5f1fcd4885b038effa59c31281044382039d216285c1fe8b5b6abd27de6d8121

Sharing

Copy URL Twitter E-mail

General

Target
19.rar
Size 227.4MB
Sample260710-vhw48sc15q
SHA256 5f1fcd4885b038effa59c31281044382039d216285c1fe8b5b6abd27de6d8121
MD5 ca690e2f86ae1212116dbbf78f30d7e7
SHA1 4936bf62d46033de59efe8f8454e341da533b07e
SHA512 4c3adea231e45d030876ca86f42b61a8c5b63e6116696a9c9dc5e52769a691e5d76f3aaf4193e64f954706c7aa57d0703e9c9726c5a957c17f602af40b7cbe6d
SSDEEP 6291456:u2wnATnZKTQZ8z8nZKTQHmzr2dRKFgJR7PNM8dv+sU6:urMZI68OZI8mX2dRMQNH+j6
TLSH
T176B82349EC57D05ADB2B1F3DD04E5746F9B8952AA03C42A1864CECE4189BB7CEEC603D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution

Malware Config

Targets

- Target
  citizen/clr2/lib/mono/4.5/CitizenFX.Core.Client.dll
- Size 11KB
- SHA256 96e9d13e2aaf28bc6c3892202cd270b0e391690e31e6bdf79af7204bcfaaf08c
- MD5 9aba0ddb83cf61aa24bc57fd33206bd4
- SHA1 6c5b0aff9b031ee526c7c179a57a14eca0653ae7
- SHA512 c453f1bfe2aad8e317b39294318378a01766c4558a7e2206c08d0bcb58e5fe6e6da19308670ab2c32a531a04ddb414ee151c2d2deed5c2e0195718cb33338d53
- SSDEEP 192:mDt9pRC2NUekAH5+JX90jjbFYzdKMLBrSoPI9GzZsWu:mDPC2mJGjpYBKMLBrSxp
- TLSH
  T13C323E9A1656CDE6ECAE43315F9B77024BF0ED1397F6C7AA284A04CB48279700D64F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1
- Target
  citizen/clr2/lib/mono/4.5/CitizenFX.Core.dll
- Size 3.4MB
- SHA256 b9d6269f6adfc59e8f3535f2eac7e2bc0345929e1673c70028c7df33a4fa341a
- MD5 ffe4991882876e61dd221c9ccef883e5
- SHA1 63c642a86f9e654804244daad6c32cccac406f89
- SHA512 b23fe150e09a165d72b56f7e22703015fa2c048e62717a736c61edbe31d09426e722aa52799841e797a4f338c96134f68580f6f9917be3e0e318701ac9c72805
- SSDEEP 24576:pF9DTLRBCNfJ4xZpQqvLUJCLJwPWYV+oxCdfFsOO0zGMur1PiK7otpALF5blv1X9:44xuPBcdfbel7AA55blvu4OROaZTxQ
- TLSH
  T196F5E6364ED64A31C9C62338E2FE12775A6294C6DB6FC1AE3C47523E1E570142C2A7BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  citizen/clr2/lib/mono/4.5/Microsoft.CSharp.dll
- Size 30KB
- SHA256 34a1f5da8ff908923fc3c8f4b793ef527dea4a9f5a080aa53582ac43a1526909
- MD5 8b433f5612cb810fc80749cff0300e61
- SHA1 ab8d93e5ffd8e853ac1d6693253acc40f009863f
- SHA512 3935791761478746d6e2a7a72ba30a31360e68e1cba0785c8367529ffbe9c4ec1ff852e780fbd09e64eec02f5dbd11d071fb1fab3544e0ff809c525834a375c9
- SSDEEP 384:cFU7RH8ILVrA+4DsmnMjZSUW+uTe9eLcCyD9tKkaRbli3ESmMadMyqTU1QL2z:CuJA+dKMjIUWpZCGq8z
- TLSH
  T152D2E81883E85376E3BF47B6A8F3554246B2F903FE25D78C2DC992AA0853744066772F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  citizen/clr2/lib/mono/4.5/Mono.CSharp.dll
- Size 1.3MB
- SHA256 f83ee33869c3f8d0cbd47346a0d389e8b24a2b7e8fc4616f15500c39fe7b7e89
- MD5 db85f9c20b579255f22afb84a52e8c38
- SHA1 2b0ee61c43d2e8e7784be4fceebe27c660edbbd6
- SHA512 fbc49f7b105e48dbc68a4a360be7e6d0b7b9360bcd54ea41ad3f22b3e8ccce53602e2c8fd4dd6326b65d2d9411678d0a190056f4100b68866e8afdb773498ab8
- SSDEEP 12288:kYktwHn4dNAA5MecpJx7DppN66DQb8OQIwDparm4SOSVfYmmxHz6L3Ub:kYe0nhA5MjHD0MZwijOSimmxHeL3Ub
- TLSH
  T1F055190157F88517E1BE2BF5A4B505188BF8BC56FABAE74E1A2171E91873B00ED4133B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  citizen/scripting/lua/MessagePack.lua
- Size 23KB
- SHA256 982bc0a1fae3a742f4734d46b1b3a7ed5dccfe74c8d200a598e86f3bfb53db83
- MD5 e29cc030bab9bee473d52459e4149ac9
- SHA1 9f846cfaf45a286407e3a646dcb797bce3521b7d
- SHA512 9138cb3d2491a7798c41301aa21f16a260095a8676251472ee9e4adc800145df7c8a27035173bee80b0c1bae69dbfc86c44526693a3658cd8288348eaabb03c8
- SSDEEP 192:xSDWCKqfMFv3dNgvwJ0o0rzvwJ09nqeQ0DptlJBsWK407/sikdyN0vkzRNpiJIJP:cCBEMPqHfnf7ylHQtbUFp
- TLSH
  T16CB2FE36BA8111B424F3E1AE8C9F2C0DE22912276554056D396F95F1EF712ACC2F8B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  citizen/scripting/lua/deferred.lua
- Size 5KB
- SHA256 79dda226693419dd4fa97e0892bcb055f3a1c9d2d18061289129ff99a5d4ae61
- MD5 6602d4db454966432cefa1a8341642fb
- SHA1 46a9671da3f2960ec8b0a1362f7da4f2230706b8
- SHA512 4dea4b02c5a377651b69aebc47d1014d37fbc4537d3322a961cac0637e5e827ba53ac4a792a6062165be6b8b92779355100216a2f48ad9d7b01dc63d626de61f
- SSDEEP 96:bszgoK22qJrb0c7/z7ipQCksEnTOEnxIgySuN/+F/4e/VhNRs4W/3nvnv2UB+p21:HoKpqJ33z7iF8O/BgAnS9jhjGYBGfhTp
- TLSH
  T1B2C148963A03B1A4ADB7F5B6E87B551EF12205031238059271AC45C06F72D6CF2FAFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  citizen/scripting/lua/graph.lua
- Size 41KB
- SHA256 3914a80a6d4ce428cc4f6405868dc04b7e2318161bc04a82df36d90218e0e12d
- MD5 4def55b050f24e13c0e55442718b1e0d
- SHA1 bfac16b2ff31809d143cb09b9870aff576b0217c
- SHA512 a689d751218c407fbeaa0a630e8bec863ee325c77be58fd1e7b73ffd65777a73c67c89fc3d3536aadc1b024323b92ac170a25ba49ba7d5e687ce61fda7ecddbe
- SSDEEP 768:e3rOtOJuVOQuVKtBtolTY8K5Gn7cYPacFswxEu6eOF+RM30K6qOpPVBSk:e3rO+uVOQuVKtQvJwk
- TLSH
  T1AC1374251D2A1261F8B3E756FD8B6849F7206103112D14A4B6FD82DA1F34ACD90FEFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  citizen/scripting/lua/json.lua
- Size 22KB
- SHA256 ba6d4f165cf43e56c6105a95bd01a46a1fd45b34162f337e9f62c45468188c79
- MD5 b0efa78f2e2bcccef8b7cd74e6262614
- SHA1 aa23918b65a1fbe4e00c5a947fe870ad0a109334
- SHA512 11b34077483b628c00a22e8fa1525121e763bb4e7edadd7e3c8d1b35d401f63cb68d7e8795fb8288963abbab15edac3b253dd074ed43209ff0ef612d1bd6d0ca
- SSDEEP 384:gKsqd+VPSYgv+d1JCB6Dn3MmVRnk8/27mF5Ju7DljCtKQoLYTNV5gxL3EvY4yIsu:gPq+VPSYgvw1J+6n3MmVRnk8/27g5E7I
- TLSH
  T1E3A2420B799352B4A9F3A6A6E82B0811F7751013113D14D974AE84D03FB066DEAFBE7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  citizen/scripting/lua/natives_0193D0AF.lua
- Size 1.7MB
- SHA256 81d57b49efcdab27d686b35f5449d422895c45753972f13ba8ca21d0eaf40a04
- MD5 c120c523eb76de59857d817e0c3d6e86
- SHA1 672cd9c8bf52206268074e0af1a183e95d489f2d
- SHA512 175ba6b0b27fe35cdbf01c18c909fec13c9feb553123ebc120624d38ba43db40afe0167ed251ad70335e486e45df0cefa45b1168c8f25efe6eccaf172b88f6e1
- SSDEEP 49152:kNbJHr8QK900njZzCpYucuaeHB6SW9hcm6+:OVZc0+
- TLSH
  T11385E7DA741ED2599643632B501F4A4BF269C099112D42F0F181B4DF2432FBA5BFF8BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  citizen/scripting/lua/natives_21E43A33.lua
- Size 1.7MB
- SHA256 81d57b49efcdab27d686b35f5449d422895c45753972f13ba8ca21d0eaf40a04
- MD5 c120c523eb76de59857d817e0c3d6e86
- SHA1 672cd9c8bf52206268074e0af1a183e95d489f2d
- SHA512 175ba6b0b27fe35cdbf01c18c909fec13c9feb553123ebc120624d38ba43db40afe0167ed251ad70335e486e45df0cefa45b1168c8f25efe6eccaf172b88f6e1
- SSDEEP 49152:kNbJHr8QK900njZzCpYucuaeHB6SW9hcm6+:OVZc0+
- TLSH
  T11385E7DA741ED2599643632B501F4A4BF269C099112D42F0F181B4DF2432FBA5BFF8BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  citizen/scripting/lua/natives_blank.lua
- Size 86KB
- SHA256 1c501d4be9aeb1792d9d84db76c062c6976dc0fa8d00c5d2d9941bc209059f35
- MD5 aa9ef3374c97e90a4e8a505d4e50c5b1
- SHA1 d3e291c66e0f8386f48db0d1b885ad9925b3ef80
- SHA512 898328c5a2731fc62c67bcb3702a9c3270b293f3ae4749cdfa9c037b14a44e672b5952a2098c3afb82161338dd4013790f95c9ba88e13f6e36ec94381dccc90b
- SSDEEP 1536:gCYS8I8K/itREO39jy+6svQWX+2juN6JsQ0vV2LSpNxeNvj:u/FSMrvQWXGvehj
- TLSH
  T18C9302DD786E91A9DB837722401F4D1AF0549667017DA2D0F1839CCA3632F7A4AF28F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  citizen/scripting/lua/natives_loader.lua
- Size 2KB
- SHA256 9f8332212b37d2a064d95f55d7c4ae9069fc8f133a29aea9b3a37d3f84ae2cbe
- MD5 2665ccffb620ddc87d6d4ff0e29d96b2
- SHA1 81da56e78b8684f183b851e330e099703ce5ca8e
- SHA512 7e12767b8f2658cf6d1ff21681c4ed55d9af1456f7a6823798a8fbc8d4256dd3c5bb5c45c88c3abeae57cb70a53327a8f04e4b7779995b6ec9b31393a2171481
- TLSH
  T1EB4111063683A1A51871F096C83D41AAE77CE7A3022D0082BEBD0465BF3253DCBF576B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  citizen/scripting/lua/natives_server.lua
- Size 112KB
- SHA256 a782ddd1e6856fd8d0f9d1dc545fbb8ce498e1bc8f72659e5ecc1450c4faf4de
- MD5 bbe3787d152962c081165b496cb542b8
- SHA1 62aaa071287ac89af3ac51cb4d77ae8c86cc9cdf
- SHA512 e81c18a5d353f0802bdddb0e16f5d6f8b2428e58d647cf21b57042bc8952a5406e744406718615ee28b335de4a0bc8586cd450736756e42e18bf402d36db384a
- SSDEEP 1536:VBYnGkMP4/cyO5vAiLtHxOZxuUNhGGz1SrzFHdNFsk92U6VNqSR7VZqT/qffWB5G:nHBtcd7V4/qabEoZ4SpeTPS7y
- TLSH
  T10EB3D7EB7E4DD3251583A222411F6545F668E128332D42A0F188B8DD3429EB6F7FB4F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  citizen/scripting/lua/natives_universal.lua
- Size 1.7MB
- SHA256 81d57b49efcdab27d686b35f5449d422895c45753972f13ba8ca21d0eaf40a04
- MD5 c120c523eb76de59857d817e0c3d6e86
- SHA1 672cd9c8bf52206268074e0af1a183e95d489f2d
- SHA512 175ba6b0b27fe35cdbf01c18c909fec13c9feb553123ebc120624d38ba43db40afe0167ed251ad70335e486e45df0cefa45b1168c8f25efe6eccaf172b88f6e1
- SSDEEP 49152:kNbJHr8QK900njZzCpYucuaeHB6SW9hcm6+:OVZc0+
- TLSH
  T11385E7DA741ED2599643632B501F4A4BF269C099112D42F0F181B4DF2432FBA5BFF8BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  citizen/scripting/lua/ny_universal.lua
- Size 393KB
- SHA256 cccf0cc38aa37eba35e6a44d9c2a68ec37f206b5bba4de609d7527540a711ba3
- MD5 fc6406edefd6c341fc8878489dd544ad
- SHA1 9cc7dcb84dbd90046ad27d7d3c28665a22145d74
- SHA512 5a4c40e3cdf292dbbe5dc8e5cac76d9bed0839ca5532d2d4b59cc92d3838520a2d2860d62887df52e7bef79187060c8fa79a4ead18d629fa4d69e839decd9d20
- SSDEEP 6144:ZJHZkG+jnVAw1JnQ0zkc0rlU7GNDCs5ytXZ2qSp6ke/tk9JsLj/w/epKawhV24aD:oy4Z2Ske/tk9OKawhV24aD
- TLSH
  T1368425EAB05F918E66C3B626901F5D0AF5A89454117D43E0E2409CDF3432FB68EF687E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  citizen/scripting/lua/rdr3_universal.lua
- Size 1.2MB
- SHA256 7c662773f1be5e33126f92920255eea1d7b854d34df6c49566723f35fd3826c5
- MD5 aa4e5ae22b8cf3545998a9d5b1481b2d
- SHA1 cbea71e4a3d70903466503e47397573fcfe762da
- SHA512 5e0c0cdabe4b558626d1a5916fd0c6d08ad4801e8309bd70a052d00a87c261e98e5e43c64dc51d5967668f2509abaac8094e210d0ba55860628c5d939b4a223d
- SSDEEP 24576:XWJH279j5RiihmY17ps1YoAVXxKrpo5xz:XWJH279MY17ps1YoAVXxKrpo5xz
- TLSH
  T14E550FFB7C1DC951E64AF72E001F6D05E05046B6706E22CAA082BCCA1E39DB5E5F78B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  citizen/scripting/lua/scheduler.lua
- Size 25KB
- SHA256 30e0317ffb4b1bbe9e450f94583b3a7337e40ac01b77212ad803c84686cfa22a
- MD5 384c499a6d5e1c23fc6e7c64a44ea2e9
- SHA1 4aaeff90eab56859875e0f43347a0f26a5ac8f32
- SHA512 267596c8e5ef67de873b2f5580b7686021180373de9ba1166d4e62cc54a27c9df93dd1589e5d2b00c206eae3b1a78d0f7dfdff5e227f70e74f5942a9ac65b712
- SSDEEP 768:IJqoFnzU0QEShajl3VJoPvJyzbmUYyoT/jqrNtgHLoSR60X3rVI7LWF:GlxwjqRM3rVn
- TLSH
  T10FC2A66FF24F51528EA171B6D63F5646A83EE6B3183D0245F4C08BA5642069CC2EBDFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  citizen/scripting/resource_init.lua
- Size 900B
- SHA256 af4e2b9133fe8e7491a3e9f729d370f348a63a721504cec7975a495136cbd1ab
- MD5 c73cf6a0b205f1f0577388630f2c32f7
- SHA1 460384d6cb91856bd35b404a0bd573ae66ec7c08
- SHA512 76c0e2428617c1f92bc01a0e19ce34464d4b36b166ea65d2e4bb89dac89f4a1a2d861f8e2aec28ca75800fed2e66f63b4dd5cd23c6c0ded3158f26e18822f180
- TLSH
  T18F11A651370E2091AEF3C026C8AFD02DDB5AC42732649050F9E049923F7C6AF8281E9D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  citizen/scripting/v8/console.js
- Size 10KB
- SHA256 4b23830b9fb3ca1cfacfbaf99db4656256efc077c0794662c8a7a79779c0aa59
- MD5 b462e16119895d06546909b14cc1c295
- SHA1 7e479be3624eda71cc11b86b9bb60eac35e4a424
- SHA512 83dd287f7d86a45932cc166c1fcee224bd07e595f562ad21866e40bbafc38c753cf211063ddec7ad21cb93f2958d24875b1fc1e7f05ef83624de25d916c7d2c0
- SSDEEP 192:3zI9hK8zEO83NAubhYUImjFAlCEYRDjEMk/:3sdc35hkmjFAl1T
- TLSH
  T18232EE495FAB1414C0B373ADAE139009EF7A5637100A679AB9AC81E42F71C10C6A6FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  citizen/scripting/v8/eventemitter2.js
- Size 22KB
- SHA256 43d978620a09e0cd591703ae557d300bff4d2a96fb24acc5ea97faf010be58f6
- MD5 92e1bfe9fb85ed9a1901b0bd53552c12
- SHA1 7c78ab97449158fddd72743aa86337cf62e4adc5
- SHA512 3819e98ab0f4c5d13f44da3d7b54f377b8aaf20ba1a5236f4b3389acd9bb05e0de5ccb9efdd0b2c39723fdefb8ed108458f1385d57d10f6fe05a35eb22da1310
- SSDEEP 384:JERHH0BYR3tWw15f6eLOljg5LrmRumQeRRv/wRG/Hd:ytR3F5SAOK5LrmYmQeRRv/wRGl
- TLSH
  T19AA21D8C5A0E557682B2B77FAF6B924AF7308227000146903E8C97F41F75C5882E2FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  citizen/scripting/v8/index.d.ts
- Size 5KB
- SHA256 b4dfaa326d2c8565175459973cfb4ffc8ddc7bb9ac6d86bb6f91ab0baaa2e842
- MD5 12f783676eed99a71c2d1d265e00c77b
- SHA1 bb52da68521e77375ea189a7856eb3a714449890
- SHA512 faf21617be69cc51159f23e8f22d9e4f2ba620b601292848c32cb083d9f0f68e207fc42b276d502293f50159e4b7c002fc39bc74c5675e6c3d64918c209e5c60
- SSDEEP 96:MBgKgJgAg7gmgVg1gYgeg3gYs2811uUHUg3racAWB9V9doGBZeMcfJz8Y1YVYttZ:0z6X2pwkj9wfsIcAWB9V9ddBIPWgaiKS
- TLSH
  T129C1EF07B7523A768C79923BE54F210ADC657156186900EDFCEE17A20F738EC42939BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  citizen/scripting/v8/main.js
- Size 21KB
- SHA256 b1e34e7a592f6aebe6fd3394559eddbfd6399166a9eca751893e26f611068231
- MD5 3cbcc699392fb4a6d950c6033678f591
- SHA1 cc13e0f9631707e2436e9c6bc6c1a87a9ea10f6a
- SHA512 a947ff5a082e5fc19a94df1f4aafcaf4c9ec28c52304e7e74c3a8948e7ebdbe6e21d8a95ff08995cd424f273335bfe9cf52819cc3fec060c89e4592019d3ef70
- SSDEEP 384:T2ElZCCH8NMLKYC6Ct/tsE9qDTEsX5nuV4rd594Waij4X5i6rXuSAzOPb:T2oCc8qLKYC6Ct1sE9qDTEAnuVSGT
- TLSH
  T138A295C6735F21EE8BE9339D803A704E9C7CD9B3392D82FCF89C665414A6A19C654C8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  citizen/scripting/v8/msgpack.js
- Size 51KB
- SHA256 f523afd1902ad1a6975cc0d52bfc2ccf9a0fa92f6a76300019e10e93a393ddd0
- MD5 ecc937ad04f3d534e14777b90bc00162
- SHA1 a0a224bdd5e6a74ca1516dd62982b931c8b20f2d
- SHA512 ac62e933ed2ad2a778ad5a8fee85495fafaad5e41cf3c02be98de2e2a3dd15240319b11d89e9ac76717db71210efd447247b533ec14ad26a0ba264f95490b232
- SSDEEP 768:UyToecRKwKR7ChQ15Qc4VP/613CiqYGUrsVDP73urz/E2hA+2UxwfkK9Kz1dbAKo:Us1bCDcx358rurE+cz
- TLSH
  T15033C6C4BE95B0199766716540EF194FE13DE928A48D0884F229E8F13CB88EDC677E7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  citizen/scripting/v8/natives_0193D0AF.js
- Size 1.8MB
- SHA256 545926cbf1c3512f17f8a5b4f7909a65ba917b65e822f6ef882517023d9d4c68
- MD5 d424d295edae1b1f473fa87854f501e0
- SHA1 fb7e46d81382cdecd9205e466f12250fb8828a54
- SHA512 5a737399d1ee7d58b20a55d5f9f963b903f348942e561a6be6e68a384c7c6f277fb932666e574dc774a22115f7c176cb828df2fff58803a5880b9c3f483e150d
- SSDEEP 24576:mIMHgWUo7x1OB2xVTuL39gvoiMVAqlEeNyRBW8PLqd:mIMHhUY1OB2LTG9QkAjeNyRBW8PLqd
- TLSH
  T19E95C6E93481A12AE563723DD12B5D0AF3B4E422488D21E8BCDD64981C34FBD46FED6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  citizen/scripting/v8/natives_21E43A33.js
- Size 1.8MB
- SHA256 545926cbf1c3512f17f8a5b4f7909a65ba917b65e822f6ef882517023d9d4c68
- MD5 d424d295edae1b1f473fa87854f501e0
- SHA1 fb7e46d81382cdecd9205e466f12250fb8828a54
- SHA512 5a737399d1ee7d58b20a55d5f9f963b903f348942e561a6be6e68a384c7c6f277fb932666e574dc774a22115f7c176cb828df2fff58803a5880b9c3f483e150d
- SSDEEP 24576:mIMHgWUo7x1OB2xVTuL39gvoiMVAqlEeNyRBW8PLqd:mIMHhUY1OB2LTG9QkAjeNyRBW8PLqd
- TLSH
  T19E95C6E93481A12AE563723DD12B5D0AF3B4E422488D21E8BCDD64981C34FBD46FED6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  citizen/scripting/v8/natives_blank.js
- Size 92KB
- SHA256 e11a930ca98e1a808367e4a3f6cdeedb1f582bca836077621bfac3a257290779
- MD5 3ffc871ca3d861107af3306a00fc7e6e
- SHA1 c4ee8d8e71cebc663b02aecb60da6f017211a11f
- SHA512 23bd28e43afecd469f90fbaf1a085ef907dbbf0176cff2b96c9d2cf102ab3b158a7233d096090ec23d731ae8d4bc247df8d41a6ae83bf0f01edee241e7a601e6
- SSDEEP 1536:nC86tNYUVIpU3DbYYQ2mX31lWk5/Eb7YD6wX:6+0IYQ2mXnYK
- TLSH
  T18F939BE834F25225EA13B3A1825F2F09F2649421404AB5D4F4D2D6CDBE3A17793FAC9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  citizen/scripting/v8/natives_blob.bin
- Size 2KB
- SHA256 1bd1a8996b1dadffef79c298c17f709838bd678a0933a0d56dc8be8f60db00ec
- MD5 2ffe40c89e31363d5d894fd5429daa0a
- SHA1 a2439c1cc402126094111410c6b7439ec8c5c412
- SHA512 f691498938715df2ce7bcc0a42aa864d632c6d30b323e4e7b16d87fbfb3e3bdb33738adfd04fc17cda6898fc3a6fd92db70f6dbd16d59ce3caf8eb7ce8d5ab8c
- TLSH
  T14D51DE6BB8E7E47F949138FD704F1D4BE93984E0387DADEA950E9480193701C9239E1D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  citizen/scripting/v8/natives_server.d.ts
- Size 106KB
- SHA256 3236bd6bd5668bfab4bdf73ae88080298762329bd5c09649d70e084d9fdc53ed
- MD5 7ce3156006c15dfe77ee6b4f092ccb80
- SHA1 dfa5d3d780d9cc7019f0553bc85c731d0b0ee391
- SHA512 f9b5823039b8e050576a2584e1df28b6630fbe07b4177b27e72d568bf640f2c2e7446af53b99740bc541426bfe2af768d6c51ade4a40960c224454cc65b173de
- SSDEEP 1536:AXwwzlhfffPi+IkK1pRnx+5xxEMhiGlS2ftfHLnREeoOUA888tF6GSIQx3pJ85/V:06/RsIt3SIz32ruePEWzSsy
- TLSH
  T186B3B7ABBE88333259B65222E0AE5088E6746314791131DDFCF869581F0F73E56A7CDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  citizen/scripting/v8/natives_server.js
- Size 121KB
- SHA256 8d8b8dbbbe85a618a1cb888d96c73aa6842a595ff6edae8ec8f00456ab00e4f0
- MD5 db32040fa6ee209fb250c5b259ee4bae
- SHA1 74680dd524b52bf3cff239b9afaab87d2696af5d
- SHA512 89d5dee456967a0f067f7be5d6213bd4cd2abb3e6f63a4a7bd5dd56c5232a53bf35f04e4681a51230da1ffc12e7991d37210296dad208848be5e2a88e4c23884
- SSDEEP 1536:gt94O06fjPh+euUpqCRnxa5xREhhiGFp2iHXfbPREkhwUmZZ+3+bMtBoVZYi3pJf:uHzRcPbMMVZeaQxu0T3hxBT3g
- TLSH
  T169C3A3F62DC06225D4376225D25F788DF368F23015CE1188F8A8659C2D2DB7E86BBD9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  citizen/scripting/v8/natives_universal.js
- Size 1.8MB
- SHA256 545926cbf1c3512f17f8a5b4f7909a65ba917b65e822f6ef882517023d9d4c68
- MD5 d424d295edae1b1f473fa87854f501e0
- SHA1 fb7e46d81382cdecd9205e466f12250fb8828a54
- SHA512 5a737399d1ee7d58b20a55d5f9f963b903f348942e561a6be6e68a384c7c6f277fb932666e574dc774a22115f7c176cb828df2fff58803a5880b9c3f483e150d
- SSDEEP 24576:mIMHgWUo7x1OB2xVTuL39gvoiMVAqlEeNyRBW8PLqd:mIMHhUY1OB2LTG9QkAjeNyRBW8PLqd
- TLSH
  T19E95C6E93481A12AE563723DD12B5D0AF3B4E422488D21E8BCDD64981C34FBD46FED6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  citizen/scripting/v8/ny_universal.d.ts
- Size 326KB
- SHA256 ff2ab67f400fe8877f298a5d0f0bad00008cd04841f491cb8b1cfbd5a2d7fc26
- MD5 cafee0ce8853fb96bd1a007aceae7b4a
- SHA1 071ceb3c5b7244bd808b32f7c2005b1e312f3b1d
- SHA512 018f70b21008ad9540711c636930f649ba3e024a9607e46fef1054fd94b28865acff04b45ce0ec98a02eeef704561d91e7f7612d6e3f28d0b617196b564d1a92
- SSDEEP 6144:9JeMzbP9bIecfwfa8kzuZT+vtwwxbQHwm8Hw7jZYjvQfgbA:74nQJYjvQaA
- TLSH
  T13264479BFE4A3137EB52A363F0FF2408A9646288E51152EF7872E4854B171BC36D6C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  citizen/scripting/v8/ny_universal.js
- Size 459KB
- SHA256 2755c53b4f6791bc7475049d5ad92ec4b03c5b786fd7b2ff466f38c45afbe1f7
- MD5 1746f77e85987499c5ab15e4fc4270a3
- SHA1 44499b2f30961f8c98426093fd534eb77cd2c44b
- SHA512 b27154a63aa25b0fb32d35dda191b923395ab5c82dd682cd04d0cc3232f35b7c4c63095d96aa505758cb9e53be845b8ef36673f68c4577d4806fa6c5c00578be
- SSDEEP 6144:zEKQxu3vRz2Flzoye1iKhV1s5h3wdHVR8l6Sre1mXFvsmiHpO5z0OMDwT76N68:hvlurpFvsmiDwT76N68
- TLSH
  T1C9A4BCE838D26109DA0B736DE26F7D0EF778F43240CD01A5A85454CC6C76EAD89F9A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32