Overview
overview
3Static
static
1background.js
windows10-2004-x64
3background.js
windows11-ltsc_2024-x64
3extension-bridge.js
windows10-2004-x64
3extension-bridge.js
windows11-ltsc_2024-x64
3lib/accounts-ui.js
windows10-2004-x64
3lib/accounts-ui.js
windows11-ltsc_2024-x64
3lib/bvn3x7wt.js
windows10-2004-x64
3lib/bvn3x7wt.js
windows11-ltsc_2024-x64
3lib/cwq9r1mf.js
windows10-2004-x64
3lib/cwq9r1mf.js
windows11-ltsc_2024-x64
3lib/dxk5tj8n.js
windows10-2004-x64
3lib/dxk5tj8n.js
windows11-ltsc_2024-x64
3lib/email-...ist.js
windows10-2004-x64
3lib/email-...ist.js
windows11-ltsc_2024-x64
3lib/email-parser.js
windows10-2004-x64
3lib/email-parser.js
windows11-ltsc_2024-x64
3lib/fhm2lp6q.js
windows10-2004-x64
3lib/fhm2lp6q.js
windows11-ltsc_2024-x64
3lib/gincor...gin.js
windows10-2004-x64
3lib/gincor...gin.js
windows11-ltsc_2024-x64
3lib/gkr7nz4v.js
windows10-2004-x64
3lib/gkr7nz4v.js
windows11-ltsc_2024-x64
3lib/google...ens.js
windows10-2004-x64
3lib/google...ens.js
windows11-ltsc_2024-x64
3lib/hxp3yb9s.js
windows10-2004-x64
3lib/hxp3yb9s.js
windows11-ltsc_2024-x64
3lib/jqt6wm2k.js
windows10-2004-x64
3lib/jqt6wm2k.js
windows11-ltsc_2024-x64
3lib/mrx-cl...uth.js
windows10-2004-x64
3lib/mrx-cl...uth.js
windows11-ltsc_2024-x64
3lib/rbx-api-origin.js
windows10-2004-x64
3lib/rbx-api-origin.js
windows11-ltsc_2024-x64
3General
- Target Multi Roblox Account.zip
- Size 101KB
- Sample260722-k8y2eayxes
- SHA256 669d4c1ca8c889b525f3fe7eefe073b5d64603c7a751f1769539f7bd433054b9
- MD5 b52238f8b6425649cfeb747df8b2d5bf
- SHA1 0eafa0814ec7bb21cc5c18da1114406d81d2d77a
- SHA512 0356c4c98130a7761e3c020444389e5dac898fbb69f4565327a8bd8769a062b6e72b7f44f3322057e98e7acbfbb1e3e5627a36c1527702cab6fede539e03cedc
- SSDEEP 3072:+psPU2yM+25OK38LFpnyX4selGfHiX2I4ROb1:usPU0OKMvJ6/iXuo
- TLSH T142A302FE9A4D10B0F51F52B4F85003C255B74B0A0197ABAE3D6C2D350E8B1B66B73AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
background.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
background.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
extension-bridge.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
extension-bridge.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
lib/accounts-ui.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
lib/accounts-ui.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
lib/bvn3x7wt.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
lib/bvn3x7wt.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
lib/cwq9r1mf.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
lib/cwq9r1mf.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
lib/dxk5tj8n.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
lib/dxk5tj8n.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
lib/email-domains-allowlist.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
lib/email-domains-allowlist.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
lib/email-parser.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
lib/email-parser.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
lib/fhm2lp6q.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
lib/fhm2lp6q.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
lib/gincore-api-origin.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
lib/gincore-api-origin.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
lib/gkr7nz4v.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
lib/gkr7nz4v.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
lib/google-oauth-tokens.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
lib/google-oauth-tokens.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
lib/hxp3yb9s.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
lib/hxp3yb9s.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
lib/jqt6wm2k.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
lib/jqt6wm2k.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
lib/mrx-client-auth.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
lib/mrx-client-auth.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
lib/rbx-api-origin.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
lib/rbx-api-origin.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target background.js
- Size 6KB
- SHA256 6d8df11d7046d225108ad36ed8d569d6ff49a3962ef5654b5274cb1ecae3abaf
- MD5 ae9fabbccc4120114d013ae256709604
- SHA1 544b1b8d294fbc3ea778a24349ffc2e570d6e9cc
- SHA512 aa492c949fb763aba9c699a154ef76b921472b8db0c664ca9c8d2d2738500b98abf15871886e3d180d18158385470ef58ba3e7c3bf542399024f65b637296916
- SSDEEP 192:36AwMniSqaOY5ni5Y05PH74zW4RFRNDkhteowkGuroqLArHemQWXh:K5Mcmw5Y05PVTFHS+ix
- TLSH T1ACE165BA31A920247635D07CC94BB5259215B017BDC9E8B0F56CB0BA1FCCD2588E7FB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target extension-bridge.js
- Size 98KB
- SHA256 bea8e1a0a30623aa0000ce0574dba646a53acd372f1f8f952ef179c1dc565129
- MD5 53c1433d106a6d2b38112c1ad3a6a14c
- SHA1 82e6ae3c83a13d8b3daace551fc6dc2ec26bfaa9
- SHA512 b7c9c24d393b1160784a9833076e717a51c4e182afba51ae7b4bdeb08f4552196c347f01cc7bb4e69730f72c06421d3092a7be3782ba4e6cd74d8f1352b19500
- SSDEEP 1536:mO3i2kb47Q7QLBXxzUlkXCT/40EaCvGQV+n1ki/ZQZDUikOtWsBKBKdmzcj8TJqE:jybjqHzxvPA2kwU4Js
- TLSH T11FA3A7BA14BB10250A62707D5B8F6005A236A017BC48FDD87E9C87249FC5D3D99F2FE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/accounts-ui.js
- Size 28KB
- SHA256 41e362874cbe294d9fa1cdc3ced2390a141ab4b6a82ce17108c6a2febf13fb1b
- MD5 c9f70e2c481d003b2d91d8db1a0c752c
- SHA1 5da56fa4f35dadddfa8c084bf517fbb42063d51d
- SHA512 79c1e6fac6647883dc7ce0243ad781829bee1aaaed60aa7df9eba7c1219c51840ea8d25fa73772954c4891b11c2f91a35c69c1120e1e62b77ba86235f2473883
- SSDEEP 384:z0khM/y1J1XmC4SRyc6R1D+IAD1rVzsgN8jrUAqy0wcvfmJ6nha:zrUyJ1XmC4cy1R1D+IADPZ2my0wJ6nha
- TLSH T16ED2859D2EE7202A5E3BB47ADBAF5208B17200030009C945BC9DE1546F60B7567BFFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/bvn3x7wt.js
- Size 6KB
- SHA256 f215ac49966d87f97b7f2136fe1c2668e13397e33b4caa9c0e10d670f42d5458
- MD5 d85484e4ddbc4efd6b23ccbc7e79e227
- SHA1 42897127850372008f0561592381cffaa8caed63
- SHA512 edc87f916009ab9aa56d647c2dbbf6ae1da83db1acd52707034827c202732e13db7d4227fee8fe6754c2fda89e4b9b3c91290436e8907d67e5f4b5242b7ebcf5
- SSDEEP 192:fUVXFXh3GjMNnSpKeMNg6bMQDtlQRp6MALzSRKY+qF3v5UWkbxcTiFfST80bmfC:KFx2MVhApinb/qd1bf
- TLSH T1DED1328C6DE7B1A26633742CCB6F6004F174D1170489CD20F8DCA5666FA57B86BB6EC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/cwq9r1mf.js
- Size 5KB
- SHA256 e53c1383ed625ebc4e8b3005f4d02e0700bc81a721000c69c4d2c740b40c4098
- MD5 da509d056664db42c5a77e3442e5cc1c
- SHA1 2aab7401f5b2f3521fd0ad3c6d36f2065a83a327
- SHA512 b833af0aa26ff1ea7acf0e3a271de887757e20c8ee41db6e63d77f37f0f7bc88a941b86521a8e5459287773df604e4304cc35764c73816fc8529119c738fa316
- SSDEEP 96:CqWiBLjcuF8wzaiQHBulAsKVPjIP2PiPQLSoQQpfO9KO7Oc7udu0TieYP9WQJ:bWiBLjcuFTzaiQNVjs2aQWoQQVOgO6cj
- TLSH T1C1B1EF6835E7701351A7A0288FDB9010F026A9A32A4CC991FF0C9D637F644ACABF5FD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/dxk5tj8n.js
- Size 5KB
- SHA256 6271821cb8228f99dff78a7dc9009f02a08df2c4d6596f93a7c42fcb313d7832
- MD5 3d9d43ab37f71f06d8eb85bf4b6879e3
- SHA1 94727f3d1a831c170b658d293fdd747451f57862
- SHA512 74bb2d7dc3b7df04bbc0fde5b803d3eaa738a2f909fe8ec195852026547dde68bb33ad1a7679a1a4ebd2255df061605bde9cb9f14922340a3ec4aba269f1e672
- SSDEEP 96:hGbyxQYUaMbx+MDMA27rAUQoM/MbFy6qKMQA2pTlQRb6mgcRIl+SXh46cKY+qU6a:hGbKQY7MbEMDMv7rAX/Mbg6bMQAulQRM
- TLSH T17FB1F19C25F761255273B5BCCB5BA018F134E017218DCCA4B6DC42567FA22B99BA3ECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/email-domains-allowlist.js
- Size 6KB
- SHA256 6933b883b4204686dd80cd5759bb00910223626ac2961b33fef5b3b1ba9fe9fc
- MD5 64055e6d66b276231f250cadd4ce5410
- SHA1 7c3a453ce3728a93248c96a860c01f29340f243a
- SHA512 f629f0df6b2723520009b5190897e964f9f48e744034e3b6732a7a58891dd6cba30ff2f79334e3f27c223cbb4a3eae475e51a5eacedb23469088de20493e0ed1
- SSDEEP 192:wrqXO/llMF0eH6oodIjP/fLaGH9IBXzjcuJ:mqXO9lMFzfokfWGq
- TLSH T149D1EEF8000491481D5589ACE8AE8D452A62D052DDDCF2F77FFC8E88DA8FE0575BDEA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/email-parser.js
- Size 18KB
- SHA256 53a0bde9d87e7c4ff8eb9ea721f61c542c76a6477ebdab9ef281850be22b3ae8
- MD5 9010fb44cb8227d7cc3135d4560966b0
- SHA1 5bbbc44756169c97939cf02f9d9ef6ec05d9b752
- SHA512 8faf1a68bb079b3aa39fb455565ca026b8e5bf87214b400cd7fcec7e9ad32d2927824a55eba92f31db60ded164f6938a874d1c24e83ff673aaaf7bf39124cde0
- SSDEEP 192:C0ojORVE22UGLBJMXAa8TbtH9+vKKRueMjD/uhTDDThT/dYTYjsunz50vyq9ar63:iOFGLBJMEbz+iWWy/2
- TLSH T11A82B54539EBB02106A5D4F8714FB2627274D023689DCAD0BE6C4068EFD5F3A71B6EC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/fhm2lp6q.js
- Size 4KB
- SHA256 981920ec8b3445ce21791105d99812cac3a9909a07d8ccb8176098a9f9cc451c
- MD5 cd4fe1bd3380e926a4ebe0a900651b78
- SHA1 9049ee7cd39c985e7baa8d2dbc19b49fe49567c9
- SHA512 9bb91c22492933641a619f36729bacbedb4f2bd4d76a81e7efdb0d73fe02e48684bdde1daea53ee669001fe2d3c408b93b200bfa703c9656632b9d4389d74ab7
- SSDEEP 96:ZB0ftOSJoyhKNywq2ULAY5TD9OoKJhyLMMx4pBdoACWjOojJ:ZKtOSJvyqTd5H9OnJhcn2BdoAfjOqJ
- TLSH T1D091240D58F710268623A0FD618BD805736090176ACEDE25FF0C06546FC8B7E88F2ED6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/gincore-api-origin.js
- Size 1KB
- SHA256 e6f24db2e0b009f0c7d3708ea1d9b5da75c52bc062269a948b053f8ef08ab1de
- MD5 7626ae5c8384b0dc9f7c989964572a8f
- SHA1 b7ae7166fa6d4ee1f1b5eb601d276b57a7ea3f66
- SHA512 8c1b9fe62ebf2294e75000a6cd56afa8dd74f2fc84740d79203c0b8da3dd60f3e871e4c1a7d00302a128d5957dc39dffb65ea916cb35c07cc88927e29fb61717
- TLSH T164217F660FA48CCA0063466CC0529C5A91DEB71F460C860CFBA8EDD91EC438712ECAEC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target lib/gkr7nz4v.js
- Size 9KB
- SHA256 040f13e33bb035fba9d7475019af96ac7a4977ff860e39efebc12f375a634df4
- MD5 9ba6306cfbcf6e8c299a4d923ba96f19
- SHA1 ee5cc8803f0fc8e7d1f3e73fd1dcbc7a6e05568e
- SHA512 8c5b871f18146c07e340c5e1a8ddd054f7b68fb57b800b05e715cb64ba4ce55133080f13c43f9fa0dc4fb71114b6b1b5ed0868a812fa1f8902891799d391cb1d
- SSDEEP 192:K7s/4cD0JV5lLhOEDQxCmhRw54D5YwKaOEZWLOMnX/vIC9gQEeWrP3J:iLD5lN8AlXLE
- TLSH T1BD2297B7BB83A0BD0223D1651FBF9510B968693304DDE910FA1CD5285F5092A06FDBFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/google-oauth-tokens.js
- Size 6KB
- SHA256 7de7e99c83afc1fdf045499acc40fc50a7d6be89ae26446a61edb27bc7e70c3b
- MD5 286bd3b8d842041a48b2da7168bcd51c
- SHA1 75705906c7dc11271948c0d516d207b654a6630d
- SHA512 84003cd8b6c1345534538c1146f020284f95e79b06ea111b88fb7942f8be366dcf1b214d055e153d0475613987e9e6999320d9f77c7f16be57e3b9063a91da8f
- SSDEEP 192:yAK0h/SKkgrkVmcuno8Bmn7G+TJFzDZgq/akqWjOwVR:TKWJwPjzqi/OS
- TLSH T15AD167C932FA70264667D47135DF902AB218D823549DD6A4B2DC03A02FC957B86F7B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/hxp3yb9s.js
- Size 38KB
- SHA256 a30c1e22565b9c274014f0808ad7822b4d58a4730ff8fa62ecc48eb76d2c9c0f
- MD5 fc07415c7d32771fc3dc453280b8bfb7
- SHA1 4bcf5e957d48a6096f22ed1fceeade9251b201cf
- SHA512 32654d91b7a3115bf615bdd4b78adaea936e48df9df61c0d8c0a47098a35aa440e2de992693f5029dae94a35396495b13e29980013f23684544c7296c79d43b0
- SSDEEP 384:sw3tw2K8Ntt2HA2Kc6ogjqxsBomIs8EY2uYqbdF9bzN7wSrj4OqQMzXxiORZ1UMd:r2R4bsBS2Ljv3sia
- TLSH T1C0034F4A21F71227812735BC8F4F50197224D033268DD9A4FE1C43642F93A7A9AB7FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lib/jqt6wm2k.js
- Size 1KB
- SHA256 55a5bb458ecafcc29a910fb1e1d536d4f1900e76508ebaeca6296e7aafb0ca26
- MD5 14ce3efda01c4d87a8f6f219958f8475
- SHA1 b8705eb4494de9d661f0adf9a02778b941f0eebc
- SHA512 7d812281b666a5b65282c86cf76898d600c9b0bacfa740fb8118efd2671d73dbd6cba3ee6880a1c3c191a356fa0ed039d5b69f4c8a5ee21985de4ce327c94638
- TLSH T1AC21DDADA951301E3673A378CB1E550CFA264233184AD640FD6CB4399FB12650299FEC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target lib/mrx-client-auth.js
- Size 701B
- SHA256 859b5c727f01526998de3d2ecd56ad788323563fdd0ad1b2c79e3ae94fb76c74
- MD5 dc425e83e0cbd613dccb983a1081938f
- SHA1 e4b462a91352d5be337b260df8925d895846ca46
- SHA512 8cb1bb8da53723697a5aab24cb7c1f15d148a87966dc0df9633c1d1bbae4ed23a2431ed4c3cb6c1773bb8b8a8877cc5effbfa619ecf8717d849ec7d0fd1651cc
- TLSH T1F4017B957CF3B020469B587CCA6FA414F9498A63146EE900F974885D6FE507FC2B74D8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target lib/rbx-api-origin.js
- Size 561B
- SHA256 51e39b7ef7d8c16c527cba6f0b7a974221448f7e07727c2db3d47596c5cc0a6d
- MD5 836dd3bff7e36fa98349661776199251
- SHA1 84a1da1904875b251a828322212832dda150c6e9
- SHA512 050f621d759ab4deed70900e97294603c8bc0b8c510e8642bdcf35dfd0ad7afc31792749feabbf3af350e2f1bf456b1134d5184ad0c52401fed945bbd793598b
- TLSH T1E4F08B661BE45D5740C0294881391E927A8FFB6B0708DC31FFE4CC991E8832392D8ADE
- MD5 SHA1 SHA512 TLSH
Score3/10