Resubmissions

18/07/2026, 20:59

260718-zs4z2scw6l7

18/07/2026, 20:51

260718-znd8tsft618

General

  • Target
    node-haxball-client-win 1.1.0.zip
  • Size 212.7MB
  • Sample260718-znd8tsft61
  • SHA256 83d92be534539038fa64f4980b59657c10992dab0ed50dab3478ea174f76e5c1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      package.nw\node_modules\react-router\docs\how-to\client-data.md
    • Size 5KB
    • SHA256 e95562cf20f910a360f0bdee31da1da1e207ac41b53df59c670c8d2aa4d1a01e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      package.nw\node_modules\react-router\docs\how-to\data-strategy.md
    • Size 10KB
    • SHA256 e3e2a15a54a8d1e947d292a85bfe845de0e87adc9d970ceb87ddce1f85b2b34a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      package.nw\node_modules\react-router\docs\how-to\error-boundary.md
    • Size 5KB
    • SHA256 afd6b2b94c74077f913242b24016d2c61b490e4e0b21fcffe9e11c2b140a7ce0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      package.nw\node_modules\react-router\docs\how-to\fetchers.md
    • Size 7KB
    • SHA256 e8487874babf5cd7de92bc02f30316261e13dec93267f191f937e21752dd831f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      package.nw\node_modules\react-router\docs\how-to\file-uploads.md
    • Size 5KB
    • SHA256 ca1b151978fda8cf00cdd62828376a01382577eea8e498128a8c54cdb0559fbd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      package.nw\node_modules\react-router\docs\how-to\form-validation.md
    • Size 3KB
    • SHA256 f2752726c4a73c3e25c60818e45652c5e61b46f1d62918bdf9c47015e2d88eb7
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      package.nw\node_modules\react-router\docs\how-to\instrumentation.md
    • Size 14KB
    • SHA256 0d36f27dec1d1cfe6b651c709f4a708e76e3474a9eb264b12a4467fb0e059702
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      package.nw\node_modules\react-router\docs\how-to\middleware.md
    • Size 27KB
    • SHA256 8e8e74e6b98d590ea7c2a45693aa8aab905f6abe8517acef595b94c15e637c00
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      package.nw\node_modules\react-router\docs\how-to\navigation-blocking.md
    • Size 5KB
    • SHA256 ccadef179660f63b593a320d93c0c39462243fe00ab3baa092ca117ea3271e14
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      package.nw\node_modules\react-router\docs\how-to\pre-rendering.md
    • Size 8KB
    • SHA256 311066a6ffed9251b07c621d2d9f3fcb79f5aea346732f9de2213fb56432b313
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      package.nw\node_modules\react-router\docs\how-to\react-server-components.md
    • Size 28KB
    • SHA256 c6e0d989e724e7f82417c43c9c7fb30fe9e17ed2f7c3a43b03ceb58dbc361011
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      package.nw\node_modules\react-router\docs\how-to\resource-routes.md
    • Size 4KB
    • SHA256 711e517ec65bc87e3643818f5a888bfeaf295f5c46786bc8e645fcf9ceda2b8b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      package.nw\node_modules\react-router\docs\how-to\spa.md
    • Size 4KB
    • SHA256 04e07689af162800f011e5ed09879fb28bd8c0f29e0e8226b29dddcb80a8cc15
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      package.nw\node_modules\react-router\docs\how-to\status.md
    • Size 1KB
    • SHA256 90059e2b21037e3602c300fa2646b9f8b6608067c14ed9b46fa6ee52b4745952
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      package.nw\node_modules\react-router\docs\how-to\suspense.md
    • Size 3KB
    • SHA256 cc6af913ef83fd7f56b1d175b524c236bee3037ddaec51c4e7e6830e1c6b2166
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      package.nw\node_modules\react-router\docs\start\data\route-object.md
    • Size 5KB
    • SHA256 2e510f0589a7ac5d0d30e19e6607a836a1c2754ce632eee24ae55a039f086842
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral5

execution
Score
3/10

behavioral6

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral25

execution
Score
3/10

behavioral26

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10