4813f259c55a034d6cb5ee2147c79326b8d38b51736c11b7efa3a462ed84a547

Sharing

Copy URL Twitter E-mail

General

Target
RC7 Remake V2.0.zip
Size 20.4MB
Sample260624-wasyaad18p
SHA256 4813f259c55a034d6cb5ee2147c79326b8d38b51736c11b7efa3a462ed84a547
MD5 fed139647ea759560b5885a89ba00983
SHA1 7ce8c5df83504d6bef078999fd2bf9b61037b760
SHA512 3f4831485065a938bd94aa899876ac63f00a424d6eca3b1ce3b28e048d45c65bb6503121dff8413cc7407b4697c6dc457d26a7ba8edf61f1e443e2e519bfb5b4
SSDEEP 393216:XYTqSUZPdml8ii9gZfYiz71dm1vPvuCrT+xQE5kcn1HKNoqUfoXhiCvsH0j:IWD1ml8ipd4XKxT+cnFKSXoxiyuA
TLSH
T1BE2733618C24CAB2CA66737ED1E6C5A3E8D0100970B0F4578B89D1DCEED67F90B47B68
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution upx

Malware Config

Targets

- Target
  old scripts/Amaterasu_Obsidian.txt
- Size 120KB
- SHA256 1f5992cc5f64f2fca403860636f28c6b3545c961555dae5a3d53e8f4d5384779
- MD5 e305ee049c546baa2052a2babaedb22b
- SHA1 fd5b193cb948e3732ec5c3674c9923483d715edb
- SHA512 12bd3b391e1865f5d2a132e591c02d749cc0c3d694e8f69c195e0e6e69cad09b65a4059a7f194281ba1dc2031d8bc1ee2225af81f56068c9bc8e66dcde115aa0
- SSDEEP 3072:dE45FE/c2eMaGznfXixGb8DtE80Yf8g83t7xp9mLbvZVxQcMVxzcMVzcMVrncMV9:dEiE80Yf8g83zh/pdikXzu6XRAqWeau9
- TLSH
  T180C37419B7DE01720B4DE12CC5B34E4549AED438323D618FB68798BEA21E538C5E6DF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  old scripts/AnnoyingDog.txt
- Size 19KB
- SHA256 0ae76b8b57050c28c330c3f03d5b54a0a48ef85d24ff40f4c6640c71a633c2fc
- MD5 ee29f5c0a01c8e106bfc8dcf795e1406
- SHA1 9565c6906368ba2f4cd4daa1c186d304f76cf279
- SHA512 ac357ff972e7af7d14209646ea107ff2fe59ee1a83e086720a551604d9acf9a447dc6a8471265640311d93dbd2c5b73d218d59b2e9d94d37a71e72f863de66e5
- SSDEEP 384:dE6dSzVt0bVA4cfbrz0Dw3+bf+xpkHPcNh2x6KwGaxVd1F2HUohnr:drdSht0bVyrz0Dw3+bWxpf2UKwGa/F2Z
- TLSH
  T103924254739204EF4DFBCBBC08431C4AE2A0625302A505E9B5CC55C92FBFAED55B4BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  old scripts/Apoc Message.txt
- Size 16KB
- SHA256 9e291e2aab0d6834bda56fab67a9650fc26ed7b08ed0b6b02896b05189f99fe7
- MD5 9cbd22f19f025569c188c79295de7ff2
- SHA1 0c697e2aee49cd5901cfd3d9543c6c3b0265b2a0
- SHA512 c94d09df77de5bb83ca4cff6e337c356b0075b5c6e4dbc4dd375d0d7450595c2642753f94c17d29b892627d4fbe6a23f8fd525ba9e9d982fab6d3b2b0c15bfed
- SSDEEP 384:TynT5o5OASknZ/t4BRGaL1OVg7w2px6fj0v3SDLqdq+mOJvMYy5d4Q:TynT5o5OlknZ/t4BRGaL1OVgU2nw0v3Q
- TLSH
  T19A72B758768A27D898F7B51930E70608B2BB702A03339D58F63E42956B783DF38C556F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  old scripts/Be Dat Boi.txt
- Size 1KB
- SHA256 5718e87ac3efed8413288ca1c06a4ccb2c7015821054d3b88b77c764c17db905
- MD5 a739bb381c96e6cfb84ac5b4e5a40f54
- SHA1 2e3ed83d1a4bfb7ba0c6dad760959055eac3a61a
- SHA512 8a2e0c54869511615c6aa1008901081673180c814d6c37187b7cf466363edc5979d95382bfd777d972216d2dfb426bc3dde342098fface9c56617337710a9bd0
- TLSH
  T11611F3C1215F51E86CF69A0135BB6904FA06743C661286B0FA5DB0520F9D1786950FBF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4
- Target
  old scripts/Bird Wings.txt
- Size 19KB
- SHA256 1c48c2ff19f8f4b5dbac2e19e1bf3c75f2f88ed8250f83bad901bc33d6d74713
- MD5 8c56976a394cf9da8ed6ee0975f503c4
- SHA1 d3a928d819aef532e1f89a23c3a8d25131ed21b0
- SHA512 f2317e22fbbaef6985d9a8729cfd9b5e7cfcc47b7da0c10fa6379cffac4edb4b5514918ac29113a74b983529f12ccb82385a0fc8783e8aaaa734dee4b2014792
- SSDEEP 384:Q2oxTVtn8U7ekwHw4JUEd5gSEYH/tQOllJrSQkBWFuBWvALl:Q2oVVtn8iekwHw4+EDgdYHVQIJGQkBWy
- TLSH
  T176921F3FA2C305E446B1B2ECAC69001FE35554633A250EC4B9BD8A547F7272C7AF4A5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  old scripts/BirdWings.txt
- Size 15KB
- SHA256 475845abc8651aa09f95b35785e8522da1023c95dfd267737807da619065d337
- MD5 829fb82309aace556de8c63e99f4bb12
- SHA1 98c1a23fa966c450de525fbe366777199949b685
- SHA512 b2461ef2885e90c43f4259048cc19ab8f784a5533ba5b83c334fa9adf61636a794a6dd92111409dbcc4b325cedc4a2f6b50f05d4af30d590db0a9291a669187f
- SSDEEP 384:s2Ixj1tnHOHUa++EwnwYJUE95AyE4H/tQOllbBrHXH:s2IF1tnHOHL++EwnwY+EjA94HVQobBT3
- TLSH
  T1B872533FA2C305E846D2B2ECA8690013B56558B27B350EC4F8F64D547E6637C79F4A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  old scripts/Blackjack NIGHTWING.txt
- Size 111KB
- SHA256 23668227feed6d748e2deb667539b059a49718787f8e37cf0951c7f25e9d1048
- MD5 a63903cfd80af7c1e21db37672010665
- SHA1 8d46dd6da02565fefdc4bfbc3da1a586cf135116
- SHA512 150b2c4941c0daf8c9b1306c1ca0f7152573091f9459e83967271244087ee596fa2944611b6214c3ba08ce6d7bc9b67eda7f33b7c3b10fca2f8da34573d6f2a2
- SSDEEP 768:W4LtrZL0Xcr0xBEqIZx9oYf8g8c1CM4N5UZeTKVrTbgk7mAEfdO01AFzv+WJ/TU+:W2SXnRYf8g8pM4NziMW02f2M
- TLSH
  T1DDB3F09983C454E4F68FE92C15553E0742F1F42B2AF84DCF72DC614AFF2E1483A64A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  old scripts/Blood.txt
- Size 38KB
- SHA256 d64b71f2c8437479fa4dea61f9cd3827fc8f6d4c49a4baf97282de756f98c404
- MD5 fd09f06b951878b0417511e1211010a5
- SHA1 af7b6b14d4d738bbf202d7238359b8cb8b4fceba
- SHA512 a9232b0a30862586dc1a4c1cd801de23e9f33fd4718abb043233cfd3a71e78afa13811aab4a9e33079747d34780011ec7a6daf487dd3908d93cc07d51533ac5c
- SSDEEP 768:FS7sVo19FUEKaRhwplBNc1JrX6BN70mx3bQPgKgcNl7yIjYfeiJrs2rp++ufdVOg:VTMWN70mx4NhQfFrs2rp+NdVOASmzwoX
- TLSH
  T10903651E638257F81B9BD63864E368427ED19403530B08E979ADB0887F1994FA1E37FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  old scripts/Blue Lua STaff.txt
- Size 58KB
- SHA256 b9639c8e27459c79dff2c51963ff56eb84ff3f9d9669574eaaafbb1ff5371213
- MD5 7e67fdc1ab55a8ceaa69ea0901871202
- SHA1 a7e304d6c0a56d505d14d7d6f60d766d053da367
- SHA512 baeb998046a7ffba43583e4f22dc0880477d1fcd013ce189beb3b3961fc393e4ccc701e061d7e2077da8f7bb51166f2d4f6ca148d3b8aa8d2d0606c182c60bdd
- SSDEEP 1536:alco4TlwtZDtzmlX7z/yoxMRyOPPhLahIphwDUhqwPhLc2ctnxmgCPhLp3txaXmg:alco4TlwtZDtzmlX7z/yoxMRyOPPhLaj
- TLSH
  T1A843227E33D013B695E94B79B44A5D47E8ABA44331211CC47BAC2C986F3E60E79F074A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  old scripts/Book of Wisdom.txt
- Size 15KB
- SHA256 fd2c19f301f9e104407ed88e765ae5aee99c11bf7ac9a6f0feac0bd69e78ed91
- MD5 55f9fe5c14ff4f46ab211d0026e03b74
- SHA1 d8a672b3b591c856b80b877afb7fc88e6b708660
- SHA512 a91c6496d3e650e6e573ef0993330eb65b758100fc35b8c37057700fddfd0b21aa563ffd0275852fe6bcd0f633eaeb29bde74503edd77ad20cf81dc1b5cb877a
- SSDEEP 384:PhN9sYLzqw54fbeba7eBmIm4BM+P0Y60zKB/0qAMpttmrA9nw7SmmsX1LQaNxBCp:Pv9s2zqw54fbeba7eBvbBM+P0Y60zKBn
- TLSH
  T15372860FB7C11AAC619D5730D4A7D8023A7265903B068DF6B6FDB0785E6930EE4E05AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  old scripts/Bow.txt
- Size 20KB
- SHA256 7b8696760cf6203aa79587dd0d2c4b0cb961285cd70403a6ce7abe660d381c15
- MD5 658c721f3b95ec826b7233197425e8f9
- SHA1 da20ebaed18477e909989c1f15c03532bcf78689
- SHA512 8a31c4e7e7306e088da02559b56f5395e263a80af6e5bb7823266930ccddcaf2868bbe88940768b5d9621b5829fc548f964e81f5ee88361b488483f6fccbc195
- SSDEEP 384:UQvOr1+E7Sx5FVpcx80SuXTsVvFcZGfc45QHtnC4YpY/090MBXbQO5FSpci9vcJY:UQvOZ+E7Sx5FVax80SuXTs1+ZG045QHT
- TLSH
  T19D92400F97E312B165B266E4D9870803F8251463293A4DD1BABC52987F7832DB1F1B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  old scripts/Box.txt
- Size 3KB
- SHA256 4ba9720f729aa25044d29b9a34d24245e34759aa5c94124819e1681c688fdab4
- MD5 8d276be03daaeb01d8d8c22bfef448f9
- SHA1 0a3a791f342baf69628025afa42f952abe85f4ee
- SHA512 eb15494213a8e4b7a998fd72b5522e5ec3e578c40b3677f40542544e51ad32dddf68786d1015dc104be7dc11535a8fd5d859289feb9b7abfab7f40635c82b05d
- TLSH
  T14371123DF99E50B929A37528683B1086AC1FE42A303B43D0FA95F1B43D5943C9052D7B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  old scripts/Brock.txt
- Size 43KB
- SHA256 cec2e8110d8b8511c81ae3555dc9632737663a95720be058151dcb64839daa8e
- MD5 b56119f7a0cb4f3a298674489b14f4c5
- SHA1 a59514ebcf7cc79d7cf1c64907077522f77c9e19
- SHA512 f5958b598bc6876bdb9ecbb3fbeb57c97b768c6c8f3226fa36475d581ebbb8ef4a4dfa01fc88325329549bbfc0d47d978151f4f85fca1a525c5c2318eee1c1d7
- SSDEEP 768:tNDacUXjcPCzUaj0SeeQGXTaEvGVlJkYMKWi+ADk8EKYjG+Pl3acfaO514GLTAC:icUXjcPCzUajNeeQGDaTVlJkYR+A48Er
- TLSH
  T1A413D63B3FC6065D9A9D25E598DF0C04BF36C410257F2DE85A5080995BA2F6F60BBF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  old scripts/Buster XTerminators.txt
- Size 82KB
- SHA256 e636151651f4b1397d1c20cfefa77bd3831a19613fe91353241bd337156fd0d6
- MD5 26a6f9130733a0040848bf968046fc72
- SHA1 d4de0c51a1ab700dfdce5c0ac8ebbb35c311371d
- SHA512 2919134137d38ee96d3508fe32547fd07692acff7cee4806552e61c3b00c4769c16982a81ea8ce735cb6a7178ea132ca32458e132a1f6509c0246081d649b31e
- SSDEEP 768:W4LtrdL0Xcr0xBEqIZx9oYf8g81ELCuv5jmeTJ6pkPgQ7gsBUTxKuuLWXWQ1U0V9:W2eXnRYf8g8kCuvn35PO
- TLSH
  T1C583626A43DA10F4168AE61C09222D4347E5F426333D4DCFB6ED658AFF6C10D7BA4A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  old scripts/Bytz.txt
- Size 126KB
- SHA256 5faace8a41108d9f57a11631c1a166e1e1ad0f6b8d13e3984f00dc2267a34ec5
- MD5 5d200ec45aac7ebf3e6c55cd0dd8bcef
- SHA1 83c4a59dd52ece3651f0299179b7f6383b00d0ae
- SHA512 3d3b029ebbf2470949e05b5ffef99d40b94459852ca6694abe01149697ef25dec3eae75f4e15b05739658c569369bcb4915589468681afc7d2c9f4db072ba3b3
- SSDEEP 3072:HMg5wE/c2eMaGznfXDlod50X/slRaYf8g8SPK7poi+mPk55WuCC0DHItpfr1Y37n:HMplRaYf8g8SZO0c5Ba/FkezC86PKtYJ
- TLSH
  T177C3660A36C2017216FBD22C94935E02DBADC40B332E10AE755D90D96F7E52DE2E5EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15
- Target
  old scripts/C00lGui.txt
- Size 892KB
- SHA256 0cc3b5841001cbbafdfcf72289f5f46c35fc24be6d56f2a324ceffd2c31dcd1b
- MD5 aa5bf7640049d56e3860dfc8bb0174b9
- SHA1 6a6daebc5e0435cd962630e6bd66cf442c19a056
- SHA512 e6712024e9c3ea46df317d110a8179f117fd85b6368246e3ce4366b334c572ff8247a90efb87c591952e21880115fbf7055664a6675a7df5e79e2eba7e0264e8
- SSDEEP 24576:ip+Wv1bjcWCqt/cS/V7yZ5U9fIuZZtqFN1/k2RjP+RSCn+/MEdaTh86xadxK4deh:ip+Wv1bjcWCqt/cS/V7yZ5U9fIuZZtqo
- TLSH
  T117153B9D779B17B8168BEB7860630D097D7FE01111011A84F5BEA0E82F5920FA1E7DAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  old scripts/Caelestis Baculus.txt
- Size 43KB
- SHA256 b385f4246ad917f8523fe1d95d1a2b4a73d893bb04e82a94f4a87a565fbbf388
- MD5 fe9683ac15489ca9ad5a6d8c18dd04fe
- SHA1 7e5f7507b1acfd4b6a0b93b199ca97eeb3d417f8
- SHA512 7d7646ec8837ed3138f9557c0a755ffa6f3a784a163e42248d6817e01ea9e1d00402960ee320e5b7deb1f456221d5c760c42575bf4e1730c6839bce6d78050af
- SSDEEP 768:W4LtrdL0XGBEqIZx9oYf8g8FELOov5jmeTJ6pkPgQ7gJlWNBBXYtT+5gHi69RRW:W2eXGRYf8g8UOovnLNBdwk
- TLSH
  T1CF13956B23D611F15A77F73818172D02E6A5A463173B0D9AB6CC40C9BF3D80D72A4F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  old scripts/Candy Van (KILLS PEOPLE).txt
- Size 64KB
- SHA256 8024672d1e6f74eb7affa9d83e544072f2ecb9fd9cc2566b9dc529fb394ba9b8
- MD5 386978b2a93e7f23deb13449aaf8cf7f
- SHA1 c1ea8caafca868a1851534d63312a3b072363d8e
- SHA512 05db4d085919d0c0acb4d8779c0c0515973629fb4a5315a1e724ca0588e96c7a312cbcba6336b974993c31cd819ccb723842ef3880ac4e9715394041f9acc056
- SSDEEP 768:SaBhYzlrixezr0PZ67w4uKUfxBPAO+ekE5p7Sqo2G28XzX19v7RhrbNdL3JZdjVI:n+RLUyh33e/suBl4wAA
- TLSH
  T1295352DB63D505859F4BBB1CA8431C57B4EBB6673FA90AC933F6D220790D6CCA1448CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  old scripts/Cerberus Fang.txt
- Size 147KB
- SHA256 cafd90ba9190b0b196240cc9eb4cfba74e50680432614cc5680861169f5666be
- MD5 d795ec193e2816d045dd6f8362ef7425
- SHA1 f226fb6b1a5ce4ef25caaa07c2119be4f2115600
- SHA512 9d30d74294ac40a713f3f3182b18c94307c50aecd7ac15b681bebccb03ba1270090c3b8e527f41a307c0e664fe640e9da42bf6336a5c77e34c13d8fd9cb61d42
- SSDEEP 3072:8Zx7Yf8g8PF6xZk9r3UjiRz0Jfkt5aX94V0h8eCq41q7LN289N2P9:8Zx7Yf8g8/3if2P9
- TLSH
  T133E3B60E33D202721BFBD22C94931D02D62ED4173326619E769D58E9BF7E508A6F0B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  old scripts/Chaos Folder Hakumen.txt
- Size 381KB
- SHA256 8b7ffd83c55d010f6441c8d87b9583cd903cc6d386e9d754ad2711eab4840e34
- MD5 a3d65f3b2e15c3567b9ee1071fe5f3dc
- SHA1 11a123cd64183711e59ec56bf9944b8045ee1451
- SHA512 148d7aa3cbe86bfe7c7d941424ba40ce452bbd0be20ea029c469d9470e554bb0cf77ed71e5874faab084de668cdf3123fe28c3e69523a24c8f16da61c9809cfc
- SSDEEP 3072:b0KZ8Yf8g8W9tPgmXj/GVRiakrT3T0tdxCeA6gFTbxBZUOT8NWJ:AK+Yf8g8ndxCeA6gJ
- TLSH
  T1F8845028BFED053A275A910DC5B70D882F5FC434366009BFB847967DE50C96886E2DFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  old scripts/Cortex.txt
- Size 160KB
- SHA256 c4e24d91285456b03f96ded57c8a4b133a553436bf56b51f16e80d586a297107
- MD5 2eafc660576fa5bf58dd82d484ff2036
- SHA1 90c5d5a1981b48ad14716d25d97764ac635be751
- SHA512 422d13fd6f6554711d9f054d4442df14807ae411fef348c681ed2bc63c371afcf1420a6d71a1fb6d43f3e45657e0993f47b0e3e4ae5d1d893e769c20440b1a52
- SSDEEP 3072:SYO1yphw86Ll9IcAirrMshDUcaoNTYV+4pgJlv88hhhXpgOSU8o88WReeeOpgOSq:ihhht88WReee1dddC1
- TLSH
  T1F0F3748E539105B259FBD36C08032C47E9D3A6572A7904CAB6FCA5447F3E24DF294ECA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  old scripts/Crimson Sonata.txt
- Size 77KB
- SHA256 0ab322991510c7706669e40e28dc4b466fc0b5ab1ec59257631788c594f71805
- MD5 3861d85165434587b9affd37a53d0c10
- SHA1 c5387f191db3504f2aa7b970a2de573f215a31b1
- SHA512 7d2c8a32e1b9ca59109b842b4293bb2d99fa7d1d44aa8816ef766199701344742628a4f421d5d1e50c6d9f44ef2089f1c48c555c193bb0c32bc5a1a68a357b12
- SSDEEP 768:W4LtrZL0XQ0xBEx3ZI9oYf8g8pJELOov5jmeTJ6pkPgQ7g07vEUZETdfD8dSe0PK:W2SX9mYf8g8eOovnX7HP
- TLSH
  T15B73416D538911F09A4BF66C08523C0B46E5F42726BD0E8FB7CC498AFF3E1487A64A59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  old scripts/Crimson Sonato.txt
- Size 78KB
- SHA256 2f18b408061f4a8ac466bc7fc74231db5cbb041a09d33b12ed9b61bba6d70f7d
- MD5 38f1b8abcd45a6fc35da42d98cd7b907
- SHA1 07e1a8a4c8bef517e347c64623b4a4af44ce65cf
- SHA512 8bd134813966fb40320df4cd91e5faaa2885d49c313f892e1768e50fc88c9b245c44d9f6854b2c9bc0b0b9c7ebf98b74a999616d939fa4880cc678111d8c01fc
- SSDEEP 768:W4LtrZL0XRLYugx3ZIFoYf8g8pJELOov5jmeTJ6+kPga+bm7vEUZETdfD8dSe0PM:W2SXWzYf8g8eOovn67lL
- TLSH
  T11673325953C911F0AA9BF56C08423C0B86E5F42726BD0DCFB7CC498AFF3E1487A64A59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  old scripts/Crystal Gauntlets.txt
- Size 29KB
- SHA256 fe0019d5899f9a8e65e09099dad371b7177aa832ee56cf66afee98944487439f
- MD5 a914926073fb0f491d991dfce2f2bd17
- SHA1 e6e59765e89e0b332c510d0ac87c7935c3b9d24c
- SHA512 6a42795725a0da1ded2579135910f0372624f0045ee59fed81b39f8273dd7697d47df6dfa1b7d7a01cecaae1c7853908845a56fdfe5f80be73b426fe69ae8dd8
- SSDEEP 768:chWQ3L04f7QA1/NKFRJz+hKL10QAsLKKD1zbGMM+zqfeyexwVJlw9L2Mu3g:c0QA4EyKLKALKW0l22Mu3g
- TLSH
  T131D2CB1D37E115B80ADD1F794CAA7900B57BF01B363768C0B29298976C2BD3D3851E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  old scripts/Cyan Slicer.txt
- Size 63KB
- SHA256 2d8b8881f0ecb8f06cea2d10a15bb4da4da3402f3a9920b44daef84606e3727d
- MD5 30d9d26553f5541ed30a92feb99024c9
- SHA1 ba9947c9d872d1d44d5305009eb166c3028c6403
- SHA512 6d9cc54382b899c8e10279f22cff9a7fa095f57662984742640d2367ceee9189300e227e9289a39cbd51449cbc352d41019a235d112c3277472af6f8de4e861b
- SSDEEP 768:44LtoWL0XkA+5oYf8g8/KxsZNv9U4hH2eaIE16D3+VmVVgVHS+Uu+VyVcO08nBH8:428XnYf8g8tJ2evLMKNz1zca
- TLSH
  T1B053B84ABB8E01B509DFF63419771D06BA7AE027253E18DEB2EC50407F9990C70E5E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  old scripts/Cyber_Shogun.lua
- Size 128KB
- SHA256 8319af23056c30451fc83bde22f5c338d61435192353e5613130571d810db6e1
- MD5 f7c0e426998889166d26ade86f3c23f3
- SHA1 965bab8b3e0ccb31ea99876a26108a430f007db6
- SHA512 4052d96e59828b91ccee8f82485a937a8a722f21f60a25b6ab0b3ee48f968db9a5c28e7ddc318547c77335325dab9e967e10eb4f424e917b7eada76d6125babe
- SSDEEP 3072:ywbnFSpIEOlqOobzD4jQlpIDD9FNKzO9nI:ywbwpIjcUoO9nI
- TLSH
  T10DD34D5953D800F25AABD73D50022D039EE1F463377A0A9F719C55CCBF6E648B7A8E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  old scripts/DIY Sellion.txt
- Size 398KB
- SHA256 b5e472ddda8b52c8609a5f88592f67366e00ac042512b596f82355dab9af482a
- MD5 4d9caa28959387cc0f0ce50899d892dc
- SHA1 8160ee43900bf5465d181e336cbab796b6876392
- SHA512 303669537c85b23fc67e100d83fede720a87434bf228b2e42523259b7d5db85dd1d839cc41668d4e968d2c647d60aee958b3eb3e472a4ebad780ad4af05848a2
- SSDEEP 12288:M7kU/rlg3AxnF7NsJr9eaNYNgmggW85O+bk5ekOw3L/1rRgFju23ttN+bcPuZFRr:ZU/rlg3AxnF7NsJr9eaNYNgmggW85O+0
- TLSH
  T1B984631D2684017559F7D33A28A73942ED52A44332720AEEB5DC60CC7F7E54CB2E1FAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  old scripts/Dark Knight.txt
- Size 21KB
- SHA256 e901e7151aae4da493672725a201f01a7d48cbeb39c7bf63d991a12e985e99d6
- MD5 3f6c155293309c0513d32962b6daccd2
- SHA1 128334ec5cfd9d37d38c75e1ef51ea62d42c8d2c
- SHA512 d22b010abc6396a35451b6d30879636d3b35c04ca720512ddecda8d4d548149847dc6bd07d9fe67afcb3c4f489753fe60c340ae5fce42357bcad26f690f2c685
- SSDEEP 384:ehY8s9A33MtPCkqNxSxAxvx8xkLpG/WBFZGwRjtxGhvGLUJXzGYGR7GGGlyGGPPX:ehU9A33gCk8Ym1iKLpGOBFZGwRpxGdoV
- TLSH
  T10AA2EE7E77D20AEF2BD9D60DA0423C2361B58844213B96EFB48DB0586E6F11DF4B1B45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  old scripts/Devoy Blue (1).lua
- Size 73KB
- SHA256 30b92bd884305a4f3a173aa7fd7e1adc3463eefd0f0bdf42f84180fd9a089996
- MD5 a5f5cd0a4f5aa1f838955b8c1301df48
- SHA1 7156ad733f57a51cc68b068acf4760a6378bd107
- SHA512 ec43afa52935c5b42a73ba7f3e46d4373b9a4146e33d425f4a6ccd7b21c38c7a2899ed449572807c6e05839bae645876a055116962aca632ef17f0685c8333e5
- SSDEEP 768:kt80hM67m8K2oMtdQra+UyHYiwnsdctEqJbatyjJ7utRVNkqC:OhMkHoKaQwHNG
- TLSH
  T15473D93D169E30B989BB173EE9291D047D6D742140462C9CF8A658EC9CDA74FE0E392F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  old scripts/DevoyanceV3.lua
- Size 175KB
- SHA256 f8a11afc8c5d7c6932f309e51ceca97da89cba8ef10f72944a608eeab3289f9d
- MD5 e22089c7bedd3b99f8ba4914ba35856b
- SHA1 eebcaac51f8f80b35f8e7f40630e28652849af59
- SHA512 cfcc8d57621ec310d6e9d9f47a59e74180ff1900555d3cd6c46968299c3d027b4e4e430fd5f9d9ff63f360b24c898fa3f7c2b7eb0c84fb5b5d4cd2e531fcc47a
- SSDEEP 3072:d4N4ITIU/G8JEWI2Ib+ZZ7u+vs4N4ITIU/G8JEWI2Ib+ZZ7u+vr:d4N4ITIU/G8Jc+Z5s4N4ITIU/G8Jc+Zx
- TLSH
  T1F0046068B68F21B3499973758C7A3A013C1EE097473B4DB67EC980D97B1A94D70B0CAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  old scripts/DevoyanceV4.lua
- Size 97KB
- SHA256 58e78dac6793c6d26d700b7fc5e7880fbb4edc032b307047e56b4c4907fc6fdc
- MD5 b5c5f5b3c92e1145fa41db52ce38fc6a
- SHA1 1f9de9409698cbc1cdfef0c9df5b6ecf68cc3373
- SHA512 b13fdb181bda6eb46b913ff315873561f9694dcc993b7f2c6dd948ca164eebe94817cf3f3a8e0a4732e836b5e073d971182b0bc25842d03ddacd0339de30e535
- SSDEEP 768:NBlZ+qb7smKDtTCNydF7rjwFyQcvmenyvDeyPkO1ZwM/Pzm8A5Th9qR:P+qb4OkWwipuTh8
- TLSH
  T173A3E93DB2CE20B549BA1236EC790D0975A5E421C1272C5CF4A694ECD8D978EE0F297F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  old scripts/Dex Agent Editor (1).lua
- Size 518KB
- SHA256 a229a6b2a89f805071e828cb4bf4610873822c117b000d8219ebd6e0989e81bd
- MD5 0a104e309dd71180cb4dcf7eef96f625
- SHA1 6e4dcfccc4560211a43df506b7ff1cee45b6d911
- SHA512 1fda9357602952de4940e73c1ea3d1afbe67236d6954d5276cb426f93911a867404565d7062aeb30f1be14746758c4795d4f7f62ada86003c7687b6c1ea95889
- SSDEEP 6144:CKvDSqh1ckhhSaBE5mmLDSyJ5sme5dGuRXqwkfkfyKj6ZT45lcGAITAQwAIxLGCy:CicuEjnyVmjQJO1vgeyBQ84+nQq
- TLSH
  T163B4C8EC715E22FD981332ADE8AF04093D7FB43251192A59F4B92538E481A0F56F3EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32