36d505040e91990144ba4e257d304cd42b23bd21ee386c7c3de8ff61eb18a7c5

Resubmissions

11/05/2026, 02:25

260511-cwkdgsdv8k

11/05/2026, 02:23

260511-ct7e8sat3x5

Sharing

Copy URL Twitter E-mail

General

Target
bytebreaker.cc.rar
Size 62.3MB
Sample260511-ct7e8sat3x
SHA256 36d505040e91990144ba4e257d304cd42b23bd21ee386c7c3de8ff61eb18a7c5
MD5 54d5135dbbdb114ec29c63b88bdc17be
SHA1 298bd0fcb0ade11fb6317d2ef1e5e705684ebda7
SHA512 41d87284afd7dd84333b7a8c9ab98fce6b60faffb603ddbc9cd2880d50cda0b8e19c42451f73dd0ac04b928ed0dc1e01e52f3c23970911415a4ce46318f9c5f3
SSDEEP 1572864:ZG4CmUoeagJ6fQzumG6Q108O+F6djxdcWjNL4eeYnsWKPWIi4:4otG6ozuEua+0djTceZlfQWI9
TLSH
T186E73324B70F65F1BE870EF523FADAAE2653341774DBA9E02569871F4987C03633484A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  bytebreaker.cc/Potassium.exe
- Size 72.1MB
- SHA256 6e288427719601b22a65b0dce0115ba4a284ebb044bbe6f461eb2c7dfc4c39ea
- MD5 3305ca9c0767024f308fc540115e0d87
- SHA1 d9049b74a98dd3b7c758c7e06a95d693b740948e
- SHA512 cb3ab5d33367f88ea061481188de63adb2efdb627836a9eea741686939ce956d64d1c45c23594746365c47106b89221c9972953758e70ad0c6b25ff5a7c58d86
- SSDEEP 98304:I9dnSC5tF1H9dnSC5t/up1R5n/cIoCc5RNVex1K/kBKtwBYfnM7d:I9dnSC5BH9dnSC5ZudFcc+/m4hvmd
- TLSH
  T1DBF707F9936023BCDC4957BFB96138B4B60F747A37E5CD94C22E4E92581789ECA09843
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1
- Target
  bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Default/Code Cache/js/058d1896e9e00103_0
- Size 54KB
- SHA256 5b1941dadd00e7a6170f1da231fbb68852b2bad88df660fad210b7be8727a3f9
- MD5 b5ae9e758da421d6e9fc302c7f719260
- SHA1 3a8f169a1ae1db812ccc8630b86c2407eea43936
- SHA512 61ce48bd315936ce6a4dc7b4ffb8c6ad3687ba3ffd1d15b0be6a599b717312bbb082268946ded532090f09a3190e634ad91c190a2f646e081589237deac074be
- SSDEEP 768:cvrnlaeo4JTRaJRkZy0mTGNYE9xOmj/L3xLEfEEywUQWYZ9aethaSSV5eN:arlro4dRARkZUQEILCfEqUXYNhC
- TLSH
  T1AB433BCFB1D1F335D8E274F6109B875AA33A69498D88142EB815E2F41D35987C0BBF68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Default/Code Cache/js/f287f9d8bb68a316_0
- Size 54KB
- SHA256 a62ee9f76e76ea1eeb8fdb433cadb6bb3766c640333483343dc4bfc302cf99ae
- MD5 7995cd6fe1c62222e7c04b300a6ab340
- SHA1 732678e28ea46e8cf710ba04785730cef654e9e2
- SHA512 bec16fc2ce44fcf05d570d74fa5d3a6a3547b1518d4e03c411e5402519d1133db3f9f68fbd87f7011830e4e506d55a0108e34032b70b5433c3d59b0b4cc1022d
- SSDEEP 768:5urhnlaeo4JTRaJRkZy0mTGNYE9xOmj/L3xLEfEEywUQWYZ9aethaSSV5eN:ghlro4dRARkZUQEILCfEqUXYNhC
- TLSH
  T1AB434BCFB1C1F335D8E274F6149B874AA33A69498D88142EB815E2F41D34987C0BBF68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Domain Actions/3.0.0.16/domain_actions.dll
- Size 64KB
- SHA256 cd4e81ff9db4c6b086b70b09919b9426ca1f2c05ec43c477e9ce99156be66399
- MD5 4ef0ad12ffc81a3570d19817265b7197
- SHA1 a70a993ad81ee36d5f719f2f046d30b397fb5191
- SHA512 c270a4d32d8f10eda440ce521cce4f29544b384577548ac0e43b869d726d9cd6d1b283020ade3bd8153b0fc5f6a93bb630b7139b2c627ad0b0e3fe78bf01f212
- SSDEEP 1536:ci9SEjRPuonFOxAdgxBf8pa5oMNOKVGxJeyf2Fm9vcyaZzezj:ci9IcFPgrfrxOKI3dgmuyaAf
- TLSH
  T16753D1988F68501BE5BA1DB0D576DF0AAC79E6A3472060CB2391FA5C1D21BD07F3671C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
- Size 2.6MB
- SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
- MD5 0ee2b50c85a110689352fccfa77b5b18
- SHA1 d9ecc4b12d2d50e3cbce40e75edad804c9988b25
- SHA512 a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff
- SSDEEP 49152:NodIJ85qaIU7ui8DDR5s8L0Oty8CvFqwsNcrCY2/YUZzQ7L9qhV6O8mOn0k10:gEDRwrcAwDl
- TLSH
  T188C54C1FA64951E6C07AD138C543550BE2B27C60CB7263CB1BA7038A1FA37E2557FB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.81/adblock_snippet.js
- Size 2KB
- SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
- MD5 f5c93c471485f4b9ab45260518c30267
- SHA1 ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
- SHA512 e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
- TLSH
  T1C541F146AB3477B703EC24D158271C03B3684494562CE519FB51EBAEAE1C46B4EEED23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  bytebreaker.cc/WebView2Loader.dll
- Size 156KB
- SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
- MD5 daf9a81004a961e39650a0e2bafe233e
- SHA1 62f863adbef09905c75f475cdd5ce68b0aaaf73f
- SHA512 95f1ffa93b0c16fdbaf9eb2d9f9fdbe63b1946a7cea0e366a9c68fd4695a97c7681bf9e2b2f372c8ab6430c0a37cac733154e94b1d7a76cbfa3c1de340d5ce33
- SSDEEP 3072:8nVs+j4uIGieBiCIV6A9S4arvNQG/pTNgWEtJctHVA9rWt:gj4NCy6A9S4YcWEtJeVAk
- TLSH
  T174F34B5BB2E90077E17BC278C5A34A16E776B8111750AAEF036447791F237D0AE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  bytebreaker.cc/autoexec.lnk
- Size 2KB
- SHA256 efbfe672f08e384cf022bd9722e5b83ca75f602b53fc0d389525b179303897f4
- MD5 fb5ebf1ae11a1059b54a7c1cc769ead1
- SHA1 0d4b9b9c8aa8833f2a4c91f595c915f82926a2c7
- SHA512 d66e93ebcb0b496c38b1c9b3468125240530b568de9993cc3c8454aa0be96353ed09337d193195b71e9a0c4c2ae280f36f29f5cebea6df05801e48c8ea269c01
- TLSH
  T1834115035FE60521D3BFCCB91EBB340A8A677262BB4109094114D68E1C71D17ED2AB1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral8
- Target
  bytebreaker.cc/bin/Decompiler.exe
- Size 1.3MB
- SHA256 2221e07fab57a47f66cf46b01aaba5fc154382018b857a3c2323e896f17dcc8b
- MD5 b961375070e94e3d71a58a963eeb36d6
- SHA1 6d3897cb14a0d8dd88de05e28ee89b842277f0a4
- SHA512 3a5d99230e21f3039ccfa4b5201393cbc14c7c74e2ae3e307bfe24641e02ebc295b3e5046ae8f27531d6c3d4906ba847bccc13fdfabbfed00a2008dcee1be841
- SSDEEP 24576:QnygrTUzDmXap732CXvp7sy/rv7xidVkjOJxLBJe3/AZWK:Qny04zDmX632+B4y/rTxidVkjgxNJEoZ
- TLSH
  T13C554953F66191FDD16DC074C35AA633FA32B88907357AEB1BA047312E56FE06A39B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  bytebreaker.cc/bin/Potassium.dll
- Size 9.6MB
- SHA256 4c7210aaefb0d2535de3e313718ceb2f7eccda27adfa5be00c60524c78e5b193
- MD5 edc4e85761440525d514aa2a68007698
- SHA1 9003ed7c83c9f42188c5d3397e1959e8244a484a
- SHA512 52ea9bd672a48fe9b8588a834b4162bbbe0ebd077be05b06f8f006ae125e5b913f8db265442b93dabcc3224a592f8edb8dce49bb376c58e883ba2f42acc52fbd
- SSDEEP 49152:zP/DWzDfwoujROzVpxQdjt9en4XVV8rfn3TVtZFA3y+fF9lwzn0pl6wYNxkXBvdN:SskrfB/jwCbxkXBvdfjVfoIO/8
- TLSH
  T163A67C72E2AC25ACC3EBD075F9468E17E732B45903207BEB99A14B511B53BE06B3D341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  bytebreaker.cc/bin/Potassium.exe
- Size 16.5MB
- SHA256 27778f436f16708e362c8b685c57c69309e1e0450ee73cae16a7e6b5d5e16fb5
- MD5 31412c22c0b32993cc0dfd50f0a037e7
- SHA1 83e19825f562ebcb20f2aa8352a0b82ec07d4fb5
- SHA512 caaa595e6ef11b2b92fc2cf4fe78f0dcac0d898e9163e910b2f09ea34dd6bfe1b78cfbe55942507aa186855edbfdf7eb6cdd7ee0f3f6223a695c5f86177642c6
- SSDEEP 196608:eDsmd5hgbRc9iASmLM2eSdI/lm+a119+kHHc6axzXSE+IouN+jPsgnqIVjJZt92+:eAmkc9Gm98lmV1rp+xjSZNXjnC9dyPv
- TLSH
  T1270723C2BDD592E8C4EB4E50568A33CE20D172DA85FE6A1F3AC55C036D70FA60D4A973
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral11
- Target
  bytebreaker.cc/bin/monaco/index.html
- Size 12KB
- SHA256 3ed95569da43fcdac6dc31e659c64282978f9c651dd15d91eeb8286632cf98fc
- MD5 d9f0b5bb2aded87b1aca26cff493036b
- SHA1 32a08043ad2cebe19fec612259df0617664a7cb3
- SHA512 ff28f50203058f481deea31016e11612e2c56b0df58814c0ed258a3b6e0e32a3840c0bfd2750dfaf721a058fb8bfff63e1b8f9fa22ecdb560c6f08861248ac23
- SSDEEP 192:o1pbX0ggAbOmUSMKTnuMuTcIg5v2wzQWBV1VHDwFgHQsK4u24FzG:s0ggAbOmRId/+V1VjwFgHQs9SS
- TLSH
  T16F4232D9B95F50CE32D232AAE4FFF20AEC2DC17E900401FAF69E6870999951543B752C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral12
- Target
  bytebreaker.cc/bin/monaco/vs/base/worker/workerMain.js
- Size 174KB
- SHA256 19b566655d73370a820a7d6fffe7af03dba3af4997016c0983be5bd188603ec2
- MD5 9ce9e46b6d66d8b2dbcabba577cad2ed
- SHA1 397b0e9e7b2bee37a8444e84bb9788a0bdcb023e
- SHA512 f322ea669fa81397066edef062721ae3dd515b3d61c4ad7bef0db0eb3a53f056da298fd4f761bd3e5d613e6f5803a7c35ed056085ac3b97e06c7bfd47fffad49
- SSDEEP 1536:mi5eQeCEwCP1m9JXKmA1xKzyOQJf9X2K7eM9bWXsUK5QSkSoIMQwr+ZjtQYyeTMO:mHTdkKmA1yyOQJl2K7ns6dZ/RVaNzY
- TLSH
  T1C9044CC53265984353E652F5A07B0107FA38B877680C556CF3A8C9DF2D6A88760BBF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes.js
- Size 2KB
- SHA256 9636806a05da6a43937d122e2211e8d2877ed95caaf691f4f079dbaf47e0c6bb
- MD5 c25a7c14fa5635368e75d154c185755b
- SHA1 dcdcdbd05115311a0929390b82b6c5c2b029aedc
- SHA512 3a6b15608fcc48f78a6442fff4fe7781603ceeb7b8bb06f2c6546f821be2cb824612dd5d143bdecfa4de33a3f1f5723d2f643d4d7de2ec2d1bca3fc1ba5eb44d
- TLSH
  T184517096B7CE6BAF598C33ECE4778406A69FE5336116883DFE0C90C410D3119A2E89F5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/base.js
- Size 521B
- SHA256 9a6c60193eb2dda7c2682bf9c7ff7e01b0f6000d70881583f0055782c8b2c619
- MD5 29e50887a6f1c445e0f63bed73eefb83
- SHA1 b8e006b9ad14bb6012497e164d9a4f926e2d568d
- SHA512 16cc7fd8b5641d347a6a9e8542a6ab29d71a432dfb2f72dae05b21b274d92208ec7c5a9ad1ba313658f3a68aebd9edc3d0bcbf07a03d0f16eae95568f175dbf4
- TLSH
  T1CCF0976BF78F30CA1E474385A73AC1495C6EDC32D2322035F51CEAA94488C2923468AE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes.js
- Size 33KB
- SHA256 75418233aff9a1401f6c467f8ca20999803436bc1ebb463123d1fb94dcff1f38
- MD5 fabe9b3ec7774eb374f18709ab41c8c0
- SHA1 de6c19413ef008000357bccea90faf0d23ccf605
- SHA512 d7b4a9dbfab0ec55e27b2ded86066b37ebea7d50b3b6b28f44c996f8280463176f1107c6bf15a52fb700f88ac3e0e7b87fb8a50664da9b31fc0e89a38d2055e9
- SSDEEP 768:EDVdzN+yYumzw/Wx5nYCH0e2zBsGMPv3lHhj4MyjKG9jn9/j7NFvHR0hT/YEkd3M:H6/W3YCUpqUDW
- TLSH
  T1E2E231E7F38C3593199B4784A27EC68539BEF6BDE4F10079782C5608079481933AB67A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
- Size 11KB
- SHA256 573e821c40792e10d2dab59ee3483e2482379241c94b2b98ec5fb098556e3e89
- MD5 f2adca6e8020236f5e86b8e6aced6806
- SHA1 1f77dc5554c3ad94a78b693d1bd8fb859138de03
- SHA512 040fbb8bdcb58ecd2fbea318ba661efde39f96ac2e3aa751caed100e1b4a8941916b8a9bcc6335ff76875d558a2994866069f50f88beda76b7f09f258fe670c1
- SSDEEP 192:AJCfeXBM5iG6zUMmYmr6QMlr4qLYFQjG6AcE103aNd9xZAqGQ2qFARewPxHFTX0:9feXB2iG6zUMmYmr6QM54qLYFQjG6AcQ
- TLSH
  T14D42ABF7F38D799719438786AB3DDA842E2ED938D93240B8F70C6615248C959232619F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
- Size 594B
- SHA256 9bd9c85c5d1f476e663889ab2008f83b323c8d794abb0df35d43091c689ef64d
- MD5 4d0ec8edaec389b1eba92c1d18676f09
- SHA1 6eafd8ed47700b9a2ff1e10dd7468e50fab1bf6d
- SHA512 d4c7655d7db8d4f7d4bb2d0add36bef916caf291b2855785685a3e812279369848ce081ac6fb5cc869fb827653a4a1f874273af17bee67987e3c3a441ad368e8
- TLSH
  T10AF0EBBBBF0B3697060B63C8AB3DD740192DC831C4624425F20C5B6040C0C2772360F9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
- Size 1KB
- SHA256 f7ada012dcc309b7c1cd272d1a81657b0ddb3d51521e682116522099285d525e
- MD5 09bbad4c05be7ab76cc3c5ef4fa9ddc0
- SHA1 a38cb372349a2420619e2fb629f0912500dc1064
- SHA512 40b753d8e97ba46be9fe4241dbe892bdeb62c902ea088d68ee7ea5ce0506d51b16f7105355a6b5360363c80d98b0f644b7a7ea2b4262210f24870368a2629c44
- TLSH
  T1AB21EBF3FB8E304B1D028785573CDB011C2FD834C87210B9F108A67090C9D42225B29B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
- Size 777KB
- SHA256 799c0657b0ab027c3ec0794e8934bed4a4a8e7f063dcae47783a7f32fbeda25c
- MD5 b1e41317d3ffe843032f5eb6f74806a9
- SHA1 506f617da8d8093ed58cfda68e0d60e1aa2ed08d
- SHA512 fb538a73935fd41b9f2ba9f6ddcdfe066f6f672d5dfe682dad301cae3392a93405fd35ee61126e9889e14f71c51e11cdecb4e20d213ba91b34801ec5b89ce02a
- SSDEEP 6144:0XUmTfyptLD/yxnbDh+hIAKVwhWppLTl+ExT3dsX34hAhbAhQ9qhjLmWhXXu:wVyx
- TLSH
  T136058CF7B78D6A4B2C07934AB63DCB04393EE6B4DC2254BDB65C7B2075CC901126369A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
- Size 16KB
- SHA256 807dd6d35bf5fffcd4de4aa4ed1800716223a6fe014077f23f2f652ac86d2a31
- MD5 430fa91891107d6f1f3c3392dde9ff4d
- SHA1 5d42ebec7a7c3f5e5b7eb074c38572345e33c1c1
- SHA512 22011409e428216a619ca085ce8e034dc6bc3a8f9de27fb4f2e3dd6b8aa8cc7aa3b02508af816137f646ca1fa96e083a832e68bd8c8b016bfd7a3674d532a875
- SSDEEP 384:pFcCsgQgj6bPo2nv5CYR8/+qvPNEzH+AK6/NBA8K/tQsdz6FKRjrDcWYUeih+hrA:pFcCXQgj6bPo2nv5CYR8/+qvPNEzH+Ak
- TLSH
  T10E72DEFBF34D36A71D4B4281EB3DEE46261FC67CD83201B0BB5C6A15164885623A785F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Model.js
- Size 7KB
- SHA256 17b72f11f227d6261e44b0bf49d6cdc4ed88cef93c68384ba73f7550d9614d99
- MD5 6cf31f5ac3af68e878bf565c9ed6404c
- SHA1 afaa8bf2c9326ebe8658566fe6296a075d49e23c
- SHA512 0fff9572888be7dfcb792c53b006a6f4b8328d6522b971f5cb8fe9b0ce17ba9f82b6ae0a78d56cf585121a9a62772e70b03227074bb4683a52617f46c52202d2
- SSDEEP 96:AqiyuRkcbZjRZ7AiQnRztu6W6cEY4Ef+YepYk6JY3g6RtqYnFNYlyecYqzGRpYSY:AJye3VNZ7/QRvcKEe9fg6zSyz2585
- TLSH
  T167F142FFB34D726A18434381AF3EEE863A3EC438E87356B5B45C5128458C92533A799D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
- Size 1KB
- SHA256 660f088e8da6e3c7c16ff4df184a92fe96c2b2ffb8c3b3411f30b68d93723dba
- MD5 c41248fefc16d5e096019eace4e8ec90
- SHA1 e22931bf5fefeb7a5fc4ce7770283328e588241a
- SHA512 98f6a1367b4be1da50d1a257e726b9c1a66ae22cb8e2d1439b1dd0b4ba4d5a7e22340b165b489911d0a8603fb5c827c7ae43d89daf10dde34352a21304265a4d
- TLSH
  T11621F0ABF3CE7456234701C69F3BC9492B3DDC7083220610B15C99A088B4699A6439DF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
- Size 6KB
- SHA256 60a9fa2721d16f3162f5701b7ada27de313794b97047cc7bba25f82859e4c75e
- MD5 1b0977e0af22c275e5f7df15de461932
- SHA1 2fe9b8a3910fbf4187247dea7402baa402764210
- SHA512 8aceee740df28fdd7e28abb3b42617eca70b33756f5b414366019fead5f94f716f3fde34e3600642a6c12b7ae5904b1700332a1a3a5c20c3f5f4d609652384b6
- SSDEEP 192:AJDF/h+8NpUG1mQqJfL/3x78ONlzN1eFqT:MFJ+EpB1ifL/JNoFy
- TLSH
  T19ED164B6F6EE26F1187A024AAE3B894036D9B3BC94EC7068B7DC541D53CDD2C131607A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
- Size 12KB
- SHA256 251d21959744760aa1e79274b7a9fad433fd42b2d3fb4783f56f0b070d06cf8e
- MD5 b965d0ffcb61fec7f70f4f28a44e9982
- SHA1 2a4c47087318178698368ff06fef670155bdfc53
- SHA512 9da1ea797cbaba01c92dc7a68a586ceed6048565de1b8e40074a76666a8ac1df910a91c547abd5a2f8882686ed5d2cf1079cb47d626eaaf478da74b037d06af6
- SSDEEP 384:XQazTbBakPYkrvL9Li9ZV7+RSC1LQS7FihmJVPMp1TQElbvvQeTRmvhQ:XQazTbBakPhrvL9Li9ZViRp1LQS7Fihx
- TLSH
  T14D5265F7F34C364A1853C382AF3EEF41782EC93DD9339178B64CAA096148915276799E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/functions-pd.js
- Size 22KB
- SHA256 c7fffc0fbea29bb98e37f8d67a2ca69274d81ce9458da85c6db94d2301d2e273
- MD5 6ac01801d134b2a4b3eb0bfb25e1b75b
- SHA1 24364c330624c102946babef8224f298cd9c2f09
- SHA512 e1c1211d32457250e4031dbca4113dfdf33292bd0bfe949a457d84f9d28744d9c88dd4ab014735c643c0da575be6c7591b8aa1237bbaf9f8fa5606cb3b59ef4a
- SSDEEP 384:UtFktD7tntvtCtqtEzt8twtj6t4tNtutm3tNt5tftXtjt13tMtmtDtxVtDXtdtJB:U7ktV9ogoeqYOTsE3T3NZ1Xi4lrVtXbp
- TLSH
  T180A286CBB78E696714968713B13EC6C6263EC07CE533A575BD58AA08058C46C13B7B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/functions.js
- Size 10KB
- SHA256 269c81ad08e8302bbd3bfc1463e2a4d5c263a20894536a913501bb36df26a196
- MD5 3f841145388311a85d830c615614eab3
- SHA1 61af50d8d6f9728507bca4c3e13e14f5f64f108d
- SHA512 22be56298a92a4cbdd01ae7ce4c9dfb5a276fc287e22e4720e4e2adb5af7d2dc30127154f5eb4f50d0826ee4094a9e093e64cbe21b9956dcce0421ac19423647
- SSDEEP 192:AJ3deBFp8Nweb2RvsYTvOZOEGOzeHUuQvZ3Okp5TrrEFfgRVpauiOQGIPLO08:IdeBFp8yebgvsYTGAEJzeHUuQvZ+kp5L
- TLSH
  T19E22DFDBB34F651754D79B27B13EC2D51A7EC0B8E43195B8BC9C99400A8847C13BBB8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/globals.js
- Size 757B
- SHA256 f7922ec8a50df2a30bef9cc7e9148934a9edcbaf8874a54b81ddd4569120b836
- MD5 f0fdcfe48038b56231a9b91d4aa95b2d
- SHA1 359ca2ed8a6b084725ead5d94cf3cfd8037b624e
- SHA512 85aaec4b8d0566392f353828d2bea9058f96e2b5d97ebbe13d069505a315fcd552463002c6caadb9f2ddccdfbf176e734017d0d9429eb2daf7f2947255ca9f73
- TLSH
  T10501A20372EEB3DB1A5A13CC7E7FD544224EC2E6C024087E57941F21BA8A4650577EA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/keywords.js
- Size 428B
- SHA256 3f4ae1c666488bb398eae05c6ef9fdcf2e6c126f9b2510e6eee43a8d64d21325
- MD5 5176733f9ca5189ac3e39247a7121f9a
- SHA1 708db91150b2b968b9f70995c65d02405a5a036a
- SHA512 f2d14011392f752291b8d489120389b5ca12c553b18459945c5147f1a94f5f58882e1b4f79f030c05d8bb4cb189d38b113152ed8bce4df3e430c09a7382ed206
- TLSH
  T185E09A8B7BFF95DB0A0552847F3EE080204DD823C14E0A3AA3248E78408787915B9A2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js
- Size 1KB
- SHA256 611aeca1bdc19d0cd5fd440ebf5b07a9894ff44230e7f8cf8db832b895a6d834
- MD5 f4c544ffa5cdbf5b0b978a5977c35cfd
- SHA1 0e27a3d67232c4e2ef836a4260acc434e77a8b47
- SHA512 a84aa78fa060f23a3f0ed8f12ab7585f45c0624aa3e684d7ca7f84785154f0c0b50527d5c389995c4131c994b67041089cd8a98609695b685a18f84f3efce022
- TLSH
  T185319DD7F38D619F4DAA4382733DDB406B1DD078D17260FDF5DDAE2461DC4580A62628
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js
- Size 11KB
- SHA256 0d0ac2b75ed1010e26513a14e16db3a1e28169c03dd46c74ffea8c0d3c43fe34
- MD5 6c3adb6f23d06c0c4ed4002543b1cf08
- SHA1 fce36bd3e7e47149bc10e95f9e25ae067f1f92a8
- SHA512 c379a093701e9e7a60b83f9a7c50bf858b0f5334f957317626c5e40e58ff4cf317f1dfd9393ac8b0a95be920c12baa572b7940c4ecdf6693de4ca72ad94e2e8f
- SSDEEP 192:AJm5O9SLKnKsgvAKOnzKTfh+gKQy2NyL72+LKTKLbdcK2KIKD2+EHKyzc6U+k6tm:Z5O9SLKnKsmAKYzKTfh+gKQy2NyLq+LR
- TLSH
  T1BD32219FF70D3296458766DBEE3FDC88293DD438D4B396A1F82CA55002D482E136B85D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/libraries/math.js
- Size 12KB
- SHA256 619973aa7da2c2bc8a34b121245bf083c3e90b1b9cca9d8961dd2d07885f7588
- MD5 c9be95e59dd86ab7706a36b86cb09508
- SHA1 f9434690df19efe3aa07702348641c95995094bf
- SHA512 be1f9f05fcf9b3ed991bea1883809f92b1431c2346ca43834f47e5ab8fcee7ce83785edca6db51699864ed4d3d3016e552d232d75a4dab43d2e8a274700599f8
- SSDEEP 384:S4ZscscHaA5rF6i9fx6EAu4usvo0z2/OtnJiUhSkNmajHxtk:S4Zsc7HaA5rFZfx6E74usvos2/OtnJix
- TLSH
  T1E952BBFBF38D3566244383C1977DCE452A6EEA38D873426AFA5C5A100789C54335789F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32