c0fc580fcf38b6d261aeead8d4a147f4837d60ebfe928ef8c09af8e859d15d5a

Resubmissions

25/06/2026, 15:38

260625-s3cvzscz6s7

25/06/2026, 14:49

260625-r7b9kscx3s8

20/06/2026, 16:21

260620-tttmtahs3w8

Sharing

Copy URL Twitter E-mail

General

Target
FLSkinner Skins.zip
Size 10.1MB
Sample260620-tttmtahs3w
SHA256 c0fc580fcf38b6d261aeead8d4a147f4837d60ebfe928ef8c09af8e859d15d5a
MD5 b0d9255d60905ef77dcdf1eeb98407e3
SHA1 1e880c826a05f3de562f9a57aded8f92ef3be4d1
SHA512 15a52f56c2f2d577e0e8cc55c1948be91a096f0d5259b4d695a9ed6367cc490c3568f31c301cbf41bcb3271a750f25ad982cea9be2968988ad23cf100852e8b0
SSDEEP 98304:XdazopmbXMXXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEc9:XdazopGXMxnJ45/9iD54+V11bFv4zQ
TLSH
T161B6702CD904A76BD2B7C27881990A17F161951AF13D8B0E30CF1B693B52A837E85FDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  FLSkinner Skins.zip
- Size 10.1MB
- SHA256 c0fc580fcf38b6d261aeead8d4a147f4837d60ebfe928ef8c09af8e859d15d5a
- MD5 b0d9255d60905ef77dcdf1eeb98407e3
- SHA1 1e880c826a05f3de562f9a57aded8f92ef3be4d1
- SHA512 15a52f56c2f2d577e0e8cc55c1948be91a096f0d5259b4d695a9ed6367cc490c3568f31c301cbf41bcb3271a750f25ad982cea9be2968988ad23cf100852e8b0
- SSDEEP 98304:XdazopmbXMXXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEc9:XdazopGXMxnJ45/9iD54+V11bFv4zQ
- TLSH
  T161B6702CD904A76BD2B7C27881990A17F161951AF13D8B0E30CF1B693B52A837E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  DarkChocoPurple.json5
- Size 21KB
- SHA256 957a4850dcc5b7c7742b6b5942853f2c778fec68dfa8af7a10469c32da808df3
- MD5 66efebfea67cac80e3ca623748e4ab1d
- SHA1 e4101ce11c879a361fe4722fc0112e809b51a751
- SHA512 ffd5e66b1257e1daed6efd2ee577aab85fa65cf581121afaf53710a0c848340a1b4e349bd82ddbcff5c80c1c9425989de091a8b47acad2bb93482830ad5428f5
- SSDEEP 192:61QpU4aOQRC27OkzwBZbV+DA1nWJQ+Nmd097jHHytEXNZEqQQ:hjcDGlxKQ05
- TLSH
  T1F6A2AAB6EE8D6C67113B166885544A82F2B5739F804C094F34FDE1AC1F7D8468CE9B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  DarkSkin_Double_Color_GB_x1.json5
- Size 21KB
- SHA256 04f1d3f54b0d5717d4e13b4c20b70316dccb0f89d91872846edd3c30ed679f9a
- MD5 5bc95f608dc9ba53d5b89d7dcd322b90
- SHA1 457e6f749e051c23f989e29dcaf273f17603c0f5
- SHA512 907dcdc4ffec4519b18f2c25f97fc3ea5345112b36ad8c2930f59bb47ae508db3042c3291e5773453006d95395d0d608942a138366149c844ab6933b194f3f04
- SSDEEP 192:G9Z/UQ4p6nRCqLPVIwqzApGwhP9kJ9yav1DkBYajAK7G:GAkIwNtH2fc+
- TLSH
  T118A2C8B6ED9C2C6B1277162896590981F2A5239FC04C465E32FDA1FC1F3D8424CADB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  DarkSkin_Double_Color_YO_x2.json5
- Size 21KB
- SHA256 6e36e4cbe00710be9481741298342e54af7af193f801e144ae0146907e95e247
- MD5 59cf46e6cce5b2ecdc89910ebda02255
- SHA1 a102268fbe8c11f53dbb020b3c572b02ccee89e9
- SHA512 b53d7ae3e1e6c82bad54018d515a46ed8078ec88f63110c71142ed9569d083730435ed87ce4dc61e56016971ce832b160963fbe67745ef38bd81b47285bf8ce7
- SSDEEP 192:GWkWnQ44d8RCQ6PVIBuMyLr3h59iJ9olv1gn8l758yC6:GGGiBGfJIBu1
- TLSH
  T1C9A2B6A7EE8C6C67123B1A28965509C1F6A5239FC05C054E30FFD1EC1F7D8429CADA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  DiscordcolorSkin_WOB.json5
- Size 21KB
- SHA256 dd4fdb2c148d341204e4a8b80746d1e06dea7c56a93fac11ae340173d95943fc
- MD5 ccb5345842c7a5b7a87ccc56ad03feb4
- SHA1 9f72d7f26c421daa7cf721d30b5633b5e0de7078
- SHA512 7f9da1086c0a3cefe0b72cb3d4c745041a3c22f830e0ef203762b98e0d1db2a5d96bc39cea6b44190a3f14dcc0f794c2155e7c83202a7e4bd4fca09c4f3862a6
- SSDEEP 384:A/z4dNhdM6T29g4ctkbTD9Advdl8Oct/ZmIVEabP0NN2gM3bHPN6u2iMkrdCtykD:vWbVD4z
- TLSH
  T196A2A9A6ED881D7B123B169897550981F2E5739F804C058F34FDA0AC2F7D8464EE9B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  Fake Chocolate V2.json5
- Size 21KB
- SHA256 4ebfcea6881d38ad224dbe116d0f7f183290a4d3c42998dffd2e615c3b745371
- MD5 6341f0fc7e1bf4ee7ab01e01286b216b
- SHA1 a5da7d9f3f85d363b4f9ef352c6b2ab6373bae5d
- SHA512 40b72bd7895b621d9d13af38cba4e4a084a9f022d82e22530fc1ac3b1284c59c70f690ce5a96b13e554b2178c947a82a9ec09b12e47b608d0652c138645b06e1
- SSDEEP 192:UMR/B4ly3zCdjHVKvFw0PJgBv9wTq90C1LXgxa2rs2Dj:MwdvpoSWdaL
- TLSH
  T15AA2EE66EEDC5C77123B56188A800581F6E5B39F805C054E34FEA4ECAF3D8454DAAB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  Info about making you own skins (by fl user).txt
- Size 1KB
- SHA256 5f5b6371fdbbacea2167f00653a9fba9848bd831654caaee3ab383514fa0b93c
- MD5 764dab1cb3f83924e185fec22496f7b8
- SHA1 dba43b18c2a727ae691900ee04459e5936186342
- SHA512 6358ac782a4c9a28b0cc4e198c1cc39700c5999b836ebf6982e13e36e50824cfe3c802cf2272cddeb51644154fcd2259aa9868f8d8ae476c1b5d93617b13cb6a
- TLSH
  T1A93162AFF7490333116B0046225DE9D5F38E697DFA9A0AED3C2C408C2332112E2721DC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Links for Skins of Graut n Fl user.txt
- Size 125B
- SHA256 aeb2dfe0168981009993a3076b8906c2056233f8cc4d48056e13d15b11152069
- MD5 4864521a73d7ea40693c7d9941958c45
- SHA1 5015839051eb0ad4acc9250c193a5c6d4212b186
- SHA512 8f88ac95967e86aaae01b5e81693e904dfd1452740e09c2624715a2b1dd3ddc2d5e04a33908e2b9044c04d4f158a09d514e971ebb01502f5892c875c226807d1
- TLSH
  T119B09BD37D1F5F059F1785A45A8D325C75E3735D29D5843D542D617314055BD00411A9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  MOD.1.json5
- Size 21KB
- SHA256 a8bcfbb1a3ecfdbbda131b74b074ceed44a8b5ad79770817550f7735c1f683e2
- MD5 f65cfb3c8e0a24671aa79e63f114ae5d
- SHA1 5b824e0592d74954b409e3f73a88cc188bc7eec3
- SHA512 faa7294f5592de512fa99a8cd608f2754f341f2a59690b174e3b047e3125d01fa597647e5f08b129b49b46aeffb0200c35c33c743af2a483b68878e46809c0d2
- SSDEEP 192:cj81248x5RCs+2WV4Fe28+rmOlyqg9vFe1mVybca/9AaOu:D6/FGV1RJVy7V
- TLSH
  T139A29BB6EE8C5C67123B16A885510582F7E5339F805C064E34FDA5AC1F3D8858DAEBCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  MOD.2.json5
- Size 21KB
- SHA256 0f71c7d2df40190bfcfc45ce5840b9f0b353ca0a9632669bb651f991a6c061dc
- MD5 0d12c9976a78f11e72c20d77c1e5fdc4
- SHA1 f44bfe362026a9c5c9187051e939f4deaf3f2daf
- SHA512 3cb11cc0d1d321658f9ec5ad17c326946c85e2a85a0dbf0842afb6349a58592b1d79eaf530cc470106f5bb43e9fc5c052ab4d83e9acd4956e89d18cf09656691
- SSDEEP 192:7Zg81/4jQcRC6xmVgvfEzPQ3W7yKg96Ee1V6zEk7wq1b:00Kvmmnxqit
- TLSH
  T18EA2DDA6EDCC6C7B223B16189A5545D1F6E5339F805C054E34FEA1AC1F3E8418CADB8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  MOD.3.json5
- Size 21KB
- SHA256 97788fc31f67e97a666153a0f9fdba5e9122f3ad7e5fcc0f854e4480ddb9297d
- MD5 b48c0c325c61fc8aba1309910e20a67b
- SHA1 6015346ce583bbd00e1f1dde4d043130212316f8
- SHA512 3411f2161b30fe54811a77de5721011259e6eae6571e003d44d0f9117af57ce51761eb22fdbe54197f7676c390ce3830532c078c430bbdf03941cd3c6613cb9e
- SSDEEP 192:7s8N74PkQRCqtbVQPLM/t0TWDyKg9Gge1t+nEojw6JGo:OM3PewnxS2Eo
- TLSH
  T12DA2ECB6EE8C1C67163B566885490481F6E5339F804C458E34FEA9BC1F3D8824CADB9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  MOD.4.json5
- Size 21KB
- SHA256 c9d61b352bdd6162128041426830ad339b4009bf192ec1a880367510bcd3b95a
- MD5 37a19623a7c742e27042bd7106dfbbd0
- SHA1 3a109a658b72ee20fb95c7d3843f7252e427f3da
- SHA512 bb9b162ee3835ebbcba6de4808395c3cf7390e9fa1d516ede0e09b300f486e45362f49edf9b3703558e0e3feb42cec29158b5fe405004a814b0b0bd39950a72b
- SSDEEP 192:XC8r74hieRCSP/VwTJM51+5W/yyg9Cie1t85EyvA6Td:aA/TisD5scN
- TLSH
  T1B6A2A8B6FE8D6CA7123B162886550582F6E5739F804C064E34FDA1AC1F3D8464CADBDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  MOD.5.json5
- Size 21KB
- SHA256 a08d1971e6cff42a8740628e86eeb7f63610d8dd6a41ab019650b985f43a0993
- MD5 659738b2a7ccf4003a02dc26a1465777
- SHA1 c9e857476fc146bb4a57e5ce98fb21d30f3401ab
- SHA512 fb1895e388a725f87300f86f95e44ca0602e7a6de1357ca4968ed62c07a61cbefa88b82a24e2cdeb1c04d9ecfff44a6af7d84e4c70e158bc5413309cd2210a59
- SSDEEP 192:7L8pO4UpRRCQ6LVINSEsWDCWlyhg9u5e17HYE7JsGim:a6dNIxp+9R1
- TLSH
  T182A2CCA2EE8C5CAB223B155C85414582F7E573AFA04C058E34FDA1AC5F3D8454CADB9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  MixedType.json5
- Size 21KB
- SHA256 1b6e979712725ef3c9ca3111f4ce0a2cb7c8f4f25c3b86063aac6948a3fafd91
- MD5 9cda3983030e25b9677e15e54b503055
- SHA1 788091be4f58b0bf033c725bdf4bbb79ad3142ef
- SHA512 538b1899f781e6bc0e62bb6a43f848fb6cdae31d27458e5c919fedda1ff854820fa74786cb8afb4ccb538223293d042182ff661e92824d3923c5e431dad8d132
- SSDEEP 192:gvCiq4dIgRC6QnVZVyI/a0u6Z1ZdN9YDHufNnLFw4gmP:26zV/pZLHwy
- TLSH
  T133A2BAB6EE9C5C67123B162896954882F6E9339FC04C054E34BDB0EC5F3D9524CA9B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  MixedTypeV2.json5
- Size 21KB
- SHA256 5499a10c6d301ae1e0fbfc9ee9100f9179ebc50dacfd0b2379a594aa2393b121
- MD5 5dedc6319dc9474bc637eab847c52a43
- SHA1 6e3aa610d21163f8879fbce52055cc3d25daa4db
- SHA512 fa1ef50fcbd3bd174477c1f2476ebf0965b96c781a1821555b6ff3b7c84f92d0d4a56a645e13f2407687d71718c893c8b9ccf7e4022a49568a53711f42df1eba
- SSDEEP 192:qZ6GA4d8qRCuOvVxK96/W0DXMlw9K92IcCLK6RPL6MZK:4G3KePN8Fj4
- TLSH
  T1D9A2DCA6EE8C5D77137B069896540942F2E573DF808C095E34BDA1AC1F3D8818D99BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  N.Mod_V1_Pink.json5
- Size 21KB
- SHA256 0d3f0890c2a268e5888b56e6582508ab46b7f2d63fff7e1e31545e62080f879b
- MD5 47ac1817365a52de18d71874a9813e6a
- SHA1 1e599ccc50bd92a21f79d35784e99fe2c2f82170
- SHA512 a64b35e6cab3d82eaacf8362d352224e7a57bf5d04b6549260537b8da06d0b4fe94515887958612b50471b157a5bfaa9e6dddc2ecb782c7f6ef3e56ba36c801a
- SSDEEP 192:HulRQ4dOKRC6LZVQkr9xMEnCPeWs90dy1qRz59HZ8yW0:MonkfTbZmRVX
- TLSH
  T1CBA2ABA6ED8C5C67123B1628A6510582F6E5339FC05C458F34FEA1AC1F3E8425CADB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32