296ed0fc82ab3e2b0f555c50c99d2273d76f24e3ff9e62158984339deaa9649a

Sharing

Copy URL Twitter E-mail

General

Target
Straya_Tweaks.zip
Size 93KB
Sample260623-r586jadx9v
SHA256 296ed0fc82ab3e2b0f555c50c99d2273d76f24e3ff9e62158984339deaa9649a
MD5 7bcbd4f3e449fe9d767ddc1b7875b6f8
SHA1 1dc693b71137a6f6cd1c1175ea100939d9db5cc2
SHA512 24c7a9ee56a077902b658b53f16fdce0ae0c28d8350888e387956c49560886ad1e3f2fd4ba6b98905447769d579eca67b05a00ea711e5f3b886fcc109a3c76a6
SSDEEP 1536:S8vg+9TnGwfh6/tPzTtTOA+s4/g3slWl4QYwyBA2qcGsXq7PFZM6TmVwZ:e+9TjQFPzxKAu/ksgNyBA2gsXKM6SSZ
TLSH
T19A93BF76CB293913CDD6B7FE950FEA0C27464E0CC759C82F7F095244AA8599A31337A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Straya_Tweaks.zip
- Size 93KB
- SHA256 296ed0fc82ab3e2b0f555c50c99d2273d76f24e3ff9e62158984339deaa9649a
- MD5 7bcbd4f3e449fe9d767ddc1b7875b6f8
- SHA1 1dc693b71137a6f6cd1c1175ea100939d9db5cc2
- SHA512 24c7a9ee56a077902b658b53f16fdce0ae0c28d8350888e387956c49560886ad1e3f2fd4ba6b98905447769d579eca67b05a00ea711e5f3b886fcc109a3c76a6
- SSDEEP 1536:S8vg+9TnGwfh6/tPzTtTOA+s4/g3slWl4QYwyBA2qcGsXq7PFZM6TmVwZ:e+9TjQFPzxKAu/ksgNyBA2gsXKM6SSZ
- TLSH
  T19A93BF76CB293913CDD6B7FE950FEA0C27464E0CC759C82F7F095244AA8599A31337A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Straya_Tweaks/Straya_Tweaks/1. Processes/1. Unwanted Services.bat
- Size 3KB
- SHA256 c3cbe3caaf9f3fa0f4518bdf418deb848742fa6d213de62cc6a43e019124dd4d
- MD5 ffdcaa7879ce36df01e484088001b2e5
- SHA1 2c79430eac2415a17ecbf086597df4c2186bad64
- SHA512 a635344b2f104b7db584ad072dc83b32a048174350c07e10032d6d7865644dbb7aa62d6ca249727e0ad7372d7c41ca2759b540fd9919b0b9290996794adf1058
- TLSH
  T16E71A38255CAA9574F41C912FC8B1EA2FB031395E41E727E29CA7DAC55BFD0F812386C
- MD5 SHA1 SHA512 TLSH
Score

4^/10
behavioral2
- Target
  Straya_Tweaks/Straya_Tweaks/1. Processes/2. Windows Service Control.bat
- Size 57KB
- SHA256 9fba5ea04bc6383a95ec34e3c7a0cced776fd6d98e445b20106bd12ae82c5cc2
- MD5 50f447f87a916cfacad648138f33ba95
- SHA1 1e5bdf7108fa06314a562f26df32223806a9794f
- SHA512 e56d1346aada4f28d7c1f2794335ca20c811328bb0192069822c81dffa31e950e072cb2d92c954a2a15fa26bd64961e3f95803d85d01dbc2c073194401ec51c3
- SSDEEP 768:tuNOT9RFMsusWWuD/du+ElQKac+iDtu61NkJPnVPleKuauJuYuTuiu7utuYuhw:m
- TLSH
  T13A43993172156407EFA0DF008E5F2A73FB26538361945F2901B162BC6A475EBF0FB6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Straya_Tweaks/Straya_Tweaks/1. Processes/3. More Unwanted Services.bat
- Size 394B
- SHA256 dce978a33f2eeedcd4cc29da912f9c569210c68e51e78e7b793bea625e08be62
- MD5 037926cb92012f321ce6d72d5d5a5c9e
- SHA1 2c7d6ed4670abfe8f0c3c4b0576ee31019cae38c
- SHA512 f23c42cfeec40d40500ebb1939ff9abcdafdbbdd9d6b4b1bffdf7308b64b92156df12dd4ec4d9b457d20b47d937335c270249d45193ccc57307c40050c98a44e
- TLSH
  T11EE01A12128EB9570F12CB01E9931EE7EF161388C01660781A60338C18FB80BC203D35
- MD5 SHA1 SHA512 TLSH
Score

4^/10
behavioral4
- Target
  Straya_Tweaks/Straya_Tweaks/1. Processes/4. Gamebar Presence Writer.bat
- Size 555B
- SHA256 a9b62350125f4a5f99168fea70e41f5079a1359e0a8a76f9823d0d114d5282df
- MD5 0ad293bae88e1e3ba4665f420574a5bf
- SHA1 44e93f3a5e8bdcaff4c3a1e8fba9e768c9de3a25
- SHA512 86baf3edf7236daa7257089f650a7d8fadab76ad2de75639f825c7fd1badae7d6fe67dc22679a6289e9208cf7e02e9a2e59c494f5e55e76f693847483d103e98
- TLSH
  T16DF0F603ABC45D7B49C4C9A3992040C3604A928B02585A1D345FB1759F9D657E5FF5E0
- MD5 SHA1 SHA512 TLSH
Score

8^/10

defense_evasion discovery exploit
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- File and Directory Permissions Modification: Windows File and Directory Permissions Modification
  defense_evasion
behavioral5
- Target
  Straya_Tweaks/Straya_Tweaks/1. Processes/5. Some Services That are not Listed in 3. and 1..cmd
- Size 28KB
- SHA256 a136cee0b008ca55d3202951f105d8198ef76a66b18cd917cf5ca807eb489d74
- MD5 e94781002588a33ab1859db3b6e87560
- SHA1 b889de893ce95e2f6b3d9d7c86abef24e588dff4
- SHA512 1c27c7fe322318b4c6adb6c952dd25850f99a27c2eb2e7c0b51f978b9bc233a4e882c3af90f8b9708c6444e0632488deeb196a0019328103ebba2f5b01406c6d
- SSDEEP 768:/wtAZrj+7XbTr1+D7sVS7dB0w9zEqZfxPzfX7XznS4/r/dtutEVT83DlBr37DU8f:/nrUbTre7dBz9zEqZfxPzfX7XznS4/ro
- TLSH
  T168D2491F715B65A78F11DA41C58B6AB3E7C0D3871F86312B2A32328F877648BD4C295E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

defense_evasion
behavioral6
- Target
  Straya_Tweaks/Straya_Tweaks/1. Processes/6. Tweaks + Unwanted Services.bat
- Size 7KB
- SHA256 89a707e3c6a7af0b7c9bbbb6d9a629145cdb22b91937eb54d086c81cee5e28e4
- MD5 71d9bdca9f63fc700f40bfed3cd85b24
- SHA1 6a39870616572b520b5a3675c4c8a28d486eb922
- SHA512 9e3e5ed6554d882b206ad87ed9d5a3b66c1a0114dfb135b6fd6855eb90301438424660166e8e0f583d41ce29aa77ba18ea6cb1491cfe280709b64366b78516ed
- SSDEEP 192:a+u+QJZ6Rh6OsyQ0i0RhpOEOWT899b6iM94ZwhsMrNYeVzGzFe:PGmh9syNzRhpOEOWTS9brM94Zwhs8NY+
- TLSH
  T126F1543ABB2E55F5C24BF2F2F17648121B2769439D913F90B542302E10B7246DB7A5CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion evasion execution persistence privilege_escalation ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Disables taskbar notifications via registry modification
  defense_evasion
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral7
- Target
  Straya_Tweaks/Straya_Tweaks/Optimized Apps/1. Discord/1. Asar_Installer.bat
- Size 2KB
- SHA256 0cc53c839f739be23111c81b23e0e75545ab3f0ac999611c16375d49e0893310
- MD5 529e48d63c36283fce6e5b2a5a313918
- SHA1 0f81182cb0e907b4a99da092c1db4dad8cc5a88c
- SHA512 7e420c9c5462cdfef918e0e8c2c1a51bea9fef9126765bf0f84a5731216a7a3699bc243887f86b8de9dbcd617be1fb01237af9e3b3371c6efca9c8b475f09591
- TLSH
  T14D517A97351E996C86A202DE4C9A9C417343D91FC31EA8F6C1BC180E5EDB39E7B4180E
- MD5 SHA1 SHA512 TLSH
Score

8^/10

defense_evasion execution
- Command and Scripting Interpreter: PowerShell
  Powershell Invoke Web Request.
  execution
behavioral8
- Target
  Straya_Tweaks/Straya_Tweaks/Optimized Apps/1. Discord/2. Asar-Site.url
- Size 111B
- SHA256 f008bb9673c7f3421b43240373ff5439ebc8d80ff0c5f53173690cb4f3d033be
- MD5 f654fae03067409208086eb98d373466
- SHA1 78a9417864a1ea5d08b3b9f267b329c94e3d6ce9
- SHA512 bfc7ae4346fce171c03db07b69609f116404bf510608e0f119f468413147f094ef8c9a580487c8aea4f4bbc7f346b34cf4ef836f98c9be050c4a19cbac61ec14
- TLSH
  T1C6B012EE8005828AD142554A8070F818980FFFB10CD3E05CA34CDFCB0D0C0D2C884B36
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  Straya_Tweaks/Straya_Tweaks/Optimized Apps/2. Spotify/1. Spicetify.bat
- Size 213B
- SHA256 19e2929100a85f665f6947f67b17d164e48938d21219768137980e9ab9327a31
- MD5 ad4d566ce33360e19e63ed8363d7d319
- SHA1 f108b0549e98aab5f2e18f039915d3aa113324a6
- SHA512 9f627840a85a5666b5a090e09d59b0697851529f7d4ff1d83e234368a3666090ecee70e8467ae9735a1d6b90aebcab47aa8685042c3c9bca3cc6921b566b53cf
- TLSH
  T110D0239F50744D5D3F93474E4525A444F41350565DC1C446517B95390445385B37F417
- MD5 SHA1 SHA512 TLSH
Score

6^/10

execution
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral10
- Target
  Straya_Tweaks/Straya_Tweaks/Optimized Apps/2. Spotify/2. Fix Erros.bat
- Size 174B
- SHA256 54a406b26ed9e5620b497b34fbf0eedccdca389c2584bdacd48a97ed4df2a3b9
- MD5 646370b902198777a6443419a8f0823b
- SHA1 7f8bdbcc70004de0500d2f595e1d7fd3900ec67b
- SHA512 80c11f6aa773bb25251fa37aee9a76e7797dd103d80e83ccc29dae040c67e49055fad68f71fec163f51731273e565b3baa12b0afbaff93f92deaa447ca5390ef
- TLSH
  T1D4C08015133852EF85CBC69E50C5C3966C5F5545B2A60D53343599107F0059DC3E518A
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Command and Scripting Interpreter: PowerShell
  Start PowerShell.
  execution
behavioral11
- Target
  Straya_Tweaks/Straya_Tweaks/Straya Ultimate Tweaks.bat
- Size 225KB
- SHA256 f8a58f26af8f136a3e9d096734295e8c38a479dcd06a3dc70e315dc8c5f12c7e
- MD5 bcd9d12d2f4a41a62a3cdace393a9f29
- SHA1 8d5cc83393f7c1633a73854c314385c777e65d8c
- SHA512 b707fc30c0784d1b5bf7c3cba4f950a3af9e334ad7eed54421b98dfe740187e2694856a84bc19b714e800de48b53fd6d7a980ae28f6c10d50d8e16b2a3e4310a
- SSDEEP 768:5Cs/oO+jjTtGiZQpZHSV6PkXl1cXAx5frBaRyCJnJzQltusqsqynwt50PRAbF/bA:5Cs/ob6SZBmNqYV+pHDc0gNAc3tF3y
- TLSH
  T18D343510962B02B3C696E615B663CD169F7BBDC3E4844F40386E350E12FB54BC8BB6E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery execution persistence privilege_escalation trojan
- UAC bypass
  defense_evasion trojan
- Disables taskbar notifications via registry modification
  defense_evasion
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Adds Run key to start application
  persistence
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Hijack Execution Flow: Executable Installer File Permissions Weakness
  Possible Turn off User Account Control's privilege elevation for standard users.
  defense_evasion persistence privilege_escalation
behavioral12
- Target
  Straya_Tweaks/Straya_Tweaks/Straya_pro_tweaks.bat
- Size 171KB
- SHA256 6c4c334d5a3a8ecae581a4fadab41323cedb9e1cc3f746afcd1f652a1f1d634f
- MD5 6f0a4cf4586b7cdd3de1541f072435cb
- SHA1 addf9539319de1cbe9424ba5d8bd12de41be9e9d
- SHA512 26d20206b95f91ad3a66c83b63914d52d85890791740736071bb573715cfe150614cda1a5c7deed875d18481fb647199db98903c99f95610e6cd85e3ce0b45fb
- SSDEEP 768:48kvWUkXsrUo3ldajxbziwtvzFI1QAdHd1QbzqsIsrdDNP1MMd1/xJCIRPoMvGy8:hKWUkxbzi220F9A6CST91lT975CT9TXJ
- TLSH
  T1FB04E2640A3F02F3C896F224B653D5665F7BBEC364C55B413CAE350A11EB88BC8366E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  0 input delay/Disable Hyper Virtualization.bat
- Size 37B
- SHA256 94e5001ae9348ce0c7e10d98e473bacc8825c02a8df8787020836b7131fa4220
- MD5 c23338019f39e1055ccf293383a76385
- SHA1 6fa4047207527b113f931bb25216bca1b9ae576d
- SHA512 de19a9636e0fd2eb1384e7b69aad95f486bbc6124aa6ccdeac56cae79beaa7431e61249e0dfcf3b56a26f904c7ea2e1438ee8d0952b67cd7a46678b91625d919
- MD5 SHA1 SHA512
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral14
- Target
  0 input delay/Disable Trusted Platform Module.bat
- Size 40B
- SHA256 669c68d1ef1cb3545ceab040a1b206c6d4c111c4d8c579b489cb991c45a66017
- MD5 33240a52c8f196cc57848cf1a8df3f6b
- SHA1 bcd7892bf06bb74b0b467e983ace2c3bfe899730
- SHA512 48ac7b8a352a93a802185595b060643bc63117469cb908aeeb55da9d45e02dccd234497d9b8c2df1beb6f968030893c035baad4f2b3a02488d375bdecf548a71
- MD5 SHA1 SHA512
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral15
- Target
  0 input delay/Disable Windows HPET.bat
- Size 67B
- SHA256 bc0d813cf8d4efbea2b4519b658c2082501ad8fe6de0ef267facdedf285a2739
- MD5 395ea024d39c9d99837a2d144f07e22c
- SHA1 77dad90f65a36b9fbc7dc7888b1a817e921345e7
- SHA512 c8445e051a44b33661a9203e2485acf3f70a66ec3e31ed98f080a62148011c8b4fb32de7684b460f5c68a7c7d6dd7c9e7f59ddb32ebd135142f67fc287ae3c51
- TLSH
  T157A001220623BFB60621A84B5CF4F01120288823D9B3E88C752552D20A6C0808CB02F0
- MD5 SHA1 SHA512 TLSH
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral16
- Target
  0 input delay/Enable xAPIC (better performance).bat
- Size 67B
- SHA256 d58205a6a248d59e22665917c80630f9295776e82fc1c6bcf8f0aee492174cb6
- MD5 85e6a4216f9b3826615a35ed5704da0b
- SHA1 32dde7f351f50471efd7c8d8b760f47970816056
- SHA512 c2022875b66337597c0a829274d89ab0fda83b3e6ff316bfc4b09f7ca0d067912d98863d05129d2983db4f0bbe0157a7767404b75a0a51bc0e6f69bb46ed54e3
- TLSH
  T1F1A011020022AAE00082BC030832A382E38C8802A8AAB0A8300002E08088200CA300E0
- MD5 SHA1 SHA512 TLSH
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral17
- Target
  0 input delay/Legacy TSC.bat
- Size 33B
- SHA256 3180ecee17acd6aafcb17a8af462bd1c736b4411ed7ee50952b8318398468539
- MD5 a22de620ba3b7943b0b6f49821c31668
- SHA1 0330795f2382d49ba27bd7fd857e8ed6f7b70613
- SHA512 1a1ea31688ce5e93b0826efcaacf5f720907094f986fe43bba9274ad8fb024f2d3afc5d2af388c251bbfbbb5fb64fec5cc5ca8ed6b1b33f25275cee5fc0ec92b
- MD5 SHA1 SHA512
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral18
- Target
  Straya_Tweaks/Straya_Tweaks/straja 0 delay/0 input delay/Disable Hyper Virtualization.bat
- Size 37B
- SHA256 94e5001ae9348ce0c7e10d98e473bacc8825c02a8df8787020836b7131fa4220
- MD5 c23338019f39e1055ccf293383a76385
- SHA1 6fa4047207527b113f931bb25216bca1b9ae576d
- SHA512 de19a9636e0fd2eb1384e7b69aad95f486bbc6124aa6ccdeac56cae79beaa7431e61249e0dfcf3b56a26f904c7ea2e1438ee8d0952b67cd7a46678b91625d919
- MD5 SHA1 SHA512
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral19
- Target
  Straya_Tweaks/Straya_Tweaks/straja 0 delay/0 input delay/Disable Trusted Platform Module.bat
- Size 40B
- SHA256 669c68d1ef1cb3545ceab040a1b206c6d4c111c4d8c579b489cb991c45a66017
- MD5 33240a52c8f196cc57848cf1a8df3f6b
- SHA1 bcd7892bf06bb74b0b467e983ace2c3bfe899730
- SHA512 48ac7b8a352a93a802185595b060643bc63117469cb908aeeb55da9d45e02dccd234497d9b8c2df1beb6f968030893c035baad4f2b3a02488d375bdecf548a71
- MD5 SHA1 SHA512
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral20
- Target
  Straya_Tweaks/Straya_Tweaks/straja 0 delay/0 input delay/Disable Windows HPET.bat
- Size 67B
- SHA256 bc0d813cf8d4efbea2b4519b658c2082501ad8fe6de0ef267facdedf285a2739
- MD5 395ea024d39c9d99837a2d144f07e22c
- SHA1 77dad90f65a36b9fbc7dc7888b1a817e921345e7
- SHA512 c8445e051a44b33661a9203e2485acf3f70a66ec3e31ed98f080a62148011c8b4fb32de7684b460f5c68a7c7d6dd7c9e7f59ddb32ebd135142f67fc287ae3c51
- TLSH
  T157A001220623BFB60621A84B5CF4F01120288823D9B3E88C752552D20A6C0808CB02F0
- MD5 SHA1 SHA512 TLSH
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral21
- Target
  Straya_Tweaks/Straya_Tweaks/straja 0 delay/0 input delay/Enable xAPIC (better performance).bat
- Size 67B
- SHA256 d58205a6a248d59e22665917c80630f9295776e82fc1c6bcf8f0aee492174cb6
- MD5 85e6a4216f9b3826615a35ed5704da0b
- SHA1 32dde7f351f50471efd7c8d8b760f47970816056
- SHA512 c2022875b66337597c0a829274d89ab0fda83b3e6ff316bfc4b09f7ca0d067912d98863d05129d2983db4f0bbe0157a7767404b75a0a51bc0e6f69bb46ed54e3
- TLSH
  T1F1A011020022AAE00082BC030832A382E38C8802A8AAB0A8300002E08088200CA300E0
- MD5 SHA1 SHA512 TLSH
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral22
- Target
  Straya_Tweaks/Straya_Tweaks/straja 0 delay/0 input delay/Legacy TSC.bat
- Size 33B
- SHA256 3180ecee17acd6aafcb17a8af462bd1c736b4411ed7ee50952b8318398468539
- MD5 a22de620ba3b7943b0b6f49821c31668
- SHA1 0330795f2382d49ba27bd7fd857e8ed6f7b70613
- SHA512 1a1ea31688ce5e93b0826efcaacf5f720907094f986fe43bba9274ad8fb024f2d3afc5d2af388c251bbfbbb5fb64fec5cc5ca8ed6b1b33f25275cee5fc0ec92b
- MD5 SHA1 SHA512
Score

9^/10

evasion ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral23
- Target
  Straya_Tweaks/Straya_Tweaks/straja budget.bat
- Size 27KB
- SHA256 775d119498a8512ce09e6d42053c845376fbd792947c0e99af030561ab2ab8db
- MD5 e076a7e59e5a90f0c1b9b697e1b9ee94
- SHA1 17b3101a14d0cba7d8fd998e93382d6e9f698078
- SHA512 e17ea314ac5942ae5a083471969d92e3dfd9f1a8458bb10d8f936c784d6c4761741297714e1e04e5ac292e7e68919ae76fbaff7228be45835ae8c118369575b7
- SSDEEP 192:1y0aaaUgqS2jubRgXg5ygzpQyAGMOLn5bLfohdeBYAR:1y0aaaUgqS2jubRgXgYg1QTOL5bLw4R
- TLSH
  T11BC271145A7702B1C947952BBF53D2399E7BB8C2A6C40BA0387D7A0693CFC589DF21D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Straya_Tweaks/Straya_Tweaks/straja controller tweaks (its his tweaks that are in straja controller he just used the reg files and bat and put it in 1)/10ShotgunPellet.bat
- Size 1007B
- SHA256 c74748b53fffd65646fd229ab52c51705db06f5d1ca04105809993a640c26a93
- MD5 bbeede7f538c0b60e774b104c4c93da7
- SHA1 120ae3b889a94456bbdefe98ce2172b0f0ec67b4
- SHA512 4a3e48ea52d5ecb6d900ad72ca419da8f8de964404e770db5bb9fbe2245953d59ca30657f5a74faaae9b985bc884e801b9fe968f61f6605999e60c22e81fa15c
- TLSH
  T14D113B2B7934C977866A4128ED0F87623B37604722520D7D41A39160FCD26AF116FBCD
- MD5 SHA1 SHA512 TLSH
Score

1^/10

defense_evasion
behavioral25
- Target
  Straya_Tweaks/Straya_Tweaks/straja controller tweaks (its his tweaks that are in straja controller he just used the reg files and bat and put it in 1)/11AimAssist2.0.bat
- Size 1007B
- SHA256 c74748b53fffd65646fd229ab52c51705db06f5d1ca04105809993a640c26a93
- MD5 bbeede7f538c0b60e774b104c4c93da7
- SHA1 120ae3b889a94456bbdefe98ce2172b0f0ec67b4
- SHA512 4a3e48ea52d5ecb6d900ad72ca419da8f8de964404e770db5bb9fbe2245953d59ca30657f5a74faaae9b985bc884e801b9fe968f61f6605999e60c22e81fa15c
- TLSH
  T14D113B2B7934C977866A4128ED0F87623B37604722520D7D41A39160FCD26AF116FBCD
- MD5 SHA1 SHA512 TLSH
Score

1^/10

defense_evasion
behavioral26
- Target
  Straya_Tweaks/Straya_Tweaks/straja controller tweaks (its his tweaks that are in straja controller he just used the reg files and bat and put it in 1)/12Bloom [3].bat
- Size 693B
- SHA256 79d0bae2d63947d400ea0b49c9c392e56bc18310acb30a9150a7a22b03882678
- MD5 741945d372783ba106396161e0b76fbb
- SHA1 a6a4190852d60cc086596bb36cc9c5ff144af8d5
- SHA512 7c51a0d049076d1464ae267c71fb3600cd994df113b50bcd782e5a825a8d3305039c8669a871d8f9ae706a24aa71c92573531966082ded36bbcc3252917c7fc1
- TLSH
  T199014741167F02F2C596E314BB23CA2A2A736CC364444B8238653C0B10EBC6AD8B75EE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27
- Target
  Straya_Tweaks/Straya_Tweaks/straja controller tweaks (its his tweaks that are in straja controller he just used the reg files and bat and put it in 1)/12SmoothBlend_AIM.bat
- Size 1007B
- SHA256 c74748b53fffd65646fd229ab52c51705db06f5d1ca04105809993a640c26a93
- MD5 bbeede7f538c0b60e774b104c4c93da7
- SHA1 120ae3b889a94456bbdefe98ce2172b0f0ec67b4
- SHA512 4a3e48ea52d5ecb6d900ad72ca419da8f8de964404e770db5bb9fbe2245953d59ca30657f5a74faaae9b985bc884e801b9fe968f61f6605999e60c22e81fa15c
- TLSH
  T14D113B2B7934C977866A4128ED0F87623B37604722520D7D41A39160FCD26AF116FBCD
- MD5 SHA1 SHA512 TLSH
Score

1^/10

defense_evasion
behavioral28
- Target
  Straya_Tweaks/Straya_Tweaks/straja controller tweaks (its his tweaks that are in straja controller he just used the reg files and bat and put it in 1)/13CrosshairControl.bat
- Size 1007B
- SHA256 c74748b53fffd65646fd229ab52c51705db06f5d1ca04105809993a640c26a93
- MD5 bbeede7f538c0b60e774b104c4c93da7
- SHA1 120ae3b889a94456bbdefe98ce2172b0f0ec67b4
- SHA512 4a3e48ea52d5ecb6d900ad72ca419da8f8de964404e770db5bb9fbe2245953d59ca30657f5a74faaae9b985bc884e801b9fe968f61f6605999e60c22e81fa15c
- TLSH
  T14D113B2B7934C977866A4128ED0F87623B37604722520D7D41A39160FCD26AF116FBCD
- MD5 SHA1 SHA512 TLSH
Score

1^/10

defense_evasion
behavioral29
- Target
  Straya_Tweaks/Straya_Tweaks/straja controller tweaks (its his tweaks that are in straja controller he just used the reg files and bat and put it in 1)/14Recoil and Bloom.bat
- Size 1KB
- SHA256 6091d9acedcd6f3772430e148ea5831697f3952127606f7d9f018b04523020ee
- MD5 8b12c8bfe0b0ada27f331a75b8257c04
- SHA1 48e58f487651563286785b5e0d673158234ade1b
- SHA512 53d15c01d31ec3270ff4d16831637161059e9e12dfb87d5bad2150355aabc5ad940b80b9156ab11641c11bf52722de457e1d9e204eb63c64cef1b1a92e9d5116
- TLSH
  T19521AC0A8E2F03B4C646E277F33284179A33BD83D4804F416825752D20F78569AB65E8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  Straya_Tweaks/Straya_Tweaks/straja controller tweaks (its his tweaks that are in straja controller he just used the reg files and bat and put it in 1)/15Shotreg.bat
- Size 435B
- SHA256 d36766929cb4884dc1e918cb428fa0d20d93284f14dc058e5a48884c047650ed
- MD5 86c626ff572016dfc82ec887a491df94
- SHA1 8726d5864f54640560cfad9c4cebb3c8b0c60718
- SHA512 a085929a52d09d45c4970b6b6e3d7565c6efe832632b8090b930bc6ddd7b6a4638f67ff4582431a4d14bf1e9c3dd3d6df163cf49973f4efd84e7dea9af61aa46
- TLSH
  T1A4E02B71686531799DE2D53BE6F38E26C309F885A08CFEBC8912031C15A7500D771AF1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

persistence privilege_escalation
behavioral31
- Target
  Straya_Tweaks/Straya_Tweaks/straya moneymaker tweaks.bat
- Size 143KB
- SHA256 26bc41e648c62cf44aad61ce5914b84bd7819ea729d1974aaac0eed0638b79f6
- MD5 dfe4327a48878cf522760e225d984afa
- SHA1 caf036e247b74c9acbc95cd5c93ee6f82aae3886
- SHA512 91bea6b14006ded4ba7d6752622e448d30b378646dbdbd2cd102eb3c098e4988c93db50ad976ffda32746b6473c99a53a545e33de260307f4a8493d640a324a6
- SSDEEP 768:lJ+jjTtGiZQpZHSV6PkXl1cXAx5frBaRyCJnJzQltusqsqynwt50PRAbF/b2AfNU:E6SZBmNqYV+pHDc0gNG
- TLSH
  T1A1E30110EA2B0273C686F225B693CD169F77BDC354808B41786B761F11F744BC8BA6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32