Overview
overview
5Static
static
5old script...ion.js
windows10-2004-x64
3old script...ion.js
windows11-ltsc_2024-x64
3old script...pt.bat
windows10-2004-x64
3old script...pt.bat
windows11-ltsc_2024-x64
3old scripts/Astral.js
windows10-2004-x64
3old scripts/Astral.js
windows11-ltsc_2024-x64
3old script...s).bat
windows10-2004-x64
3old script...s).bat
windows11-ltsc_2024-x64
3old script...che.js
windows10-2004-x64
3old script...che.js
windows11-ltsc_2024-x64
3old script...ne.bat
windows10-2004-x64
3old script...ne.bat
windows11-ltsc_2024-x64
3old scripts/Bars.vbs
windows10-2004-x64
5old scripts/Bars.vbs
windows11-ltsc_2024-x64
5old script...in.bat
windows10-2004-x64
3old script...in.bat
windows11-ltsc_2024-x64
3old script...oi.bat
windows10-2004-x64
3old script...oi.bat
windows11-ltsc_2024-x64
3old scripts/Beast.js
windows10-2004-x64
3old scripts/Beast.js
windows11-ltsc_2024-x64
3old script...gs.bat
windows10-2004-x64
3old script...gs.bat
windows11-ltsc_2024-x64
3old script...gs.bat
windows10-2004-x64
3old script...gs.bat
windows11-ltsc_2024-x64
3old script...ING.js
windows10-2004-x64
3old script...ING.js
windows11-ltsc_2024-x64
3old scripts/Blood.bat
windows10-2004-x64
3old scripts/Blood.bat
windows11-ltsc_2024-x64
3old script...ff.bat
windows10-2004-x64
3old script...ff.bat
windows11-ltsc_2024-x64
3old script...om.bat
windows10-2004-x64
3old script...om.bat
windows11-ltsc_2024-x64
3General
- Target Rc7 Remake.zip
- Size 16.6MB
- Sample260717-vpcdeab19z
- SHA256 73436e46b4ff73837131d5042969307f3239e79dae5e55056d7ea67c55e00dac
- MD5 75843422385724938e1037ab601bb1bf
- SHA1 e71f3d0bec5d1d8e9345ecb47bff4c5d538589bc
- SHA512 5a95d0ced6cff7ddda227b04ce082c8cdd154d036f2ebc13e02c631a7ca2c9a76b8bcef6ba0472357f5fc3a1acc2373b404736cb369c53745a2ade96a8ec3144
- SSDEEP 393216:nKH6pXV92ZtJ/26xX36GBB1QCpzWUGQfYVYCleOgPLhz5Z:ISXV9I/PxX36GB5piV4OEhr
- TLSH T183073306CD5AE9B3D6076737E0AAC552FAC64581A430FA020BC9E0E55CC37F92F53B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
old scripts/Armored Getobjects Sellion.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
old scripts/Armored Getobjects Sellion.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
old scripts/Assassin Script.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
old scripts/Assassin Script.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
old scripts/Astral.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
old scripts/Astral.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
old scripts/Attack on Titan (Swords).bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
old scripts/Attack on Titan (Swords).bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
old scripts/Avalanche.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
old scripts/Avalanche.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
old scripts/Barrel_War_Machine.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
old scripts/Barrel_War_Machine.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
old scripts/Bars.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
old scripts/Bars.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
old scripts/Basic's admin.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
old scripts/Basic's admin.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
old scripts/Be Dat Boi.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
old scripts/Be Dat Boi.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
old scripts/Beast.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
old scripts/Beast.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
old scripts/Bird Wings.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
old scripts/Bird Wings.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
old scripts/BirdWings.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
old scripts/BirdWings.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
old scripts/Blackjack NIGHTWING.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
old scripts/Blackjack NIGHTWING.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
old scripts/Blood.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
old scripts/Blood.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
old scripts/Blue Lua STaff.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
old scripts/Blue Lua STaff.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
old scripts/Book of Wisdom.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
old scripts/Book of Wisdom.bat
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target old scripts/Armored Getobjects Sellion.txt
- Size 407KB
- SHA256 660a0cfc10cf556faa0203975b10659a3a7e1a5b5f33d55e1854c058cfc42233
- MD5 d2132558ac518e26e780a809e4bd2460
- SHA1 560dd0a849182303fa533e79d3270e37d122156e
- SHA512 8e44edc77cf40f3495b6437f8120fd0d1f9f0d693818a37b16b465e2221645cf9d1d1aabb68d9b4073824509d93586e2c2354f097dd678b3ed6b36b2e57e37e3
- SSDEEP 12288:O7iUJrlg3AxnF7NsJr9eaNYNgmggW85O+bk5ekOw3L/1rRgFju23ttN+bcPuZFRl:PUJrlg3AxnF7NsJr9eaNYNgmggW85O+C
- TLSH T16E94631D268401B559F7D33628A73942ED52A44332364AEDB5DC60CC7F7E50CB2A2FAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Assassin Script.txt
- Size 164KB
- SHA256 81af2d7df4ef04ec02302fff0df74824eca28a22e347845afef733557f30a4b1
- MD5 28172675fd868f7ad6b51d36e5ec8683
- SHA1 6bf24ee1ed9f48de177d65567b459307a421ca03
- SHA512 47e343a10dd891c5ba73d97771f7f1183abeb6424fe97000dcf77d3ecefc2c42a7c1eb2a75a19f66a67481d0142311e698f084572ed7be2aed246784410cacc4
- SSDEEP 3072:m0KMD2F42npMz2FB2nhMD2F42nNxVF1Gac427gFan8r0BDAOzRMUKco9WDRcXRMr:m0KMD2F42npMz2FB2nhMD2F42nNxVF18
- TLSH T1A1F3225C6BC5246888F7EE2F61965C42F0326C10763B14DDB7BDE14C6E65A0AA0FC29F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Astral.txt
- Size 91KB
- SHA256 0a7ff48f749e90903507aa586f9f8e3b2464037f35f9365dfab2a1b67c1902f7
- MD5 583574e23ea35e0f81027702e1c15824
- SHA1 79c78435bf3bfd58146d4273f29da0ef4f66dbd4
- SHA512 f2b94b6ff2bdb3251f259963f7a5deb56a53ad2795e2e2a4ddccfbc0fdb3556657ff740a4af58cf1899d25170255cb72e4195f141b7463f1a85871b0475c0eed
- SSDEEP 768:zYdqL8la2X8feY6FTADb3e2G7bnCZVevCo5gHrqqtF/tNxhK1Mb3D36kxYil:uFlaynCZVevCPHrq8BPK1Mb3D36kxYil
- TLSH T123930F19E38405B6568FE22C12323E025FE9F073377A4DAF748159DCEB4F549B3A894A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Attack on Titan (Swords).txt
- Size 22KB
- SHA256 1b15ffbf07402f1e719165ec99ac9384ae4001e8ca1885bd74f9cdbf6f2b5c7c
- MD5 06a63ffa75b8b4dc9acc2c20bfc01a52
- SHA1 81115f1b628ebbcf8d58940115c2078610ff932d
- SHA512 0cd64c108c090aa1786706a3e1a8d7bbf0f6d89ad5d0d06342f963921d3e2d8b9a7d109369c92ad67f80b26df930f1ce93673e90fe178d33d0bd4ad8c33b2728
- SSDEEP 384:nmKMoeKFGyVZ9A6ANGLU8mUUY7vWCdWWTEiIxOF1FGOyVudCjXZ+PTz4/PqsBpof:mKNNXA6ANGLU1UUqvWJWTEiIsGQdC5BQ
- TLSH T1F9B2A537338256594ABE77D19D8B0808F971E4177A3E9CC5FA2C80A85F21F2F60E9B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Avalanche.txt
- Size 144KB
- SHA256 3f5646d5d0c5c5fc192a74d0a014b7a5f082437c13278c86a01099552fb84dca
- MD5 86c94e7247851d38345bd9dc7ac329f7
- SHA1 0170f0bf77395b65366599513b8e186f6c6ffd45
- SHA512 a9beaafc0138112a2ead9a67f85a87af2dd463c9b0336a3778e3397ecf2f4c53a093c47fd4d250a6fbd807683bf3e7b269187509f46fa36a46e116a921979f91
- SSDEEP 3072:gbxFbbr1RenZGIFZBK99q6WtplN6JkUfcIZV/9Il6IQIuDlE1s:g1Fbbr1RenZGIFZBK99q6WtplN6JkUfX
- TLSH T14CE331C4D7C896F419CBE22C76321D034AF9F8B2522D65CF75949A1CED1CA8C7BAC885
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Barrel_War_Machine.txt
- Size 46KB
- SHA256 314b36337125841a914b0bb0aa6c00ea2f058ecf0e5afb11e0b57985a3493f0c
- MD5 c8c80188564a7029b2a763b965630113
- SHA1 dbd902765e7cd53a9d00d9b6309fe985220537cb
- SHA512 79552abd9d94a0f19c57177e1b7067e34447d2781bb294cd35b2a02319d082f291c2c93328bce33d37f7edbab4adca36600ddccf91d07ea5da0a4208e81e2a9a
- SSDEEP 768:qGV/+mZdeLHLgnfDQCsWELpfBvOxPfh3NxkWMx+lDHNICOzijUS/aoY0JfsKv1RD:qs4rgnfDMWGftMkWVNI7mjUSSoY0NsKv
- TLSH T1B523A73DBB1A066C59CDA6F1583D0904FE3DC032893DDC60FB6848A9D552E3F65F4AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Bars.txt
- Size 3KB
- SHA256 8eec60a196904f10a1a9279bf9862332a56e4b590107a694a0970be0f1b9bccd
- MD5 6d478fb0482eb9518f4700ed09aac507
- SHA1 ca995403c36cfbcee684cebd881b3411c7ea96ed
- SHA512 109b050cc757304bbb2ab262ff229ca1e73e1e4d1baf78384bad4169a9567d6868b50979a9bdce39a2e39ca6fa2164d818970b27a6895fba8ebfcf4babf40478
- TLSH T1E0613428F59721645866607C487B0993A52AD861323AAB9FF5F9D2F63F10B3CC0E5C8C
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target old scripts/Basic's admin.txt
- Size 37KB
- SHA256 a6d25974888d429a87cc1a54196b3c645390624d3cf85470710a39df024edd97
- MD5 2caeb1e7584f6a1ec8e58e39b073cb7b
- SHA1 d50797dc036d66418462adcaf3cf56716abb9994
- SHA512 dbc90a9cb638bb285db49054afdc6793c07d9493d81c61f957d82643840b32349f4e6a7dd2bdf2f7dc28db90e9a78ad37d541730d913862f96353ecba4d69d77
- SSDEEP 768:N31NUBjbJxeJOJKJZhBDichJyVNDNcwJyKNDTc/qJaDxVNDLcXlfvn70kf3lGcRw:DgJYJOJKJXJ2JFJ77LGkpxPY
- TLSH T12A03542B6D9D07B938BAF5D420EB1409F203812771729BD0F65CD7606F3A36C90A57AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Be Dat Boi.txt
- Size 1KB
- SHA256 5718e87ac3efed8413288ca1c06a4ccb2c7015821054d3b88b77c764c17db905
- MD5 a739bb381c96e6cfb84ac5b4e5a40f54
- SHA1 2e3ed83d1a4bfb7ba0c6dad760959055eac3a61a
- SHA512 8a2e0c54869511615c6aa1008901081673180c814d6c37187b7cf466363edc5979d95382bfd777d972216d2dfb426bc3dde342098fface9c56617337710a9bd0
- TLSH T11611F3C1215F51E86CF69A0135BB6904FA06743C661286B0FA5DB0520F9D1786950FBF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target old scripts/Beast.txt
- Size 107KB
- SHA256 b0cf087a7b4c80fc1d4206737ba07e2be87d740cd01626a39944517b57969bb9
- MD5 e2b7d28447bd78da2d8d3a49404ed576
- SHA1 a03751ec30d4067d3caf2214dd58d6e597e84cf3
- SHA512 9bd1ff8b99ee8d34dace47c456f8135b280fc8f89bb720fa1e166a30638b22092adf227583ad37db5bf0802f3410131acf0319214800945be53e3a709369775e
- SSDEEP 1536:VXwL4T2jl35Tez88Jw7lqztsIGsZHUxF/:VXwLAw7lqztsIGsWxF/
- TLSH T1B3B31D19538410B21AABD32C19433E039FE5E053377A49AF795C51ECAF6F588B7B890E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Bird Wings.txt
- Size 19KB
- SHA256 1c48c2ff19f8f4b5dbac2e19e1bf3c75f2f88ed8250f83bad901bc33d6d74713
- MD5 8c56976a394cf9da8ed6ee0975f503c4
- SHA1 d3a928d819aef532e1f89a23c3a8d25131ed21b0
- SHA512 f2317e22fbbaef6985d9a8729cfd9b5e7cfcc47b7da0c10fa6379cffac4edb4b5514918ac29113a74b983529f12ccb82385a0fc8783e8aaaa734dee4b2014792
- SSDEEP 384:Q2oxTVtn8U7ekwHw4JUEd5gSEYH/tQOllJrSQkBWFuBWvALl:Q2oVVtn8iekwHw4+EDgdYHVQIJGQkBWy
- TLSH T176921F3FA2C305E446B1B2ECAC69001FE35554633A250EC4B9BD8A547F7272C7AF4A5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/BirdWings.txt
- Size 15KB
- SHA256 475845abc8651aa09f95b35785e8522da1023c95dfd267737807da619065d337
- MD5 829fb82309aace556de8c63e99f4bb12
- SHA1 98c1a23fa966c450de525fbe366777199949b685
- SHA512 b2461ef2885e90c43f4259048cc19ab8f784a5533ba5b83c334fa9adf61636a794a6dd92111409dbcc4b325cedc4a2f6b50f05d4af30d590db0a9291a669187f
- SSDEEP 384:s2Ixj1tnHOHUa++EwnwYJUE95AyE4H/tQOllbBrHXH:s2IF1tnHOHL++EwnwY+EjA94HVQobBT3
- TLSH T1B872533FA2C305E846D2B2ECA8690013B56558B27B350EC4F8F64D547E6637C79F4A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Blackjack NIGHTWING.txt
- Size 111KB
- SHA256 23668227feed6d748e2deb667539b059a49718787f8e37cf0951c7f25e9d1048
- MD5 a63903cfd80af7c1e21db37672010665
- SHA1 8d46dd6da02565fefdc4bfbc3da1a586cf135116
- SHA512 150b2c4941c0daf8c9b1306c1ca0f7152573091f9459e83967271244087ee596fa2944611b6214c3ba08ce6d7bc9b67eda7f33b7c3b10fca2f8da34573d6f2a2
- SSDEEP 768:W4LtrZL0Xcr0xBEqIZx9oYf8g8c1CM4N5UZeTKVrTbgk7mAEfdO01AFzv+WJ/TU+:W2SXnRYf8g8pM4NziMW02f2M
- TLSH T1DDB3F09983C454E4F68FE92C15553E0742F1F42B2AF84DCF72DC614AFF2E1483A64A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Blood.txt
- Size 38KB
- SHA256 d64b71f2c8437479fa4dea61f9cd3827fc8f6d4c49a4baf97282de756f98c404
- MD5 fd09f06b951878b0417511e1211010a5
- SHA1 af7b6b14d4d738bbf202d7238359b8cb8b4fceba
- SHA512 a9232b0a30862586dc1a4c1cd801de23e9f33fd4718abb043233cfd3a71e78afa13811aab4a9e33079747d34780011ec7a6daf487dd3908d93cc07d51533ac5c
- SSDEEP 768:FS7sVo19FUEKaRhwplBNc1JrX6BN70mx3bQPgKgcNl7yIjYfeiJrs2rp++ufdVOg:VTMWN70mx4NhQfFrs2rp+NdVOASmzwoX
- TLSH T10903651E638257F81B9BD63864E368427ED19403530B08E979ADB0887F1994FA1E37FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Blue Lua STaff.txt
- Size 58KB
- SHA256 b9639c8e27459c79dff2c51963ff56eb84ff3f9d9669574eaaafbb1ff5371213
- MD5 7e67fdc1ab55a8ceaa69ea0901871202
- SHA1 a7e304d6c0a56d505d14d7d6f60d766d053da367
- SHA512 baeb998046a7ffba43583e4f22dc0880477d1fcd013ce189beb3b3961fc393e4ccc701e061d7e2077da8f7bb51166f2d4f6ca148d3b8aa8d2d0606c182c60bdd
- SSDEEP 1536:alco4TlwtZDtzmlX7z/yoxMRyOPPhLahIphwDUhqwPhLc2ctnxmgCPhLp3txaXmg:alco4TlwtZDtzmlX7z/yoxMRyOPPhLaj
- TLSH T1A843227E33D013B695E94B79B44A5D47E8ABA44331211CC47BAC2C986F3E60E79F074A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target old scripts/Book of Wisdom.txt
- Size 15KB
- SHA256 fd2c19f301f9e104407ed88e765ae5aee99c11bf7ac9a6f0feac0bd69e78ed91
- MD5 55f9fe5c14ff4f46ab211d0026e03b74
- SHA1 d8a672b3b591c856b80b877afb7fc88e6b708660
- SHA512 a91c6496d3e650e6e573ef0993330eb65b758100fc35b8c37057700fddfd0b21aa563ffd0275852fe6bcd0f633eaeb29bde74503edd77ad20cf81dc1b5cb877a
- SSDEEP 384:PhN9sYLzqw54fbeba7eBmIm4BM+P0Y60zKB/0qAMpttmrA9nw7SmmsX1LQaNxBCp:Pv9s2zqw54fbeba7eBvbBM+P0Y60zKBn
- TLSH T15372860FB7C11AAC619D5730D4A7D8023A7265903B068DF6B6FDB0785E6930EE4E05AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10