2f9eff4232df130b7d9e64f95c080e32c7d5bff772d32c0bdf4885cf06e84ea6

Sharing

Copy URL Twitter E-mail

General

Target
OpXOyuApWKTlFzrV.zip
Size 24.4MB
Sample260705-wnxtdsav3l
SHA256 2f9eff4232df130b7d9e64f95c080e32c7d5bff772d32c0bdf4885cf06e84ea6
MD5 2bfb8be4d04d2bc234a5492745045f3a
SHA1 22ad5ca3f8834c7bbd8e2517d43c514e78adbfa3
SHA512 a86f89d154984997ea9047a9c2cfd0c38003640443163fe8ab8559c04b17ea04aa376b5da3e5a99563201f364719e0488168095f614d51b105353c5289a35b97
SSDEEP 786432:kwy47xWLcV+Yr6yTBR7iN5/4rZrURRzd4F3L3ihF:6tw+YVTDu5/4trURRzd4F3LyhF
TLSH
T1F04733EF8C2253C3F7576BF0D95B9F8D8A2D324AC3A033A689E07245B555A601DB03D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Potassium.exe
- Size 74.9MB
- SHA256 32c23117961e1c5e56d108f087314151f1c714be5015b5622871a2cb346fb0f7
- MD5 eeb010dec5e5c64d818ab2a9eda690e8
- SHA1 fa4e3666ed480fa2308b320d563c6b813c1cedc9
- SHA512 31022291d211e966136617ca868e75819c2094c3f611377a7c0617c1caadf4b28d54a6fe01772aae64136cfbd4ad1204cef648297446e5b2615aaad2511a8e5b
- SSDEEP 196608:c9dnSC56xrIHs2XTWMrd0mzO9dnSC5ZudFcc+/m4hvmS:c9dnSC56xcHs2aMZK9dnSC5Zg+/TRd
- TLSH
  T1FC0808F9936023BCDC4957BFB96138B4B60F747A37E5CD94C22E4E92581789ECA09843
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  WebView2Loader.dll
- Size 156KB
- SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
- MD5 daf9a81004a961e39650a0e2bafe233e
- SHA1 62f863adbef09905c75f475cdd5ce68b0aaaf73f
- SHA512 95f1ffa93b0c16fdbaf9eb2d9f9fdbe63b1946a7cea0e366a9c68fd4695a97c7681bf9e2b2f372c8ab6430c0a37cac733154e94b1d7a76cbfa3c1de340d5ce33
- SSDEEP 3072:8nVs+j4uIGieBiCIV6A9S4arvNQG/pTNgWEtJctHVA9rWt:gj4NCy6A9S4YcWEtJeVAk
- TLSH
  T174F34B5BB2E90077E17BC278C5A34A16E776B8111750AAEF036447791F237D0AE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  autoexec.lnk
- Size 2KB
- SHA256 efbfe672f08e384cf022bd9722e5b83ca75f602b53fc0d389525b179303897f4
- MD5 fb5ebf1ae11a1059b54a7c1cc769ead1
- SHA1 0d4b9b9c8aa8833f2a4c91f595c915f82926a2c7
- SHA512 d66e93ebcb0b496c38b1c9b3468125240530b568de9993cc3c8454aa0be96353ed09337d193195b71e9a0c4c2ae280f36f29f5cebea6df05801e48c8ea269c01
- TLSH
  T1834115035FE60521D3BFCCB91EBB340A8A677262BB4109094114D68E1C71D17ED2AB1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3
- Target
  bin/monaco/index.html
- Size 18KB
- SHA256 589dfdfd1851ef4e64a6f346de8a25d125e9113957fde3c0f7e8ce330da9a63b
- MD5 8fd8d51f3c0c602ce8bb3ce24c759de0
- SHA1 a43d4d108728151cf5a4b4ad505de80c7f5c929c
- SHA512 a0054794d43959617923452d41bdce78caa541e8d2bf633db006a57779d75d80c3912b311521001e1fd05f8b60f589d6b52c776adc5309c7b7ed41b7e305a9c9
- SSDEEP 192:oIJbX0ggAbOmUSMKTnuMuTcJg5v2wzQW3V1VHDwFgBsK4u24FzZ+MHTq58BNLQPS:X0ggAbOmRJd/sV1VjwFgBs9SMwZ
- TLSH
  T19B8220DAB95F50CE7292326AE0FFF60AEC2DD17EA10506F6F69E6C708949106437342C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral4
- Target
  bin/monaco/vs/base/worker/workerMain.js
- Size 174KB
- SHA256 19b566655d73370a820a7d6fffe7af03dba3af4997016c0983be5bd188603ec2
- MD5 9ce9e46b6d66d8b2dbcabba577cad2ed
- SHA1 397b0e9e7b2bee37a8444e84bb9788a0bdcb023e
- SHA512 f322ea669fa81397066edef062721ae3dd515b3d61c4ad7bef0db0eb3a53f056da298fd4f761bd3e5d613e6f5803a7c35ed056085ac3b97e06c7bfd47fffad49
- SSDEEP 1536:mi5eQeCEwCP1m9JXKmA1xKzyOQJf9X2K7eM9bWXsUK5QSkSoIMQwr+ZjtQYyeTMO:mHTdkKmA1yyOQJl2K7ns6dZ/RVaNzY
- TLSH
  T1C9044CC53265984353E652F5A07B0107FA38B877680C556CF3A8C9DF2D6A88760BBF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes.js
- Size 2KB
- SHA256 9636806a05da6a43937d122e2211e8d2877ed95caaf691f4f079dbaf47e0c6bb
- MD5 c25a7c14fa5635368e75d154c185755b
- SHA1 dcdcdbd05115311a0929390b82b6c5c2b029aedc
- SHA512 3a6b15608fcc48f78a6442fff4fe7781603ceeb7b8bb06f2c6546f821be2cb824612dd5d143bdecfa4de33a3f1f5723d2f643d4d7de2ec2d1bca3fc1ba5eb44d
- TLSH
  T184517096B7CE6BAF598C33ECE4778406A69FE5336116883DFE0C90C410D3119A2E89F5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/base.js
- Size 521B
- SHA256 9a6c60193eb2dda7c2682bf9c7ff7e01b0f6000d70881583f0055782c8b2c619
- MD5 29e50887a6f1c445e0f63bed73eefb83
- SHA1 b8e006b9ad14bb6012497e164d9a4f926e2d568d
- SHA512 16cc7fd8b5641d347a6a9e8542a6ab29d71a432dfb2f72dae05b21b274d92208ec7c5a9ad1ba313658f3a68aebd9edc3d0bcbf07a03d0f16eae95568f175dbf4
- TLSH
  T1CCF0976BF78F30CA1E474385A73AC1495C6EDC32D2322035F51CEAA94488C2923468AE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes.js
- Size 33KB
- SHA256 75418233aff9a1401f6c467f8ca20999803436bc1ebb463123d1fb94dcff1f38
- MD5 fabe9b3ec7774eb374f18709ab41c8c0
- SHA1 de6c19413ef008000357bccea90faf0d23ccf605
- SHA512 d7b4a9dbfab0ec55e27b2ded86066b37ebea7d50b3b6b28f44c996f8280463176f1107c6bf15a52fb700f88ac3e0e7b87fb8a50664da9b31fc0e89a38d2055e9
- SSDEEP 768:EDVdzN+yYumzw/Wx5nYCH0e2zBsGMPv3lHhj4MyjKG9jn9/j7NFvHR0hT/YEkd3M:H6/W3YCUpqUDW
- TLSH
  T1E2E231E7F38C3593199B4784A27EC68539BEF6BDE4F10079782C5608079481933AB67A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
- Size 11KB
- SHA256 573e821c40792e10d2dab59ee3483e2482379241c94b2b98ec5fb098556e3e89
- MD5 f2adca6e8020236f5e86b8e6aced6806
- SHA1 1f77dc5554c3ad94a78b693d1bd8fb859138de03
- SHA512 040fbb8bdcb58ecd2fbea318ba661efde39f96ac2e3aa751caed100e1b4a8941916b8a9bcc6335ff76875d558a2994866069f50f88beda76b7f09f258fe670c1
- SSDEEP 192:AJCfeXBM5iG6zUMmYmr6QMlr4qLYFQjG6AcE103aNd9xZAqGQ2qFARewPxHFTX0:9feXB2iG6zUMmYmr6QM54qLYFQjG6AcQ
- TLSH
  T14D42ABF7F38D799719438786AB3DDA842E2ED938D93240B8F70C6615248C959232619F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
- Size 594B
- SHA256 9bd9c85c5d1f476e663889ab2008f83b323c8d794abb0df35d43091c689ef64d
- MD5 4d0ec8edaec389b1eba92c1d18676f09
- SHA1 6eafd8ed47700b9a2ff1e10dd7468e50fab1bf6d
- SHA512 d4c7655d7db8d4f7d4bb2d0add36bef916caf291b2855785685a3e812279369848ce081ac6fb5cc869fb827653a4a1f874273af17bee67987e3c3a441ad368e8
- TLSH
  T10AF0EBBBBF0B3697060B63C8AB3DD740192DC831C4624425F20C5B6040C0C2772360F9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
- Size 1KB
- SHA256 f7ada012dcc309b7c1cd272d1a81657b0ddb3d51521e682116522099285d525e
- MD5 09bbad4c05be7ab76cc3c5ef4fa9ddc0
- SHA1 a38cb372349a2420619e2fb629f0912500dc1064
- SHA512 40b753d8e97ba46be9fe4241dbe892bdeb62c902ea088d68ee7ea5ce0506d51b16f7105355a6b5360363c80d98b0f644b7a7ea2b4262210f24870368a2629c44
- TLSH
  T1AB21EBF3FB8E304B1D028785573CDB011C2FD834C87210B9F108A67090C9D42225B29B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
- Size 777KB
- SHA256 799c0657b0ab027c3ec0794e8934bed4a4a8e7f063dcae47783a7f32fbeda25c
- MD5 b1e41317d3ffe843032f5eb6f74806a9
- SHA1 506f617da8d8093ed58cfda68e0d60e1aa2ed08d
- SHA512 fb538a73935fd41b9f2ba9f6ddcdfe066f6f672d5dfe682dad301cae3392a93405fd35ee61126e9889e14f71c51e11cdecb4e20d213ba91b34801ec5b89ce02a
- SSDEEP 6144:0XUmTfyptLD/yxnbDh+hIAKVwhWppLTl+ExT3dsX34hAhbAhQ9qhjLmWhXXu:wVyx
- TLSH
  T136058CF7B78D6A4B2C07934AB63DCB04393EE6B4DC2254BDB65C7B2075CC901126369A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
- Size 16KB
- SHA256 807dd6d35bf5fffcd4de4aa4ed1800716223a6fe014077f23f2f652ac86d2a31
- MD5 430fa91891107d6f1f3c3392dde9ff4d
- SHA1 5d42ebec7a7c3f5e5b7eb074c38572345e33c1c1
- SHA512 22011409e428216a619ca085ce8e034dc6bc3a8f9de27fb4f2e3dd6b8aa8cc7aa3b02508af816137f646ca1fa96e083a832e68bd8c8b016bfd7a3674d532a875
- SSDEEP 384:pFcCsgQgj6bPo2nv5CYR8/+qvPNEzH+AK6/NBA8K/tQsdz6FKRjrDcWYUeih+hrA:pFcCXQgj6bPo2nv5CYR8/+qvPNEzH+Ak
- TLSH
  T10E72DEFBF34D36A71D4B4281EB3DEE46261FC67CD83201B0BB5C6A15164885623A785F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/Model.js
- Size 7KB
- SHA256 17b72f11f227d6261e44b0bf49d6cdc4ed88cef93c68384ba73f7550d9614d99
- MD5 6cf31f5ac3af68e878bf565c9ed6404c
- SHA1 afaa8bf2c9326ebe8658566fe6296a075d49e23c
- SHA512 0fff9572888be7dfcb792c53b006a6f4b8328d6522b971f5cb8fe9b0ce17ba9f82b6ae0a78d56cf585121a9a62772e70b03227074bb4683a52617f46c52202d2
- SSDEEP 96:AqiyuRkcbZjRZ7AiQnRztu6W6cEY4Ef+YepYk6JY3g6RtqYnFNYlyecYqzGRpYSY:AJye3VNZ7/QRvcKEe9fg6zSyz2585
- TLSH
  T167F142FFB34D726A18434381AF3EEE863A3EC438E87356B5B45C5128458C92533A799D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
- Size 1KB
- SHA256 660f088e8da6e3c7c16ff4df184a92fe96c2b2ffb8c3b3411f30b68d93723dba
- MD5 c41248fefc16d5e096019eace4e8ec90
- SHA1 e22931bf5fefeb7a5fc4ce7770283328e588241a
- SHA512 98f6a1367b4be1da50d1a257e726b9c1a66ae22cb8e2d1439b1dd0b4ba4d5a7e22340b165b489911d0a8603fb5c827c7ae43d89daf10dde34352a21304265a4d
- TLSH
  T11621F0ABF3CE7456234701C69F3BC9492B3DDC7083220610B15C99A088B4699A6439DF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
- Size 6KB
- SHA256 60a9fa2721d16f3162f5701b7ada27de313794b97047cc7bba25f82859e4c75e
- MD5 1b0977e0af22c275e5f7df15de461932
- SHA1 2fe9b8a3910fbf4187247dea7402baa402764210
- SHA512 8aceee740df28fdd7e28abb3b42617eca70b33756f5b414366019fead5f94f716f3fde34e3600642a6c12b7ae5904b1700332a1a3a5c20c3f5f4d609652384b6
- SSDEEP 192:AJDF/h+8NpUG1mQqJfL/3x78ONlzN1eFqT:MFJ+EpB1ifL/JNoFy
- TLSH
  T19ED164B6F6EE26F1187A024AAE3B894036D9B3BC94EC7068B7DC541D53CDD2C131607A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
- Size 12KB
- SHA256 251d21959744760aa1e79274b7a9fad433fd42b2d3fb4783f56f0b070d06cf8e
- MD5 b965d0ffcb61fec7f70f4f28a44e9982
- SHA1 2a4c47087318178698368ff06fef670155bdfc53
- SHA512 9da1ea797cbaba01c92dc7a68a586ceed6048565de1b8e40074a76666a8ac1df910a91c547abd5a2f8882686ed5d2cf1079cb47d626eaaf478da74b037d06af6
- SSDEEP 384:XQazTbBakPYkrvL9Li9ZV7+RSC1LQS7FihmJVPMp1TQElbvvQeTRmvhQ:XQazTbBakPhrvL9Li9ZViRp1LQS7Fihx
- TLSH
  T14D5265F7F34C364A1853C382AF3EEF41782EC93DD9339178B64CAA096148915276799E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/functions-pd.js
- Size 103KB
- SHA256 4eee4425a844af77022f85a101a0e914e9fb90168a80941edbe40e89b6cb4de6
- MD5 2f9f9c09bca02406849610469086c5de
- SHA1 949815d79c490211635f7950e6ab4abf6d648d56
- SHA512 2b164698305f145e755c7bb2b87fbfd281f101d45fee04c6a171c1aabe109cd524363e103dd2ba4bb969f8fd4b95aef1b6fe8d1ecc39945742d01d3f81addc89
- SSDEEP 1536:2hZZVK3YTDXqb675vg/+hFyFMlpK/+6fToLULMunS0:Ed4675vZFyFMlpK/+6fToLULx
- TLSH
  T1F4A3A44DF956392265E32A26B87E4214FB3B456F6021E8527CBC864CCF3693CD292F4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/functions.js
- Size 10KB
- SHA256 269c81ad08e8302bbd3bfc1463e2a4d5c263a20894536a913501bb36df26a196
- MD5 3f841145388311a85d830c615614eab3
- SHA1 61af50d8d6f9728507bca4c3e13e14f5f64f108d
- SHA512 22be56298a92a4cbdd01ae7ce4c9dfb5a276fc287e22e4720e4e2adb5af7d2dc30127154f5eb4f50d0826ee4094a9e093e64cbe21b9956dcce0421ac19423647
- SSDEEP 192:AJ3deBFp8Nweb2RvsYTvOZOEGOzeHUuQvZ3Okp5TrrEFfgRVpauiOQGIPLO08:IdeBFp8yebgvsYTGAEJzeHUuQvZ+kp5L
- TLSH
  T19E22DFDBB34F651754D79B27B13EC2D51A7EC0B8E43195B8BC9C99400A8847C13BBB8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/globals.js
- Size 757B
- SHA256 f7922ec8a50df2a30bef9cc7e9148934a9edcbaf8874a54b81ddd4569120b836
- MD5 f0fdcfe48038b56231a9b91d4aa95b2d
- SHA1 359ca2ed8a6b084725ead5d94cf3cfd8037b624e
- SHA512 85aaec4b8d0566392f353828d2bea9058f96e2b5d97ebbe13d069505a315fcd552463002c6caadb9f2ddccdfbf176e734017d0d9429eb2daf7f2947255ca9f73
- TLSH
  T10501A20372EEB3DB1A5A13CC7E7FD544224EC2E6C024087E57941F21BA8A4650577EA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/keywords.js
- Size 428B
- SHA256 3f4ae1c666488bb398eae05c6ef9fdcf2e6c126f9b2510e6eee43a8d64d21325
- MD5 5176733f9ca5189ac3e39247a7121f9a
- SHA1 708db91150b2b968b9f70995c65d02405a5a036a
- SHA512 f2d14011392f752291b8d489120389b5ca12c553b18459945c5147f1a94f5f58882e1b4f79f030c05d8bb4cb189d38b113152ed8bce4df3e430c09a7382ed206
- TLSH
  T185E09A8B7BFF95DB0A0552847F3EE080204DD823C14E0A3AA3248E78408787915B9A2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js
- Size 1KB
- SHA256 611aeca1bdc19d0cd5fd440ebf5b07a9894ff44230e7f8cf8db832b895a6d834
- MD5 f4c544ffa5cdbf5b0b978a5977c35cfd
- SHA1 0e27a3d67232c4e2ef836a4260acc434e77a8b47
- SHA512 a84aa78fa060f23a3f0ed8f12ab7585f45c0624aa3e684d7ca7f84785154f0c0b50527d5c389995c4131c994b67041089cd8a98609695b685a18f84f3efce022
- TLSH
  T185319DD7F38D619F4DAA4382733DDB406B1DD078D17260FDF5DDAE2461DC4580A62628
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/crypt.js
- Size 8KB
- SHA256 9e289fc56914e2cab79b923edaa9d3f9abd135cd8b4d1bb32a6878e0d295c935
- MD5 80370af2d7ff2f325213f40be0b00f2f
- SHA1 38b9680d72f25329e8813afcc65edbb61fa6f512
- SHA512 8b8045c49c32f9e2cccf190d616f8d5f690ce1387491ccef3c17d24db5cb4b61c7bbc442f7eec7d395bd4d7da955ebc86df8b2d9290bb6f9c71e29b6be5bc1f6
- SSDEEP 96:AqiVbUkqOhCp6WOh91UfNcyYy/qA6ejR6UeuCaYynvtN:AJ26Gt6TAXz68zCa1N
- TLSH
  T1DF0233287C2768441BD32A66B9FEC354E15E715E9120A491FC6C8F8DCB2BD3CF261B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js
- Size 14KB
- SHA256 0b72bddfcd8d71e24111eb5df497ec68100ab0a28b3ccec8cde67403c6d4c078
- MD5 4326459193d97cf3106f4eb72e2a984f
- SHA1 d5758ad99b7546e2c05b13263f88b376b8435505
- SHA512 d4de215ecc74aaadda80c008970ced041d33b55e9563b3fb7a120a0407b3121ce4591f65f39ec685ef410b3e685d33c98cc3d099fbc949e24d59d9e8139d3c33
- SSDEEP 384:I5O9uK6WqJeA8bK4EJz+MJZe8DOThtTd5uGJtpbuD8rd4u1GYS+i5tCyVG:I5O9uK6WqJeA8bKHJz+MJQ8DQhtTd5uM
- TLSH
  T1EB62534FF24E3122A1871525F5BF91996A3FD0A8A031E0A7B46C8A80CB75D3DC2B7D5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/math.js
- Size 12KB
- SHA256 619973aa7da2c2bc8a34b121245bf083c3e90b1b9cca9d8961dd2d07885f7588
- MD5 c9be95e59dd86ab7706a36b86cb09508
- SHA1 f9434690df19efe3aa07702348641c95995094bf
- SHA512 be1f9f05fcf9b3ed991bea1883809f92b1431c2346ca43834f47e5ab8fcee7ce83785edca6db51699864ed4d3d3016e552d232d75a4dab43d2e8a274700599f8
- SSDEEP 384:S4ZscscHaA5rF6i9fx6EAu4usvo0z2/OtnJiUhSkNmajHxtk:S4Zsc7HaA5rFZfx6E74usvos2/OtnJix
- TLSH
  T1E952BBFBF38D3566244383C1977DCE452A6EEA38D873426AFA5C5A100789C54335789F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/os.js
- Size 4KB
- SHA256 c9b0b73fe91e8e8c56b9c88b8222324c6ff772d0dde1b36a7b6e750457957dce
- MD5 8c94fd903f0902623a8ea2c86a2e226f
- SHA1 c5eaf46e5556c6d5dba76a76d09b1738e4144dd1
- SHA512 90dea5f933a3d9200b6abbe72aebe538f5b2b1ebb1fbeb7b31774163cd58e71d281f253cdcbc881b1872c45a8a40e3529a90c1339af16752c8bbd5bda9885963
- SSDEEP 96:AqiRksML/UACf3JUgLjuSiUB6N/UTIOlZ4W:AJRksMLcRfZUMKc2clN
- TLSH
  T114814CADE5911C1302B2536DBA3DA386F938822B714E5C03787D678C2F35836521AF7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/oth.js
- Size 3KB
- SHA256 591623b820322f0796422da44be24b18e84dd3839d653d2e38418fe52efa706a
- MD5 5821703e493481c700e42b5dd0072441
- SHA1 96c3bc050e757bdd7b433b25fd863e1034a34fee
- SHA512 a879f5106e0d74b9770c540acbb6e3a40abcea04e1605c54e882355a4903b32241c50c4535e1e25b7fbf0fd264625e857af85475652c1c73ce9e14e6ca411d0a
- TLSH
  T17A61EF4E79EEB0A152E33F26B92F4204BB3B5526502198527CBCC2B59F7552C8293E4D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/raknet.js
- Size 2KB
- SHA256 d6992380bacf84cfe0640262e04b5209e3c1dab745023d77edb836d2dc73346e
- MD5 37c82867ab8149dfd18960bf556ba1ce
- SHA1 4b95145048c72b7b95f2a3444ac4fb292f112f66
- SHA512 47f4adc56cce8a223cdf108a104a504784e111067d5e20f688054e6127128bd28a92c8daf99654e918c3e4b2b2a7e32a12ba8db8a61d0e70183be2c4b0379711
- TLSH
  T14151139DFE403B366AB0361A967F921C74BF2C03A4646093B47CC6D5EF26528D250F5D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/regex.js
- Size 1KB
- SHA256 6633c331759b3a6f9b0ff27911ea123f0aa2c0d0fdd37b566678ef1820d55211
- MD5 96fb62bb30cc558075da9d0a0652a433
- SHA1 acdaaaceffe1bf989a28fc6d3ba11297aa2ce710
- SHA512 6f7c513fff797d20a17767c48312d36a1d6a432c593948be2b3b21ec9d32b73240e9520f2216a3d704c397da5a65a0cdf3c9bb1d0b317b8d8e2c709fae81ebf2
- TLSH
  T1C63103797843349A3F120929BDBE0221EB07096550881953FE7C0E9DFB7C67CA0B4E50
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/table.js
- Size 5KB
- SHA256 a0667c2236748bb1fe38a9e874332bd573b54fd6f9dfed46d7f6e0296141b056
- MD5 0efc2ec2b5741c67d8586a0de839fd09
- SHA1 fcbc6cecff7dcf017a09ffcad3614999c2f41c5a
- SHA512 57c6420f5d23c67ab5901dc7aece9118105481ebfdc2c290e4565f38efc0760091ab8d6b38c8034237ece76300e5111757135392ddd5dd4791b2bb5ecfaa21be
- SSDEEP 96:AqiuKPqgYHgbCMEYlrBaoY1yiwYXhN8hYFsx2YTVTY7A9Yl/ay/YC4EYmmWdrGni:AJ3ZCEBNYhyxxTVgA4rP4PgrGZNpo
- TLSH
  T19BB1C7EFF38E325719CB81E3663EDE456B6ECA34D5328671B85D865404C882C17AFC28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/libraries/task.js
- Size 2KB
- SHA256 6cb2b2065771052a1941a6a9b35c6843ceb969ea9fd3c2c2cfc09576401fb26f
- MD5 696544804ea70a71b45fb91fa15ad95d
- SHA1 e2932e6baaae05689cf3ef4275388c88c2d490af
- SHA512 2b36bf7e4f8448c2a84f0ff13e7b5c3b0b8f9160232ac126ec2f693ca23ab09eccc82da1691ac035e19adbda521bd2c4c54bf2edfde18c79a4fc7798f463c23c
- TLSH
  T10E510DF7B30D3523164396C56B7EE6895B3FC538D832629DF10CA6210668C283397C9E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  bin/monaco/vs/basic-languages/lua/autocompletes/modules-table.js
- Size 5KB
- SHA256 0ac3dcbaef38a2e3fc08e9358ec14602b4147188b11a08099461ea37fa410d4f
- MD5 570a07b4dceb824d0131d3d19e6a774b
- SHA1 cd89cc1f960908c88a1673ac144bae617d344e5e
- SHA512 5a0d58dc721142dd4c6fa703eacfbb2eda13951f1b8d501f7b17612048d65b215b4a10c34943b9e35151af1a6c0784580ffdfd09ad7cd9e60b4c823c143dd718
- SSDEEP 96:AqicKuBgvhPFfMUvNCiQIvthbwvKs38Jv7tQuveCbvmxFvf05FHvRtUvADtdrGvE:AJUwfSitDsszQnCyxezJtbfrGp6sg
- TLSH
  T12FC1D9EFF38E325719CBC1A36A3EDE056B6EC634D5328671B85D965404C882C17AFC28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32