bbf0d4edb634748189b7f89bf942112a4420b567d407dd13c79dbf64ca9fccbe

Sharing

Copy URL Twitter E-mail

General

Target
emsabk.rar
Size 5.0MB
Sample260525-y79cmsat4x
SHA256 bbf0d4edb634748189b7f89bf942112a4420b567d407dd13c79dbf64ca9fccbe
MD5 fa32ede7f46c93b934d20c9b24773ef9
SHA1 4f92dcc901aad7db5fca6d7e904161469dfd2df4
SHA512 79724a260237ded596b6351fcb3058dc4652cb676793c268d4cbfcfab66149fdeef8392e815132a71a30160b4f1c77c670e0f130eff687194053a19e02e54b82
SSDEEP 98304:yB03F3HV42sNDb1SGw+g8N/eB2g1doEQal3jH1xJ1siskCYyVchhSS6UN:yBETsNDbUGwFe/eBXl3jH1+kCYyDS6i
TLSH
T143363371B1E7B2030156E742DCBA928C480CB36E288CCE6DBBDD5F9185701BAD1EDB55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  emsabk.rar
- Size 5.0MB
- SHA256 bbf0d4edb634748189b7f89bf942112a4420b567d407dd13c79dbf64ca9fccbe
- MD5 fa32ede7f46c93b934d20c9b24773ef9
- SHA1 4f92dcc901aad7db5fca6d7e904161469dfd2df4
- SHA512 79724a260237ded596b6351fcb3058dc4652cb676793c268d4cbfcfab66149fdeef8392e815132a71a30160b4f1c77c670e0f130eff687194053a19e02e54b82
- SSDEEP 98304:yB03F3HV42sNDb1SGw+g8N/eB2g1doEQal3jH1xJ1siskCYyVchhSS6UN:yBETsNDbUGwFe/eBXl3jH1+kCYyDS6i
- TLSH
  T143363371B1E7B2030156E742DCBA928C480CB36E288CCE6DBBDD5F9185701BAD1EDB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  inferno/inferno/Source/Hacks/Aimbot/Aimbot.cpp
- Size 15KB
- SHA256 c659d731b441d7a75bc15a40d410fdfb7796d5313c75659d5eba838f381f5d0c
- MD5 92fd5a5313a70f80081d93cc24a38513
- SHA1 81da123de1204a7a5c4555b7d0a7caf10c8b8e95
- SHA512 bbb73149d9805304fbbb951cb241a7921c998ccb0ed721f996ccad08feed4455c14e9d1190b4719b5591015b46ca16f35b9c786877982375b8dca5a4ce9007dd
- SSDEEP 192:siUz4uQCU/442GkN1Y11ttBDG1gDO84E5dSbEWu9Wpa0b2oiKQB3u+zdQ1QiQ2W+:JU8jZAWD51zSI930bE32b
- TLSH
  T1076224F1373DF4490DA7916511B51087A57EE4E1031E32BCF88EF1A471AD52B8B988EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  inferno/inferno/Source/Libs/Clipper2Lib/src/clipper.offset.cpp
- Size 21KB
- SHA256 55a22d2db04ac81b11ed4194fa553606f344f47c2c63ff1afec37befc5f83c9b
- MD5 7e1e2199bc0beae798fbbe6f150d9d49
- SHA1 b3dd20de9c9aa42152c755649fce076ac6b296f6
- SHA512 4e520c887dc4fd234303eef048f493655257559e8270ec85df0725bf98cd7f2e75cbed9788a1a8f7a59dbe0119c45850d31789db311bdef5df94cc4ccf8c4a50
- SSDEEP 384:55rprTIHY7o3/axxPRWKBWyWKBiORVCpwVodBnxcdgVQB/+aWaqkS8S8+olix2+i:TpaY7oCpAOD5/zLqOhZFZ
- TLSH
  T1D8A2B81A3C99692A85D2F3C7913301C1D93DC0C1BAB259B7B58C65586F1E82F893DBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  inferno/inferno/Source/Overlay/Overlay.hpp
- Size 53B
- SHA256 a1e84495ef08f7c757f4516fc1ae3fe98542e71f305b89394a95bb62a2f16333
- MD5 8257c0d66454b34c83c5d0ebac30a227
- SHA1 95618c8c97f783603d7c3437f28c3fb10b04c402
- SHA512 5885ce3e6a17cfc0843fa9a789a516636e9c3dc9cea29627b65052279987e14c1172906416f1e55cac30484f75f516d9976588408201708fe858acb6e11ac551
- TLSH
  T1D79002932C97971897629029452910730A14209824114843A897442746123218005C12
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  inferno/inferno/Source/Overlay/cfg.hpp
- Size 33KB
- SHA256 16ea460f04a0646b3794c27a7532cf9b6b247d1291ce98aa69cae982d50243a7
- MD5 62f016c3fa54bd164d0deb92f1f29bba
- SHA1 aaa65299e844cd7ee4e3a8e70dddf219714cc640
- SHA512 8a23b9fc173ecd5df6d3dc76fd0051a08026f87005b79a6d1f8326d759d2faa259bae3074dcd9af8340d55f30fd45b542fd2efab552104b59890b34907ada768
- SSDEEP 768:qhSNHUydqoT9NVESRfPjkynmeYVm7vsKFE:lqS9NVE+jkynmn
- TLSH
  T1B6F2C0E9517DE3DE5823013D265412CAD3AAE89771AE4B61F0BD405C3FFC62C18EB896
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  inferno/inferno/Source/Roblox/Cache/Cache.cpp
- Size 57KB
- SHA256 55b002235f7cc4cff3b0b1708021e509113d59b03e119192476554bf6ada39d9
- MD5 0aa7985a396b4e5ce32ae8d6e64bd60d
- SHA1 40101664d4d2e4043b7c450fd42e2925418ad747
- SHA512 4d603ea6c30133b8c5538fd1d100cd08bba3d9e104f1fc3da4b7a90cd296bd3aea8a4c7646cb7beae6e9e3c3b52d4ffe70a2a332e2d24fc4252e806588320f35
- SSDEEP 768:tZ8SyM1bW8cIWo6jvJ0sWoZon90RS5AcMlh/jxCBgK:tae1bWPIWoq6sZonGRS5AcMlh/jxCBgK
- TLSH
  T1C843B9180769B2910C33B379AB33444AFB6665730B280305FD9EE56C3F74469AAF1E97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  inferno/inferno/Source/Roblox/Cache/Cache.h
- Size 1KB
- SHA256 176ef5684ea6a3576ff8a2f04bb69cd64c35ac672e358a10fc82877ce1369d3a
- MD5 33fc794a952eeb48609d1a9bc04edf60
- SHA1 3d8c1e6e116882e227027229c8864a417820eab2
- SHA512 190d5567a9a3b0c31099ae27cb12e5b8a5bfe313f9e0f15768bbf57d14394bfbc433f7d297920ad9f318bbc571c6077c8d0d301b2db877e642f1c210e0221a79
- TLSH
  T123317B4636BCE9492CA2C0B6B1B719E3F81830E0976351A0F44DF0BC716641EAF759F9
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  inferno/inferno/Source/Roblox/Classes/Camera.hpp
- Size 1KB
- SHA256 ff2386c6fdef5ba7986246b70cdd12a05b36cb17a8898f40ad3314aba54abd0c
- MD5 c08453c2989e1669a5fef72dfd928edf
- SHA1 32c357b4bb1680701e0b51daac0e4febe5f27710
- SHA512 7e624d7782f65f77565785bf8c1d45feb4ac369c7f18de3bab21558662ee954b79802afdaa6d72fc2cfdf7bfc48760a65863d61982090c305b06f2726a6e9269
- TLSH
  T199117B8073CC38C96F92D54512F874C59A9EF8D5816D88576CAE8071FE814FB0A6ABF1
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  inferno/inferno/Source/Roblox/Classes/Color3.hpp
- Size 7KB
- SHA256 fed7193a7b5d3e791de89347f12285b765447ef541cc689858750a149bb2ebb9
- MD5 88e8950d82bccabc0625a4cb8589a836
- SHA1 8e2cc749a3b7dfbb97585a00bfab634fa16dc0ef
- SHA512 f5e6cd2f1298dd97c16a5cc7f523ee01466986708c2424c964ae9f3b39cb9a4a92b82b95318f8b4e576865c40b232d34fbd14a45069fc0d72dc3f25de298e0b0
- SSDEEP 192:UZVaEe+XE2V+XAzCHQxURIvNzKPplwOoo0H0+B3bb8NdacLhS94lqiUpx7E5:ULaEesE2oXQ0QiRIvNzKPplFoo0H0ybq
- TLSH
  T125F169693EEB41FC92A6B88434F4CE83FB588216D11DD1BDB7029AD9E10DD7DA0B205D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  inferno/inferno/Source/Roblox/Classes/DataModel.hpp
- Size 593B
- SHA256 27a5c62ff6cccf7e4581492bee1dfe05b95eec5f04f0b1e9e9df8d378b4bebf0
- MD5 7882d4b85bdc759181c886f8e05e145c
- SHA1 003e9d394ae8b96ff2fd2fccbf17eb8feac2a2b1
- SHA512 ec762abf2f95293c2ed2f9398cd42122fc7c37d623af2c7407524603f35f51a4fb04aa24a62491ea6091da1d055528cc2e0df4c538752d1079a66308599c9c48
- TLSH
  T19FF02848B6AA3A5A612A8BB03374E0C0FD18F06181E665704C1902F074C54CC796A5E1
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  inferno/inferno/Source/Roblox/Classes/Games.hpp
- Size 146B
- SHA256 3da8c7821fb1975edbfc7a8326b556c0c1ba64912c216f8e9d0aca57acc659bb
- MD5 65a4c96495a0c0c491d922440d09e7e1
- SHA1 8ffce92634da2bf7a705730ff2f079335f9df99b
- SHA512 1bb0160a80db863be95edf2da4a394eab02c85b7c1574a2ae66754238e1f12a333264d647934e35243f55ce9f2e68ba752c4fc309fcd61d299f727c49928d879
- TLSH
  T10AC02B0B33CB382D032E42421DFC9037AC6732740430502A9FFA00A029CAC0811E5D59
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  inferno/inferno/Source/Roblox/Classes/Humanoid.hpp
- Size 2KB
- SHA256 07f39831438831c0cb0508ee6c186dc7168e457fc432ea0125bcc6fb180cd379
- MD5 59525362ade40f3d8aa8420759097d5d
- SHA1 4cab202dab5e6398f5f0e59651dc5cd1f38a40be
- SHA512 42da5f082835f64d2d143abfbb998bd55e93bcd70426dc58409554c657486263105d2cc954d16c60b9f1586fff260e6d7525965c8b1d37b3294a29c82a4cc6cb
- TLSH
  T1F5417D44B3EDBCAE9391598029F470CAEDAEF4F4411A42B29C6D40F0B1908AF4D766F0
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  inferno/inferno/Source/Roblox/Classes/Instance.hpp
- Size 2KB
- SHA256 e17a9036cf91e1c55bfda6bfe6402cd66924a6689030b65cf22703ef9038c624
- MD5 cef392b22d3a7d8db39363c5e44cfb5e
- SHA1 70b1a5a1c038851c56c4e6757ae84640734a5237
- SHA512 3aec6dfb06d1d5d1ae0935895db5fd11cc50b367131292d88ef00ba8babd5e980781b31d2c36c1867902fa448d005a2916dd5706080bfe3fa05e49c5274005b2
- TLSH
  T135517F85B7FE7D8A565544A40678F0C9E48FF4D2C16806B1DCAE40B0769009E4FFA7EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  inferno/inferno/Source/Roblox/Classes/Materials.hpp
- Size 1KB
- SHA256 45251b3fee449f2391e10aa80c4d5ccb867e281aeecd4d20b84dab43d8aedfbf
- MD5 b5a2dd68213390371e4ff7c09ae5c50a
- SHA1 de2e617ea62dc4eb9001882f99b3a8728394231f
- SHA512 da973168a54a7023c1db987df05b1fa0f3c372711ee769a10aa9522b5bcc035ba22cc0e3f63d3461c95e4ccc86d296cc87fa559a022e2f80bbf0b91e839e8f6e
- TLSH
  T1DA213A550C0966287E7C6715B9704559EC303B734318829BB7BE16100F32A5B64D59B3
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  inferno/inferno/Source/Roblox/Classes/Math.hpp
- Size 2KB
- SHA256 c1caac598ccd562df377411445831d0866c1cc5fd85e1c1006587bc54ac23921
- MD5 2b8cf8f13956e0b62ea4a37b533b165f
- SHA1 37bafc7f318cb738f8647b334a68aa436d79a01a
- SHA512 06a3df30bc98c039acea1ab416fb4f27fa64fc624e1a356da5f0467886bce3fe51a72d000c459a9e8661103f882dffce4411505126fc7e31715f418f5aadb5ee
- TLSH
  T1F1513A8873DE88C24FC6638489319144F5CCA9E7B809D4BDB18C51BCAD72411DB999EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  inferno/inferno/Source/Roblox/Classes/MouseService.hpp
- Size 1KB
- SHA256 0991ff83dc07d9f7ba875a2d10c58700caa17fa04b27c5388f269e2a2c88f8bf
- MD5 534544c25971ce79cd992fba983ee563
- SHA1 0f63463ac0334b30d35605c561f8469e344a9d4e
- SHA512 fc7c72d15fa7d7d696395b42525c7a55bbcfe4478a5c35b7dfd8f1d84fc74b41ec36c28defeddfe33db703478b286dcfe090fc3294b264e17e27707cabe0c578
- TLSH
  T1A63168498AA8354114B3E734DB91E186F33540F3529A46427D9D40B13FB38BACAE2FD9
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32