b37427847e51effd28a1581dccfd8c2fe05a17d762caadaa0c4a315763be6871

Sharing

Copy URL Twitter E-mail

General

Target
RoValra-main.zip
Size 1.9MB
Sample260528-vb8jpagw2v
SHA256 b37427847e51effd28a1581dccfd8c2fe05a17d762caadaa0c4a315763be6871
MD5 a86aeb5659ebe3810c28657c7e5a881b
SHA1 423e0c834f7f38e57627dc7090e358bcc750a118
SHA512 9804e768d94370984fcfb0e6c7cdb9911036c956c952424112b17b3a9cb2a84771ec3991a0a00ddb0dee29b32ceec7587eaa53eec99783ca1e0b657d49057343
SSDEEP 49152:njCigiV00MF739LIwRaLmgCbWWJFp4PbjM5ugN4u++E53Q:nClHBLaL5+pek5T4u++2g
TLSH
T15F95121D6A2E1CABCD72B2BE78AC07119769D403D514A9105858B8FEFADF204FB6734C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  RoValra-main/assets/RigR15.rbxm
- Size 28KB
- SHA256 1ced4dc9e7a927a3b23a455376d2c4254529fd4221bcf03b3447342597aab65b
- MD5 011d213c3ce443eba99437b9024baa79
- SHA1 ea8a69c2a75437b809b1a0a3f91365ea6800ba66
- SHA512 07610f0a50f4c2f8e2c483e9da8949fb2987c76e4f98b3eef2991e40f49637d97b4954a43cca9bc344b30220c0a2f3b6e988117f95a575dec984ad09c6059513
- SSDEEP 768:Z330PIyPpvcqbbJOLYKs5dXJFQHqP/D4i88rgtwaboL:Z3EPIyeLYK6s64b8QjG
- TLSH
  T1ACD219F7FD308663C5A87331744A45661B30561E9246C319EBCCA8B3AC8E1793FE524D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  RoValra-main/build.js
- Size 7KB
- SHA256 a45f61b7225ef0ac168a2f9f4237922660f1709f773bd5287226b4549d7c2e27
- MD5 058dacac24a7129aeadaac5df9331824
- SHA1 295970ad7f24d42a1a0cc2fcf1761460077b1d34
- SHA512 b152fd23d4475053391ae2e316ae2669c664990e3d461626404e9a11af5a2c65298e5a61b62f27ea858ca87343e119a905361ae8ddfc991108b90866a67e6ee6
- SSDEEP 192:TPzuZNQ928vWCepr30yvdegp09Ng8k+G9wy8O:3eNQHvWdprEys997Gp
- TLSH
  T1C3E1305A4DFB13384CA3629A1A5B111B6649D1037608EB28BDDCD39C6FDA13845F27FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  RoValra-main/eslint.config.js
- Size 8KB
- SHA256 2a2af1e9559b300fa21553e490af00f2d4a4d7d247b16e7ebe071e4c55d948b5
- MD5 4102e872c4ef6d20af1369c2aa99260b
- SHA1 f45e334bf4bc3092966c1c89b264ccda18924410
- SHA512 ff1a3dd03a0972f34db14d4e4d5710230bacb4dbfb6033236eef53611c1529ee2900c3feb52719d4dc99a2f225e08624ba4eeeef5804aef63480b37c6fd941d0
- SSDEEP 192:gZI8uhcm2DLkkiPvi0c0gkFcFZaI7L2r+:geJi07hg73
- TLSH
  T1FF02706E457A00344563607B9F5E7021BA6091972EACBEB4BF9D83680FCC52C52B37E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  RoValra-main/public/Assets/data/globe_initializer.js
- Size 21KB
- SHA256 3f2787adf899304ac022cbdeabb8e722c113e92511d2a532445804eace767bcb
- MD5 9561f6832ba0955dd3ec6a03bc592f63
- SHA1 55adc7f61a2b5f16b0908875702bd569df0d7f23
- SHA512 aded91a435af5c57ea5072a8637bf1536e0dd74f225b2d065e519d9946a3db452eb9885e2da052bf5f7966c94f4a8735f7a7cbf9010680f812b430b7f7a7a87c
- SSDEEP 384:RNzpm6s1re6eQeXeiMb+9HcrL2Qv6ZMXtGJ2BEMy1NKTl:Rbm6eCI2QyZMXtGJ2BEMyzKp
- TLSH
  T106A2824F197320689157B22F6FC7558D9A79F0537246CD983E1CC3010FC69AC87BABAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  RoValra-main/public/Assets/data/serverid_extractor.js
- Size 7KB
- SHA256 430505018e0ffc158e732090f61712adb8ba37d7f7ca081722a8b238927145ab
- MD5 16e727d72e10a4c1ef5a6cb6b81ec703
- SHA1 06dbe329980bc0ea3e815eb9df9c12b23100e6b8
- SHA512 7e1a35a04e2bb537de549dcd30975669fed04aab6103aa7ffd764be482ae6fe3b0c382b8f0f261e905fe3a3d1d81898bf41bed7009756cd0c01f73f190cc37de
- SSDEEP 192:dOeiZqoUdO+KoKuoSrh/+0y88e+W7AVNoWM6z9bviS3xcs0L:DSNStrd
- TLSH
  T1EAE1ED4C60F300798063B07C4F8B66867339A41379889E9D7F8D8751AFD85AC97BBB94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  RoValra-main/public/Assets/logo.svg
- Size 2KB
- SHA256 baea134f00f42aa332e1cf75404077b92b8805d756bd449ceab05c4ea3da62c8
- MD5 39513541f7963236719dc2fd0d6d2d97
- SHA1 a4b341bd56a9d0b990fc119575cd7f58b852319b
- SHA512 edfb63e5aa3d6c1fe4bafe5aa722f002d46c781941936a80f83ec81f858cd504edcd750b2ed4d0a5c58c07185b390877e43258fcce137d739629279e2dbb850b
- TLSH
  T1C05123AF1B94B6A0602CD7FDC71011E4B84E40C7EAA242F1F36C8F37ABA1548C81E5D0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  RoValra-main/public/Assets/popup/popup.html
- Size 11KB
- SHA256 c41d3a6e6a75d2434cb5e7ac418d186f6e2d1b8cc46c649375f32809fbec1b0d
- MD5 530fbe710ace1050e9eddeb8881b7583
- SHA1 a1f8905dcae27de4fa0bea2c71c96541643544ab
- SHA512 a36d5716ee6d00c3ab018d8fd5f321ed207e8ee6e30673440398e9507ffc18f32e84c7f6a4caa6081ef03191c882060bcac5728c99f827d91b807113521d1d5a
- SSDEEP 192:QFtgMslFz84LCU7otmOW9JIyXVHut5P4TtxUws7LG6avrM:XTFAcXsjP4TzUnUjM
- TLSH
  T1CB32F9D946E31250310BEAFDDFAA57487B2E90C3D647C6ACB3ED57288F8A5C4C843294
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  RoValra-main/public/Assets/popup/popup.js
- Size 613B
- SHA256 4c80381b0f8d213a2b63c47fb8a1722b2ce652f12b28441404a82ca6c4a1fb40
- MD5 6fa170f16d820afe138aebe051fd872f
- SHA1 a59746359af1830955760b29063d1d5c48315771
- SHA512 68a997d9387bc92fe7e12a62c702c25f714ae2b22837267bb3861f74c4ee89922f2408459a929f79690d59d4b04b8db76c7d0ee200e60dd3548996076cef2f19
- TLSH
  T1A2F07DF7236604791A2E687BD15F2F08B31120076400DC85F42445944ED496531EAD9E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  RoValra-main/src/background/background.js
- Size 40KB
- SHA256 9d218cb0c51ed0f23219d2c850c7528a217a73473e09daed6f6f4e8ae4f49015
- MD5 954d3944bd904e7ab277680e233d22e9
- SHA1 032c60ffcb677d7e8ff053b4b9163594cdf7c97a
- SHA512 19060a2f61d93773e90fb295516de1f728f8d0888862c28e7eb4f52f0e35703d6d561b553792fef0098ced20014278ee23217baec29b4295e3d4f080111b1fc1
- SSDEEP 384:i9ooRd87ozjkGwgG2MJ9aEXX5yyf2ISBc5ljRVfHorWsbOL:i9Tn87oe5J9aEH5MOVubc
- TLSH
  T1BE13B61919F7103A18A7B17DAFAF910732359003295CED65BE8CC2942FD84AC93F67E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  RoValra-main/src/background/settingsCompat.ts
- Size 5KB
- SHA256 645b30997344d541e0ab418b7f5d8ab0a520d8b4d211ff51d1a6979f5ae0e46e
- MD5 244fc1dab46f908d0bf825a3924d6b4b
- SHA1 87891c9be999f4b4baa28df5cd6221065e0bf1a7
- SHA512 a1fc894e6879fff093111d2b97236edb381799345cfa47e355e12e06e4ffa09769f1c647f30b6a79053b145a5cc8f509d914729630e0328ca273d7a3aa66ae50
- SSDEEP 96:xf2mPnpCh4flfVhV1vYTYQwOSCWihQ4HWCyULf6rgjWjQoJ:hnpChClfVhV1vQbwOSCWiO4HWCyQ6rgm
- TLSH
  T153B1201439B7486D19AA10F9CB4A3207A634802B3738FAF57E7D57195F4C9E842A07EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  RoValra-main/src/content/core/api.js
- Size 29KB
- SHA256 5a68f086b0a8f4e3fad7ea4ab39645da7682771c39c141daa3777c761705bfae
- MD5 017813ceef71db61f2687278999c6303
- SHA1 26df4f44f0d60be1f3877dbc0f13fd2314c7393c
- SHA512 541a109d905ecc917f3c3d59cf55f5d5a6471cd726c7c971eb5066af4e12d9bf844868fa48287cf8b84bdfb2e99b6c2627dc9ed42b5c8912d1af29f6cc72045a
- SSDEEP 384:6okHoTGkOYfEcKU6z5HGsHj6v1wX4Q53WAt21K9ui:yHoGkOYfEcmzNHj6to5N27i
- TLSH
  T1BED2425A08F7112B45A3B1BC9F4F640A3232D007368CEE547E9C53946F8A56C9BF6BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  RoValra-main/src/content/core/apis/games.js
- Size 5KB
- SHA256 0864a6f5cfc15a1739f2ccaba900e659cce971a0bbfba2ee7b244b2eedba1dd2
- MD5 4b81b92d9114d20c663b16e794d35b53
- SHA1 f16651bd32c3b7f41541a675dbc1d657c45f2cd2
- SHA512 9e1be3bbcd512c836e980188e36f751c1349babf60b15bc273e43e05407e4123c4198d8d63203b6365bf452e3a6d73b440b1592d8a109d31504cea0f81dfd7ee
- SSDEEP 96:OzcHNx0IXfWKmdfZmKjQ7U8K271K77wK1Tdq8KoqoK4Hd2Ksq9cKpdbKkdwKp5dh:I8AdfZhQAWctTdqIq0HdyqHdxdN5dqxE
- TLSH
  T1F2C1C0963EB622FD5591B089925FC142021C7B031D8858407BACDAB4AF5DC2EB7B1FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  RoValra-main/src/content/core/apis/groups.js
- Size 2KB
- SHA256 0edf528e0ab762dad4c400e81f307e99d5e94fe1f33cb3a5d8b8a753da09e8d7
- MD5 bee7104371f237a5d3a8829fa5d3f1b6
- SHA1 391f5a9b1af90044b3a6ab276024aefa3901d2be
- SHA512 50466f88abc50922f94d6de73b1b7b848c29d0d9171fe0cbfe6565c73babec3b33849f432a08661690e99df15d76140f9b73456a0dcb40a2d645a69733df617f
- TLSH
  T19C415AC1B1FB5798519AF0C5A18FE8011E3CB5876A84DA483E2ECA541F2E12C75F1BF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  RoValra-main/src/content/core/apis/serverApi.js
- Size 11KB
- SHA256 fb067c6e835265931c30bc3f2a3f94d6f286c23177a11417e84f3640101d5992
- MD5 1b9c5557e197cad29f88bacaf966ad98
- SHA1 f18e9dad7d04ca1aa6b7f9dddc7cba8ac863af28
- SHA512 7ab6953eade6f23de70830990b4c56d7e1fe2baf7c9ea91cee28d5491a2db1b2220dbf8b440f501cd964c17b7686c3d6b96a8daa0ba21a629c6f65d5235bf643
- SSDEEP 192:SLq6tPQbiBUIVKjgT6fbc6umhifJuVxX+GG3jwoBcJyrJ5KLiSCFk/pHXkvmfvI5:SO6tIGldTCcYnGTwoBcJL/l0p
- TLSH
  T1A8421F8915B290AF06A2B1BD4E9FE0413B3DE9433408D9047F5D87532FDA42C96B6BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  RoValra-main/src/content/core/apis/users.js
- Size 10KB
- SHA256 515de4ea8bfe71dd9ca208f6a3d072bbe19235bbef08a0c971f385cdcfa7fd26
- MD5 e58b5f7eff68ce57718e09e741ca0434
- SHA1 cf2a50f2c4b70e8734f8ae4a10af55360e30c454
- SHA512 a3ded5929a2590f0197cda13af5b96c10eb813b151880cc51f2978583b4688fff1d9a17d3a02deeeeb3be9a50d910164145cec80dfd4d2c603be520dc21e1e40
- SSDEEP 192:aYX1f3PXoLfZTjdwXeBONB8iKaicfiQBjKfTk6dBUto639QKuhar/mnb4Fc24FK9:aYXBwrF5mJUTDgjIItQKuhar/mnb4FXl
- TLSH
  T1243252F614BA571A6052B50649AFE403249596433E08BDD8BEBC4BB81F3E11CB7B1EDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  RoValra-main/src/content/core/assets.js
- Size 27KB
- SHA256 84489add73387628bfaff22ec37acdb3aa07f04b3690887475be168f6fdaf466
- MD5 63e2b39a8460dc55e0b15f96c9051049
- SHA1 3349bcfcb256ff259a4382519fc9ef6f7ff13235
- SHA512 e1defd1706f90cb864fba797842643e7d5c1229acd76474e7e8d7901ed42e29669b7a7aee473508b69ff932e506a5f1ed7b5ce5dbd4c64b1cade02d903d3f3c2
- SSDEEP 384:Bg2dPHbmfqQickFbdRb3Gn0vGY/QYhETj7dBeE22xNRX+57+2:TdvbmfqQ2bdRbGx9TXdYEzG
- TLSH
  T1B1C2F7EAF7648165CC0FC76ACF29742DA11F36FEEC488218F95E8B685704D8E245C9B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32