eb5a322c4633dc53a1e935266b3d7414d83a81726497c6d5e4b8ad7f662a79ee48db90ebc889a935944b6769cc16bd7e4b304c824ace

  Score

  3^/10

  execution
  behavioral29

• • Target

    resources/app/node_modules/async/rejectLimit.js

  • Size

    1KB

  • MD5

    8349a228f314a4f9e2d3d2a8e24c5d41

  • SHA1

    da12508f737db9d9c0755c33aa879c9025ddd710

  • SHA256

    8c787ca4a475033406fda243c8de26a98abd8793fa222c3d3ca465a0b2a5eeac

  • SHA512

    3166e0429d58ca972e94b74b844457b9d6cfcf3aa4d2c744635796515d07d885c306ebc896a4e23cc84744deeec9445a49aa408a93aed7381be464814c1563b9

  Score

  3^/10

  execution
  behavioral30

• • Target

    resources/app/node_modules/async/rejectSeries.js

  • Size

    1KB

  • MD5

    4366880b8f948d8881caf9a71b3ad734

  • SHA1

    bd11b7a45cef4378970e0386eb614d63dcae6374

  • SHA256

    aa6daba31038ca0ecd3aeb170b3332a822420bf54299e4c4b67a13007920c838

  • SHA512

    4c8d49aa3b73c0f1428a0304be63e5f18ae1d5f7929a46e3c47263211c2bce7e465106fcd57644a8be90cb1fd86838b686f879ce304a61310755ba3a87964653

  Score

  3^/10

  execution
  behavioral31

• • Target

    resources/app/node_modules/async/retry.js

  • Size

    5KB

  • MD5

    6f48e98ca0ea2a166ae7e0e8c03f7708

  • SHA1

    2c6e3f3af14e49722511171292ce372faf593500

  • SHA256

    186654a2ff0a12804d91e51d14603dbd6a89340292a4e6a4a41267f641b35526

  • SHA512

    5915fe2fbc1af10d149681aa74bec95c1e1760fa7448e8aa48b440f838483626a7dbff9c4a30278a65e226e635249b47b76a2d35d7ca7be95ceb5b408dca24ad

  • SSDEEP

    96:y6B/UHcGWRHDKH6z1GC67GKZajxK0+TId6BkiDcxr9RAjHbcMsKLRbyxpPM:y6lU8dh6ax63o9rObcMsgmM

  Score

  3^/10

  execution
  behavioral32