108a20fce074b4a438b923e61c3bca057a8a313da5955f2d47cc8a7d5b77d8c1 | Triage™

Login
Reports

Overview

overview

5

Static

static

1

bridge/appearance.js

windows10-2004-x64

3

bridge/appearance.js

windows11-ltsc_2024-x64

3

bridge/compat.lua

windows10-2004-x64

3

bridge/compat.lua

windows11-ltsc_2024-x64

3

bridge/fra...re.lua

windows10-2004-x64

3

bridge/fra...re.lua

windows11-ltsc_2024-x64

3

bridge/fra...ox.lua

windows10-2004-x64

3

bridge/fra...ox.lua

windows11-ltsc_2024-x64

3

bridge/getskin.js

windows10-2004-x64

3

bridge/getskin.js

windows11-ltsc_2024-x64

3

bridge/spawn.js

windows10-2004-x64

3

bridge/spawn.js

windows11-ltsc_2024-x64

3

client/act...ck.lua

windows10-2004-x64

3

client/act...ck.lua

windows11-ltsc_2024-x64

3

client/event.lua

windows10-2004-x64

3

client/event.lua

windows11-ltsc_2024-x64

3

client/getlazy.lua

windows10-2004-x64

3

client/getlazy.lua

windows11-ltsc_2024-x64

3

client/invite.lua

windows10-2004-x64

3

client/invite.lua

windows11-ltsc_2024-x64

3

client/main.lua

windows10-2004-x64

3

client/main.lua

windows11-ltsc_2024-x64

3

config/coords.lua

windows10-2004-x64

3

config/coords.lua

windows11-ltsc_2024-x64

3

config/credits.lua

windows10-2004-x64

3

config/credits.lua

windows11-ltsc_2024-x64

3

config/extraslot.vbs

windows10-2004-x64

5

config/extraslot.vbs

windows11-ltsc_2024-x64

5

config/main.js

windows10-2004-x64

3

config/main.js

windows11-ltsc_2024-x64

3

config/register.lua

windows10-2004-x64

3

config/register.lua

windows11-ltsc_2024-x64

3

Resubmissions

20/07/2026, 22:35

260720-2hnw7ahz7y

20/07/2026, 22:31

260720-2ffssshz5v5

Sharing

Copy URL Twitter E-mail

General

Target
um-ronin-multicharacter-decrypted.zip
Size 314KB
Sample260720-2ffssshz5v
SHA256 108a20fce074b4a438b923e61c3bca057a8a313da5955f2d47cc8a7d5b77d8c1
MD5 cdb59c5e1825142c47cbdb9ce054d247
SHA1 53e251a2568689fe070a80c04109a8b937985c42
SHA512 b16a5e4266760a9e163ae7eae549cfed4f4f7b5e318823431f0bfba5ecbc02038545d069bdd54c93235b58b2a12f644bf71abae25a837b74e62de6ce90d1e3e8
SSDEEP 6144:ckXUCYeCMYI8w2BeqGDxYPUkpDdCx9L8Vj5ExskoSVE783kTt:cAUCJ38wqeqGF4UkpZCLL9FoSVYGat
TLSH
T19364120EC5EF140BD4A4FBFE78430F86E96D8A0EDA69EE07421971896D413E68F11792
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

bridge/appearance.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

bridge/appearance.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

bridge/compat.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

bridge/compat.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

bridge/framework/qbcore.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

bridge/framework/qbcore.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

bridge/framework/qbox.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

bridge/framework/qbox.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

bridge/getskin.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

bridge/getskin.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

bridge/spawn.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

bridge/spawn.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

client/actioncallback.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

client/actioncallback.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

client/event.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

client/event.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

client/getlazy.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

client/getlazy.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

client/invite.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

client/invite.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

client/main.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

client/main.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

config/coords.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

config/coords.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

config/credits.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

config/credits.lua

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

config/extraslot.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

config/extraslot.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

config/main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

config/main.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

config/register.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

config/register.lua

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  bridge/appearance.lua
- Size 4KB
- SHA256 6f08a22ba15f754416a6ceb85cefca46283ff212bf15e40520c2f59d36f17d51
- MD5 c27d7f3b3fa0a85f80868e262acf3890
- SHA1 1c0320ced82d0ad0267ae51d06b68d667d52ca8c
- SHA512 d04f6b973396effdf53d30fa4e5c00cf3d38809133917f8c9eb3e74328a19c35e1b987d7c1fd402ab89286bc4c04de2802f627d4742466e59f7bbf99e5187a84
- SSDEEP 48:E4Q/tniL9pu31gQrDIJvbBCEc5tOAwtEwKuY9Ru/hmg+:UtnGpu31gcDIJvK5twEBuYf2mg+
- TLSH
  T1B79186DAB522812187B3B5F34A4BF12F3E14214F465514F13BCC59EB9FBD1ACA8B2588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  bridge/compat.lua
- Size 2KB
- SHA256 90aa985d0e8a9701e7e11381320b62930671f4939570b90b297d3f69fe1e03f5
- MD5 045a6188a92f6aa498df4af5e9896338
- SHA1 efee60a06704a327ad4050ed5b7e60636f302150
- SHA512 acbbefeb9a23a76e65dff8603b42999f1f44131ce04098107ae59821b2f6bbb7d0baabdb82cff0ae504df8599557aaf081c1aa2085c53f315b18df0efae19486
- TLSH
  T1B84190E5250782124A3731F7AE0BF67FBF80528E8A5B45F07B5D45BBD3AF2C41422499
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  bridge/framework/qbcore.lua
- Size 3KB
- SHA256 73cb050e48e74a6db477e72cfa471428efd3d5e6db9afb619028523c936a4f0a
- MD5 f456d0fd7739daade6cc3a79475a1f4a
- SHA1 3b5373fb1f38264f64be79e85a4c80f92a51a214
- SHA512 d45ccc5bf3a00a3ece0dbf49092c04d9c67319dcb9a04886ececb6c0bb3d8efbf439b16e90d013f21cd94e2949bf5ed082e00b8499ab65d50e672f5f6c50f333
- TLSH
  T145519EE6254791610B3371F7B94BF22FBF84524FC65A40F0BE0C41AB9BBE2D8106299D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  bridge/framework/qbox.lua
- Size 2KB
- SHA256 0e067ed7d8c2fe3ce0cc93c092c88f5449866e4cdecc7140ad8c1440d00398be
- MD5 947b06fd9fb3a4387f897ee4f83fc005
- SHA1 bbefcebecaf922a68d1f4dc28ed09df300950bce
- SHA512 5083a4c31bb75ec95994a669d8587502f6306e5f6c8f443b0871741871b3ab349ae614863aaa070a217afe7ab5412dc17221b9cdd3679559748d96153cc85f11
- TLSH
  T12F519CEA254791610B7370F7AD4BF22F7F84524FC64A40F0BA4C41ABA7BF2D8106299D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  bridge/getskin.lua
- Size 4KB
- SHA256 c9a94e9c78d9c30b431e87bbde251d82c3c12e6cb30aacb35b83b4d8d629116e
- MD5 1a09918b6c7cac585c84e2f2f4ceefbf
- SHA1 3c68a3864621ce36e9a0a71bfcd538a85865f636
- SHA512 be90a4de20915bc01ad4cad9a1e718656d6e6ff92a54676e82a11ebf5243462baa8f953ad5e502320731503c25c11a0a15f778b251097d1f6fef6806c6090e8a
- SSDEEP 96:UtnGpu31gcDIJvK5tZFNhiJVii9jGjXKgwTmg+:UtnWMZDD5tfNhiJl9jGjXKO1
- TLSH
  T1FCA1EDEA2107965187B3B1F75A4BF12FBE88210F860A04F03F9D519B5F6A1DC84B2598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  bridge/spawn.lua
- Size 6KB
- SHA256 8f1621144c417ae3bb3bb0519ed457c815b8d0d6ac414efde84ade53510b1900
- MD5 3ee57b9d55771ddf45afae27f402b059
- SHA1 acc4aad908dfa47cbc5392dd7ad1e418efda2e6f
- SHA512 63eed0616d53b411efa4b0007cd3a4ca77e09a08e11d167f8a2e48e8e699ed4bff022260cc6aaaee5f98d463c7920ac6901361971e4468a3eef737007b602b18
- SSDEEP 96:UtnGpu31gcDIJvK5PyaZkdUrPrlIOHxiUECK/HCKS7iD9c52:UtnWMZDD5PyaZkkJIORJECaCl7C
- TLSH
  T12BE1E0DB34661578833B61BF990BF22B6F50032F535B02F0F58C01978F361A965BE6A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  client/actioncallback.lua
- Size 4KB
- SHA256 3dd4e99ad1d536992c1c4ed80ef99db46fea9c11173b2e130d2700da63a140d2
- MD5 4e7f4c4221bab8dc1ffe59c4c36c7e2c
- SHA1 3cefd46cc5c7c8165d48c2d518b0881f861c83a3
- SHA512 6082a4de3099f431068f5cb576f0e4e840244ce9b20bc831cfee0513ed55f855e889ae8f40963181b42017401154555be912e618c8fe23e599fef7217adaa5ce
- SSDEEP 96:UtnGpu31gcDIJvK5+7ski/+Qspwdw2wduRwRpAwewShjRqF:UtnWMZDD5VkW+Qp2/dh1nShjRqF
- TLSH
  T11491D9E5618342614A7335F7AC07F20EFF85508F4A2F04F47A4C8AA72F7E1C865A15E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  client/event.lua
- Size 4KB
- SHA256 a356210867f804f8292feaff566b90121eccee82b2cbacbaf4cc45e3b927a9bf
- MD5 ac686b57456a9e363873845c6ca394b9
- SHA1 22c7bd70f716f002ca0fe9805fb26eb3c5d0462e
- SHA512 314209dfd95466a2097962d9d32d9c4b5d4f3ff2f4369e7cdbaf33c0616b4269a60bbc0ef7674d4dfedac909f4a041f55ef49427322fbf65fe0a4f9f184477bf
- SSDEEP 96:UtnGpu31gcDIJvK5LQrOxWxb3SEDuooQ7Wagr:UtnWMZDD5LQrO0t3ZD9oKWF
- TLSH
  T1EE910CF969074220833722FBAE4BF25F7F40019F911E10B2FB5C09579F9A6DD12268D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  client/getlazy.lua
- Size 2KB
- SHA256 a1a1394c6d6eebdc379f9861246529487dc68c5167685af14c4b996727e59ec4
- MD5 f25a847756f70d7c68836f8cdc46df3f
- SHA1 c381ffa1d6220b617ec5456ef18ca82972f814c3
- SHA512 532c256bfca6cae87b8c476b753143aad6b0be98764f24ce62292accd09e091b85d0ff44b77a124a437aa42606b0334ad7ca06b9691180b36144073aa8c11af0
- TLSH
  T1A15148E6560382121E7631F7AD0BF26FBF81168E861A00F07B5C52FB977F1C895528D9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  client/invite.lua
- Size 3KB
- SHA256 d83e3cf2979e2dbccc474f56fe3fce34c5a910eaead54ad6f81866e21d318208
- MD5 338fda2913e4016214cb656310b4aa35
- SHA1 c04a285e96b8f4112fe1a17ed685083854b28a2f
- SHA512 39a53fac81c813d0e7ff8fbd17f3de51b00f3b0cd2c0138ea162b41ee010c8124384b0eeee86ee8abfd71388501b9981c22ff74cab4501b995e2de41f9baabc3
- TLSH
  T18B519DE5228791214A3231F3AD0FF26F7F40128ECA2B48F47F0D426797AF6C958625A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  client/main.lua
- Size 10KB
- SHA256 68fe3b1f52953ed3c5cc2d03c3bbbcd5c16df25584ad9bc381e35ee95be13ca1
- MD5 2a7d19dda109595c31e22efb7464a075
- SHA1 7f325eb6192186b6724d44404fbefebf3ec972e4
- SHA512 76b1fd2e8a8431191ffe0ee96b0bd764892762bb7e6759ef2676d67c6c263e19862ccc071e0178f626c613a620ee88eef16ef69ba2c6d290c565e4a2b14af4a3
- SSDEEP 192:UtnWMZDD5nQZxapJgEA1UvkJVdubpsJ41E7hXsECUwwDBTDL8GH0:qnQiJ81UKJwE5Cvgr0
- TLSH
  T1813221E712C3062945B362FB9D53F109EB04114B166F05A63A6CA34A3F7E5CDF2E4E89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  config/coords.lua
- Size 4KB
- SHA256 84b77b0a46dc3af6d351352a79ed9df8361c9c7b8e0cf52122c0466ed558da80
- MD5 b4812b02b8ac7e9c50a5082efedf0884
- SHA1 4c8f90e51b91b98ed6ec13be011c01cb22452adf
- SHA512 80042ad871fb573e2c31336a76cfd215e94c30df741951d19369fc8e98981ad134b32e9f000803b83cf9199241d4f361b0fb287c2ed0bd8a4fdeeaed8712ccc9
- SSDEEP 96:UtnGpu31gcDIJvK51FqxTCYf9yX9Z5/yQgAAZxcmz3t:UtnWMZDD5zqxmYf9e9Z5/qAAZxcw3t
- TLSH
  T1C7A1A8E806229A204A3230F37ACFF02E7F50A15F9D5938E5BF4D46679F4D4CD9875888
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  config/credits.lua
- Size 4KB
- SHA256 dc23719ac1d0050dab1fe7efc362f352d3e76d086126024ebf252ff02c01d94c
- MD5 b4edd73721689f43c4cdf20643d5da45
- SHA1 ac5c11301d4d87e8a41659cef032e7bdbc474525
- SHA512 736cdc3f5afb2e50994b8846a6f6535eea5620a1b9e078290b7dfd0f5df2a89ec01b63c148fa50d2595dba2f907140ac559c54d04d1b113dadb71ceaeafd2473
- SSDEEP 96:UtnGpu31gcDIJvK5n/DgYnznznznpgegegU:UtnWMZDD5n/DBzzzpBBt
- TLSH
  T13091E8E912B64411057230F36A4BF91E7EA042CF5EAD28A03F5C40AB9F1D5DDA8B239D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  config/extraslot.lua
- Size 3KB
- SHA256 d75e17500168bf67f62092ec365aeca4d772e8faa71ddc369003528f27e4c7e8
- MD5 66361ce92a053fa01cc62467d11c069c
- SHA1 e60ad1c64fa8256b7c42465b0266a2e5433ce86a
- SHA512 4a0de43ccadd21bed00ed1a0f274226d4646f984a13b1024044c74e02f2fd41fd69b991ab151c7919d692274d9fcfc3d996c77c095b394d97478d9a37ab68376
- TLSH
  T19451B9E9105699220DB5B0F3AD4BF23F7F1402CF895A14F03E8D05AB9B6E1DC50F2699
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  config/main.lua
- Size 5KB
- SHA256 c8b0fee1b14954bd7e12ea4072fb17fca4b15e535497e8c6ad5466090900f5f2
- MD5 a0c7e295ff0354b01c0187a5ba34d182
- SHA1 cb4eaed6f5a814698fdb37675a2699459a243e40
- SHA512 977e22e59b973e2d34aec2be2e972342daba0c9800c3049e1a3040662e030eaf25c26ffd454dfae509cfce001c2034b43c3c3d256098dabddd8400ea7967b4a8
- SSDEEP 96:UtnGpu31gcDIJvK56ifCMW4s9Xn/+UQLDDPKuzjb:UtnWMZDD56iqMW4On/+lDTjb
- TLSH
  T1E2C1FDEA205362310A3371BB79DFF12FBF30411F991B25B0B9CC51AA6F1E6D551268D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  config/register.lua
- Size 6KB
- SHA256 749ba2e9160d981e6a45508b012aadeadee3ad9432935a37a2560412d9792fe7
- MD5 6252a24baba9c4def74d373189a85daa
- SHA1 5ead17411dd6f4d936a763037edf2b8adebfd2ff
- SHA512 629f812ca66b36986c5789898be9720ba25f499ae443c6888f51eeea8b8b5f756cee15b7a8b98075d6a3500d9ec7b4793f4d9577a1b2f45d1b19e6547d67c84d
- SSDEEP 96:UtnGpu31gcDIJvK5+SoQSmZb119aRmLHeuvsfziwJPu7:UtnWMZDD5+sZb8oennc
- TLSH
  T116E1AAF7141752C1463231B7D82EFB1A2E4082AB4E0138E3BA9F065A5FEF3AD157157A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy