Overview
overview
7Static
static
7Clients/20...pt.bat
windows10-2004-x64
1Clients/20...pt.bat
windows11-ltsc_2024-x64
3Clients/20...ipt.js
windows10-2004-x64
3Clients/20...ipt.js
windows11-ltsc_2024-x64
3Clients/20...15.bat
windows10-2004-x64
3Clients/20...15.bat
windows11-ltsc_2024-x64
3Clients/20...st.bat
windows10-2004-x64
3Clients/20...st.bat
windows11-ltsc_2024-x64
3Clients/20...10.dll
windows10-2004-x64
3Clients/20...10.dll
windows11-ltsc_2024-x64
3Clients/20...10.dll
windows10-2004-x64
3Clients/20...10.dll
windows11-ltsc_2024-x64
3Clients/2014M/tbb.dll
windows10-2004-x64
3Clients/2014M/tbb.dll
windows11-ltsc_2024-x64
3Clients/20...ug.dll
windows10-2004-x64
3Clients/20...ug.dll
windows11-ltsc_2024-x64
3Clients/20...ta.exe
windows10-2004-x64
6Clients/20...ta.exe
windows11-ltsc_2024-x64
6Clients/20...ta.exe
windows10-2004-x64
6Clients/20...ta.exe
windows11-ltsc_2024-x64
6Clients/20...od.dll
windows10-2004-x64
3Clients/20...od.dll
windows11-ltsc_2024-x64
3Clients/20...ta.exe
windows10-2004-x64
6Clients/20...ta.exe
windows11-ltsc_2024-x64
6Clients/20...ta.exe
windows10-2004-x64
6Clients/20...ta.exe
windows11-ltsc_2024-x64
6Clients/20...ion.js
windows10-2004-x64
3Clients/20...ion.js
windows11-ltsc_2024-x64
3Clients/20...le.bat
windows10-2004-x64
3Clients/20...le.bat
windows11-ltsc_2024-x64
3Clients/20...nal.js
windows10-2004-x64
3Clients/20...nal.js
windows11-ltsc_2024-x64
3General
- Target FilteringDisabled.rar
- Size 724.5MB
- Sample260722-1bmvwace73
- SHA256 ebca93a706338a22bbf90b208dd2aaf0fb49118f579f5cbc904c55d6c5771807
- MD5 f64e96f16e8f85c09a322d0dffbd18bb
- SHA1 9a5c267acffdb17c0d56d13959f529e7c26a16c0
- SHA512 608a87fb618cf24f9cf77d433e18b5691c1e1cdc8e66eccc828695d08b94e5203967a5da03213d302e2b2833a87b763ca46bb9e83961651e46ea536d1459eb37
- SSDEEP 12582912:UIQQALKYsIXPFsDgiO8rbpV0qNhObxMKuPPfGfNMeKWw00q923Aps+WOfWHm0FiJ:UIhAeTIW1O8rV3NhObCJPgOnWcfQps+l
- TLSH T1B67933F577D1B1AE8EC4D977FA739B82F2BF2104E042E4883738A14D45D8305696E36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Clients/2014M/content/fonts/characterCameraScript.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Clients/2014M/content/fonts/characterCameraScript.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Clients/2014M/content/fonts/characterControlScript.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Clients/2014M/content/fonts/characterControlScript.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
Clients/2014M/content/fonts/humanoidAnimateR15.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Clients/2014M/content/fonts/humanoidAnimateR15.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Clients/2014M/content/host.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Clients/2014M/content/host.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Clients/2014M/msvcp110.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Clients/2014M/msvcp110.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Clients/2014M/msvcr110.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Clients/2014M/msvcr110.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Clients/2014M/tbb.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Clients/2014M/tbb.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
Clients/2014M/tbb_debug.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Clients/2014M/tbb_debug.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Clients/2018E/Player/RobloxPlayerBeta.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Clients/2018E/Player/RobloxPlayerBeta.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Clients/2018E/Player/RobloxPlayerBeta.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Clients/2018E/Player/RobloxPlayerBeta.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Clients/2018E/Player/fmod.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Clients/2018E/Player/fmod.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Clients/2018L/Player/RobloxPlayerBeta.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Clients/2018L/Player/RobloxPlayerBeta.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Clients/2018M/Player/RobloxPlayerBeta.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Clients/2018M/Player/RobloxPlayerBeta.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Action.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Action.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Immutable.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Immutable.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Signal.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Signal.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Clients/2014M/content/fonts/characterCameraScript.rbxmx
- Size 117KB
- SHA256 10a724df82261add3dd3d28b7c9a5942717e802133e8f6d5b652dbe0e77727a8
- MD5 3f775ed6e09697faead0c522a9961612
- SHA1 c7b6726843374ad16a8ce5eba8c17ecaafa7f933
- SHA512 51b4d069ec57bb1ee74737edb6eaacffce586defd6ff8f6da2eaa6466eb755a9559f1df3f79f9e2d458700fafa7745be966d1ac73c1e26decad43e65f9b230bd
- SSDEEP 1536:jg9vnY/806KIe95OqrVgQGe8xMDftpxLSJUU0ewWwFOqueYVemn9ieZzqvj8k1Xx:Mq0e95OqRgQGe8xExfejeQehe+Jx
- TLSH T1EDC39769BA4F52920DC1A1E9D83B0001FD6ED871202D2940F5ED957EF84867E43EE9FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2014M/content/fonts/characterControlScript.rbxmx
- Size 53KB
- SHA256 1eddfb974307fc600cffa6168a71cc38f7ee2d075ffc30ca251bcbba3acecde6
- MD5 8a32c6dc29946990a083655d623b0ac7
- SHA1 457114ddfdccd7e8d0c114dd4a614edba76362b3
- SHA512 ddc64b1b191456260a49817c68d6aeb54c1b91f0ea4f59cfa43fd8584bce60ec98d8f7a7f1a5ca3c616763e756d536516955eb9fceb59793d5d1c93ad99eb491
- SSDEEP 1536:/LLHwrmc3j+icOPeNBER6waeoawo7J9bwN8wcE:maez7/E
- TLSH T1BC33E86B761A53A15C4B32A8FAB708106DFBD07132342148F6DC549DB49DA3EC2C7ADB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2014M/content/fonts/humanoidAnimateR15.rbxm
- Size 19KB
- SHA256 c947545c6fcb75be32ac0d3b7786b97c5e713f337b4dd4f37e909dd8927ef688
- MD5 3f4301ef46b0195b0720bd49b322eee3
- SHA1 153d7ab7f8d5be63e5fbafebef3c28bc82faad53
- SHA512 e28263b26ce7e7c3b52d684db71bf9ca1a168097854639f0ebd8566153bcba04bfad9c5e6b4504623ec25ded4d11e8e8e0d3d546324c1a123cd7425206fa19d1
- SSDEEP 384:bCwWNJS7G5j70D2VIPCR+b8ZbW8Vl8VjQY6ktBIOOxMTN/7/egBHZ:btWN07I9W8UBNrN/ZZ
- TLSH T114927336FE6A2A694FCAC563843D004CF93BC960513980F1F6ED59BF200496752BDA7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2014M/content/host.txt
- Size 10KB
- SHA256 e24b1cf9d8631777be5682ac60626732212c832c37af8597245b7aadde108dcb
- MD5 050175ae870f94bdac8e955ab2b8b177
- SHA1 ae551872282f866287fa536e2905c18b460ff4fc
- SHA512 5e8a5816ae34bae5155173fd08fe72b740163c6123b8981a0f21dd2bee3788b18dbdbe2f1641909cd853e40de30a8834cab432bcd3244baaadeac3ddf87048aa
- SSDEEP 192:D+MvJt7dEVX7cFxxltqVYm6VKmubB0XNHVElUUUP:D+MjJgoFzloVYmi20XNYUP
- TLSH T1E5326469FD8A68E68F76D1B5E93B7040EA2ED07040389708B39C4A6775C4D5C418FAEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2014M/msvcp110.dll
- Size 522KB
- SHA256 c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
- MD5 3e29914113ec4b968ba5eb1f6d194a0a
- SHA1 557b67e372e85eb39989cb53cffd3ef1adabb9fe
- SHA512 75078c9eaa5a7ae39408e5db1ce7dbce5a3180d1c644bcb5e481b0810b07cb7d001d68d1b4f462cd5355e98951716f041ef570fcc866d289a68ea19b3f500c43
- SSDEEP 12288:FqULIc5nb9rywgfyhUgiW6QR7t5sA3Ooc8sHkC2eRxUH:PLHnhryLfBA3Ooc8sHkC2eRxUH
- TLSH T187B44A237B824CF5D19E53B231C5431587FAFC6181A1F353ABDEF1692FA6286E123A11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2014M/msvcr110.dll
- Size 854KB
- SHA256 b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
- MD5 4ba25d2cbe1587a841dcfb8c8c4a6ea6
- SHA1 52693d4b5e0b55a929099b680348c3932f2c3c62
- SHA512 82e86ec67a5c6cddf2230872f66560f4b0c3e4c1bb672507bbb8446a8d6f62512cbd0475fe23b619db3a67bb870f4f742761cf1f87d50db7f14076f54006f6c6
- SSDEEP 12288:TmCyHcMpK7QdgD+9Tr8r3FmJciMgLFWkA8qTWu+FVlofpJCjNdr12iqwZeq:TmCyHNIQdTryVmCipIkqTWu+Fr
- TLSH T19A15BE12B6D2C0B2C57200701628E772597FBA72547999BBAFD98E0E1DB06C0F71B772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2014M/tbb.dll
- Size 271KB
- SHA256 489417408927123edcdb6490939223ec2fc8f7576cd28e818fe86043ff8c9393
- MD5 7d3127f236015b436ccf8da4a2e61587
- SHA1 49cb04c7015e75f61d58df01cf9ab5bb192ee849
- SHA512 3550198b1c9768bf45723e617ee739c0167c4f068452936415548a7e7767ab7a020307bb320aed1ebe90e77b58050e2f0668ca4737a0e6e6c6e49f6bbac7f330
- SSDEEP 6144:dg9OniFPXhXgfbPnEgkBIUBs/OHrdlhDrO4RaWpApSJRYjG/rO4ay6Sa:dg9OiFvKfbPnEgkBIUBs/OHHhXO4RaW9
- TLSH T11C44AD513291C436FCDF027986BD4B2905AEAE610779C8CBD7C90E4D4DB26C2EA35B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2014M/tbb_debug.dll
- Size 764KB
- SHA256 ba81849ceff9f60dc4285682bae17851c85fcaa2f27f180814c343cde933b833
- MD5 d5d8e9636270d6dd306701510e26a244
- SHA1 03e801913bfbbb69372b6141553c84257705560a
- SHA512 74c557010d38d385f17242b5f639b368b0f80449f36f87b1e8bc05f5fc2451e5c5c34b6670b17242484eada107b148a3aaa4c7783fc6974772b330bf806ddff5
- SSDEEP 12288:yNdYkz2Uhux3qaZrgIIa0sDtoq+JwnyIi0hhZDu4hS0/aadWglPigd:yhz2Uhm3qaWvaHVVLd1hhUk
- TLSH T192F43B11B941D039F8FB40B6DEFF4A69342C7A6117A980D7A2C4ECFA5E24DE66C31607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2018E/Player/RobloxPlayerBeta.exe
- Size 19.4MB
- SHA256 147eb237a3d2c675982750ae5622042eb60836dcbf175ca57faf8fae14a0ab28
- MD5 3231d09a8c3525a75e999789aa7d9df4
- SHA1 0acbcf80021f630a86e530cbffeb202771b80a78
- SHA512 1b697238475c814b639449275e73d2f754e615a05a316e63a10b091629172e39c8212f872facf6d551dbae4f520a2188b6592cf25126bb1ce93ee86b34d51b9f
- SSDEEP 196608:LKEykylyeo7tF5emW3IIox65SzGm8nuU6ngSlB8T4acAFIqWXgV9mfVV:Lnyb4FemW3FoxXGm8ogSliTlcAFawqf
- TLSH T102179E007164C1ADD35242F02D3C7F2F5A2D9D980B705BC792DC2E2D9EF59C25AB7A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
- Target Clients/2018E/Player/RobloxPlayerBeta.exe.bak
- Size 19.4MB
- SHA256 97cfb11f8d9cccb9f0036fafafb193ab02e163f7d26c219ffa307b162713a7cb
- MD5 4f2255d00b498e8728394d44033375f1
- SHA1 e6dc3efd07443a6d69f17b6bd6a32471c714a96e
- SHA512 6a99b027736a306c4cbdf801103b309a77f43c3c7232019c9c01c8a72e04540b3be15640500f8eec897a84563737590a2aaecbed161fa340ba46cba3ad876970
- SSDEEP 196608:LKEykylyeo7tF5emW3IIox65SzGm8nuU6ngSlB8T4acAFIqWXgVNmfVV:Lnyb4FemW3FoxXGm8ogSliTlcAFawWf
- TLSH T10D179E007164C1ADD35242F02D3C7F2F5A2D9D980B705BC792DC2E2D9EF59C25AB7A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
- Target Clients/2018E/Player/fmod.dll
- Size 1.4MB
- SHA256 f766df180452c176d650bd0f539e7a09dcbdb324c44a587861f5f05f106c184a
- MD5 aa11245296101bab4be92ddbcfaadeb8
- SHA1 1f7013dbcfec7bccde4f5f713e722be18f7aa186
- SHA512 7389f5889fc138089a127bc8d698f2d10f879c366ef30118ef7c552c9844bffe1639eb19ef54061dae042e140ec56a230473204838c5e5c2179a771ba612b79e
- SSDEEP 24576:vGrx7JiBT4w+RxmWUj8agDSwmECk5eQDK99pOYnwVMcXz:vGL1w+Rx69gew1N20YQj
- TLSH T1FF659E10B590C0B1E4911173E6ED3F6B697C3EB5032821D7A3A409A9DEF02D36BF57A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Clients/2018L/Player/RobloxPlayerBeta.exe
- Size 33.0MB
- SHA256 6511978d51bf179a74cb868048c91b61ac4652464dc73b7fe8fd6fa9bd6fa817
- MD5 20a13e1db27108fb7fd1375366f1c0b5
- SHA1 ae875c32b8ed0fff43e9007d94ce0f6622f83972
- SHA512 9fe39edab049f88ea8dabd5c77e17e22d5e0ab18c3f2a9749e754da7d85b7e9a8d71461bbe8587eb6c66c008e5f5dac7c48d6f231477243dbf6c66e19aa45ec2
- SSDEEP 786432:cVzQf8Ak3flUYrDMEfb5EkFo/hypvftB9Bwp20qy:Hf8AgfqYrDVf1RIQHjfm9qy
- TLSH T1E177C0127261C1AEE35142F02D387F2F5B3D9EA807604BC3A3DC5E295EB58C22B77965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
- Target Clients/2018M/Player/RobloxPlayerBeta.exe
- Size 28.5MB
- SHA256 bc7e0d20819a225992d73244dbb33a3db2e27d5e5d40044fc96075d66409aa61
- MD5 852c653bf5524615b0c16d08c7888489
- SHA1 3aaf7720390be13a87b2c623c37547be496475a9
- SHA512 c2bd73e44f34d765f5631439ba6f0e77c264806f23f71e43962b0df9a7c4788233c96d0d2ad8e8f7b3a6492665ed8a5ead16a4eb854a1c969dce90d6a29fe398
- SSDEEP 393216:prPNPTU5x7FkIThQvBuOdvEnbBmwl9pYMQPx/SqA/mewwMnBWgY71nVM:fI5xBJhQvBuGUBNY5x/AeewwEWA
- TLSH T1A967DF1271A0C1ADE35241F15D387F2F5B3C9EA80B704BC7A3DC1E599EB58C21AB7A19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
- Target Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Action.lua
- Size 1KB
- SHA256 f7d54d79ddc9e8718e6233c79b95660e9326c2bab8acac48ea96f44aef23838b
- MD5 296c6b24a0fcbc30f26708c4792776c5
- SHA1 a28f00b322614a9ae1fcf3c649381f571c4b7121
- SHA512 a37ae7b2939f5997bcacfca19d74e889aa435663eaf250d3f680c2c2a4845f35583b9580c1d8f48670ea5024928c751a810b5f6ff0a191f7c7bcb8978549474f
- TLSH T15541C097FA42727059333726999F948DF7785023172440813CAC40AC2F7695AA5BBFEC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Immutable.lua
- Size 2KB
- SHA256 9a252ac8637c2451b71f0f5a6f6c1fb64b8e23276b582582823626ed2055223d
- MD5 8cc6a45f89abc68bd742a5fd57df9143
- SHA1 a255eac9909d3d5b21991b8bc4354a7bc4c57db0
- SHA512 2cb7f0b557851ec25f20283ba501a81cb826bd2fd32d0c3dd73fa0d324cb148f8fa0579660cdfe238f7b310c648b917afe1c26e7c2fa7f13b29f4d1d1dd112a1
- TLSH T12D51DE1FBA4B90D204CE74679C368808EC19D410A11B23A0BCEAF6ED5541A9DC67E8BE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Clients/2020L/ExtraContent/LuaPackages/AppTempCommon/Common/Signal.lua
- Size 1KB
- SHA256 81f589731a92fe4c326669ce6a43881d82cbffeec325e67d30b9dc5bbe21da9c
- MD5 cb29064137c03dde9ad5f77c4d4f5e3b
- SHA1 db9cd412e5d2aa0e2fcabab46b81b284fb0c704f
- SHA512 6f6aa6a11dbad8f807be7a3eb29dd2085be98de6cb9ef4b1514465991f3e10e36ebee9079eee9d7da83cbcc3e7c8a5a7dec8ee3fb6da0bdc11f434b62193308a
- TLSH T1EB31E01FB047102157CE9E97A0364290BCB6C300023D018277B5C5FA7934F8A59E5EFB
- MD5 SHA1 SHA512 TLSH
Score3/10