Overview
overview
3Static
static
3WEAO-LIVE-...03.zip
windows10-2004-x64
1WEAO-LIVE-...03.zip
windows11-ltsc_2024-x64
1WebView2Ru...t.yaml
windows10-2004-x64
3WebView2Ru...t.yaml
windows11-ltsc_2024-x64
3content/av...r.rbxm
windows10-2004-x64
3content/av...r.rbxm
windows11-ltsc_2024-x64
3content/av...t.rbxm
windows10-2004-x64
3content/av...t.rbxm
windows11-ltsc_2024-x64
3content/av...0.rbxm
windows10-2004-x64
3content/av...0.rbxm
windows11-ltsc_2024-x64
3content/av...y.rbxm
windows10-2004-x64
3content/av...y.rbxm
windows11-ltsc_2024-x64
3content/av...e.rbxm
windows10-2004-x64
3content/av...e.rbxm
windows11-ltsc_2024-x64
3content/av...t.rbxm
windows10-2004-x64
3content/av...t.rbxm
windows11-ltsc_2024-x64
3content/av...n.rbxm
windows10-2004-x64
3content/av...n.rbxm
windows11-ltsc_2024-x64
3content/av...n.rbxm
windows10-2004-x64
3content/av...n.rbxm
windows11-ltsc_2024-x64
3content/av...r.rbxm
windows10-2004-x64
3content/av...r.rbxm
windows11-ltsc_2024-x64
3content/av...8.rbxm
windows10-2004-x64
3content/av...8.rbxm
windows11-ltsc_2024-x64
3content/av...5.rbxm
windows10-2004-x64
3content/av...5.rbxm
windows11-ltsc_2024-x64
3content/av...d.rbxm
windows10-2004-x64
3content/av...d.rbxm
windows11-ltsc_2024-x64
3content/av...2.rbxm
windows10-2004-x64
3content/av...2.rbxm
windows11-ltsc_2024-x64
3content/av...0.mesh
windows10-2004-x64
3content/av...0.mesh
windows11-ltsc_2024-x64
3General
- Target WEAO-LIVE-WindowsPlayer-version-145f189a6a974303.zip
- Size 315.8MB
- Sample260729-2raqxsxtev
- SHA256 4dd551b21b7d023a50a686d7c1d2b5bb49bb2460a813875972bf68e8a757ba56
- MD5 08cc220f8c082341afd17f02169e62f6
- SHA1 3c1b13294cb6e02b3ea7138ac5ecdfee36cd98fa
- SHA512 a65a88448f032f04244ce646b0375fb03f0c616abeb35cf03674a2d6acb822d2f9e390aef3fdb1ccec244bb68c3913fcb012ee7476802c2a298dedb67f36d26c
- SSDEEP 3145728:hRYbIsE/sPlXLTlteugw88IYzCpXiOMOfSWMtQRBSOK5bl3PSQC72TpwjxS:bsdvLZgwkYoXHMuHViaj7iow
- TLSH T102F8BF0BF3814A76C95E4236C8E36721F335F4681FD287D7269C62253EB33985E721A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
WebView2RuntimeInstaller/.manifest.yaml
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
WebView2RuntimeInstaller/.manifest.yaml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
content/avatar/abilities/AbilityManagerActor.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
content/avatar/abilities/AbilityManagerActor.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
content/avatar/abilities/AbilityManagerActorClientInitializeIsLocalScript.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
content/avatar/abilities/AbilityManagerActorClientInitializeIsLocalScript.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
content/avatar/abilities/AbilityManagerActor_beta1.0.0.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
content/avatar/abilities/AbilityManagerActor_beta1.0.0.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
content/avatar/abilities/AbilityManagerActor_fullHierarchy.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
content/avatar/abilities/AbilityManagerActor_fullHierarchy.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
content/avatar/abilities/AbilityManagerActor_oldClientInitialize.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
content/avatar/abilities/AbilityManagerActor_oldClientInitialize.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
content/avatar/abilities/AvatarAbilitiesServerScript.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
content/avatar/abilities/AvatarAbilitiesServerScript.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
content/avatar/animations/humanoidR15AnimateChildren.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
content/avatar/animations/humanoidR15AnimateChildren.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
content/avatar/animations/humanoidR6AnimateChildren.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
content/avatar/animations/humanoidR6AnimateChildren.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
content/avatar/character.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
content/avatar/character.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
content/avatar/characterCagedHSRV18.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
content/avatar/characterCagedHSRV18.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
content/avatar/characterR15.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
content/avatar/characterR15.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
content/avatar/characterR15DynamicHead.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
content/avatar/characterR15DynamicHead.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
content/avatar/characterR15DynamicHeadV2.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
content/avatar/characterR15DynamicHeadV2.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
content/avatar/compositing/CompositExtraSlot0.mesh
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
content/avatar/compositing/CompositExtraSlot0.mesh
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target WEAO-LIVE-WindowsPlayer-version-145f189a6a974303.zip
- Size 315.8MB
- SHA256 4dd551b21b7d023a50a686d7c1d2b5bb49bb2460a813875972bf68e8a757ba56
- MD5 08cc220f8c082341afd17f02169e62f6
- SHA1 3c1b13294cb6e02b3ea7138ac5ecdfee36cd98fa
- SHA512 a65a88448f032f04244ce646b0375fb03f0c616abeb35cf03674a2d6acb822d2f9e390aef3fdb1ccec244bb68c3913fcb012ee7476802c2a298dedb67f36d26c
- SSDEEP 3145728:hRYbIsE/sPlXLTlteugw88IYzCpXiOMOfSWMtQRBSOK5bl3PSQC72TpwjxS:bsdvLZgwkYoXHMuHViaj7iow
- TLSH T102F8BF0BF3814A76C95E4236C8E36721F335F4681FD287D7269C62253EB33985E721A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target WebView2RuntimeInstaller/.manifest.yaml
- Size 164B
- SHA256 cd1e69be66551aaff3763c91e922de26570b1c0d515e917eada47fa1886588b6
- MD5 5939079fc81dfd7063792f1ec44fa7c8
- SHA1 2efd5928073243060f4eb058187a1ce236439765
- SHA512 803baf19a196b35a4d33db781c1c753a79a494f7253c3f96ed8771f0f9d37baa3f94002ae34fd5d335816727dec21089b774c9170c48838d80a1a080b9dac56f
- TLSH T1E4C080451565891771545F5B532B1B52D395F06250F1112058831384574157DD1CB3B0
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/abilities/AbilityManagerActor.rbxm
- Size 3KB
- SHA256 77fdf4f5c16c201cd5b5a30a37903a4f2d3463c122aab2b68485f27c848d5ac4
- MD5 0a0be697ebe8eadf3f482a2e99a324d7
- SHA1 070e1fd626acd619d9a29a4b9b89ada1293441a6
- SHA512 b4625ea4e0f227bd2ddf94fd0a83ca8dd001e50ec3562dd60c0173ac43c1a2ae766e0c5b65f7403b990fb894f94ad54483c1bf8b753663442ca6b1320e122b30
- TLSH T1266170FBE46A4973C244B373B45E59823320864F9282C32EC6DDD47B0C9D26A17EE52C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/abilities/AbilityManagerActorClientInitializeIsLocalScript.rbxm
- Size 3KB
- SHA256 dda1dacec6fb87c0347ea67aa1004b5ded0bfedebecfd0884dd5c49105d95100
- MD5 32b190383a93f20eeb1245e640daa812
- SHA1 a43b17d033303010fc99a48922d4cf80afe5e65b
- SHA512 2359dbcbbe7f2b73551dcb2ad2186e8f114b9cc173c8a3784bcfbd6ea52900a29afaf4c2ba24127eef58c6e7dbae61f5330cd971267344699fb565283cedb059
- TLSH T1E87132F7E5658873C544B3B7B41A89427370490F9686C31EC7CDA8B71C9E2AE1BAE11C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/abilities/AbilityManagerActor_beta1.0.0.rbxm
- Size 3KB
- SHA256 702307dd27b3a0fd9bd02295d547c1ebbd245c4945a03c2f2017c1e2f5028031
- MD5 d95773ded678c912ddc0293f7c97b175
- SHA1 96e1c8a65260cf11a360115428d208bd8f8368fa
- SHA512 e247524e02c472178e4355ae95ae5c0f62b9f1774cd1bdcc91aec88369f1e0ecae079d569d3dee0a36ad7f8ae94896aab289f0c0d00a27e543c4603625366e50
- TLSH T1E37132F3E5A5C873C1057373B41A858673700A0E9286C31DC7DDA8B71C9E2AE17AA15C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/abilities/AbilityManagerActor_fullHierarchy.rbxm
- Size 3KB
- SHA256 1ebbf349a4c8b9581d82a1340c5af4c99da10d0a17ddae9f734789403820ce29
- MD5 2898e275d165277fc437ea56d1a86776
- SHA1 a24a5dca4b940fce772924d9120c9256f6ca6307
- SHA512 637ed974b1ec6524e29e1c56fb124535cbee22e27e3559eebe419ae99a819d4505b7c4e0aa8c178f84f7b61a22462ea4217abcf23f50c5b4da3b427d018343d3
- TLSH T1438174F3E5618873C5447373B41A89466731490F91C2D31DC7DCA8B72C9E2BE17AA55C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/abilities/AbilityManagerActor_oldClientInitialize.rbxm
- Size 2KB
- SHA256 bf24a2bc787927ff39743551aff8437c9f9366edae3dfab0029aa081a181d7f8
- MD5 d9173cd1a84703fca8ff43226fcd974e
- SHA1 021050fdf14ab655855698e036c36c7e03d16a00
- SHA512 e9340b81cbec7a2f1773481e326c3cfe4c36870a3144a4c7ec3deb410f51ce553f8a855edb42e5dc0d7e93aacfbdd9501cc6ff808000b2c03b9efdf9eb25062c
- TLSH T1D75125FBE5658833C144B373B45D49427370490FA692C32EC7DDA47B1CDD2AA1B9A11C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/abilities/AvatarAbilitiesServerScript.rbxm
- Size 756B
- SHA256 0628c4c42b04fdd3f06de244fb64d234e2f64d30bf649914723bb1d40c9dcab0
- MD5 523796c65b80027171e76701220cd1ad
- SHA1 6099ff45c3f2fffae1b287cdea5d8e4af7218865
- SHA512 2f0dc05535ccf2d71393d1db4aa7d03c00ec7f6d23a476d5ec4622b60b7cfbf9a3647bf8e1441fd5f08eb8d983ead85aa82e482b85986a96e8729cc253f7126c
- TLSH T1FF01ACF3C671C033C54071BBB51A8A5573310529A292C338C3D56F731CCE0A62BD45E9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/animations/humanoidR15AnimateChildren.rbxm
- Size 2KB
- SHA256 d3bd21b14670923c793e4d08d6be1f6306b2c4d6aac05b8f0fc11c1358641e40
- MD5 2f0a44ee2d2ad5e09551b0e8413ae781
- SHA1 756668c52f4c63a71e09131ada33cf57a992b7dd
- SHA512 7c8c09d64bb410a7ffd1f698c95a8293997e9758c50ba770db76675d29e567071112cf117791120236714fc9e83ecaa7ce448a910d462da371c7172e56715820
- TLSH T1A2419377E3A4D893C604B272B00A04E2B3312F5852B2C758E5D42973AC8827D2FD252D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/animations/humanoidR6AnimateChildren.rbxm
- Size 2KB
- SHA256 41a1be5af0678d17fc5ec860755455917fd3700101136938d0c5b437b26bd7d9
- MD5 1cbb67d2844fde04838730b0ecc9415c
- SHA1 7f6620597fc433bbd0d399fbe6959794b5eccb01
- SHA512 be6ec120bd67ca42446d6f1dac4eb53a689b574b3703cef3190e0738d4900fce67ba17cfe6371dcfa40d2a058861aaea9ea1bc1e2ba96d27dd60768b4e19c71f
- TLSH T13141FEFAEC388963CA4872B2740D589273314F5A1692C729E6E878B35C4913A1BF5519
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target content/avatar/character.rbxm
- Size 26KB
- SHA256 d8fc2950ab9fa5762838d3c09af5e35d01749cbd5d4b67e1b829091619291208
- MD5 dd57193b0b60e1caf22544e05bfa180f
- SHA1 8abbfa60241ee266cc76bcfea1cd7bc1fadec4da
- SHA512 fdc4ab94fa50c34d9a751aa250b0936416d571163e0846602f255bb3ec59984bfb015310457ecfe1fcd893cadf912d8199f29cf3c0a4a6d774332d15ea34090d
- SSDEEP 384:aj61+KQmElpBpbpopsWGYipXpAZpnpBpR8prpyp9Y1Xp7pqUd1dpPpdi13pN31ae:ajMI/NysDZA3p/RGdY9wtqUfxdkN279C
- TLSH T17CC25704414D3E9E49BA2EB1CE0A7D9CE89F5EFE25AC22B170FFFA544C5945418227F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target content/avatar/characterCagedHSRV18.rbxm
- Size 13KB
- SHA256 f71d3a1e64882139f0f8731722ee61bd41d26db99a0d90a692bf9cf8b989b645
- MD5 8fa673eead79ec2feec068272fbb30ab
- SHA1 dc26ab5e933ed93e449ef2ddb0472e4fc8a4ce14
- SHA512 019cbd70e64ced44ab63d7322c03b32e5d5956f65a101b452a73179368f2eed1fcbe6b7caf9e20bfe53e652329fa89aa30c484f4be0f88a2b8bc9fb4e7a93d4d
- SSDEEP 192:OZm+N+lfDepQWsB33PJGfeI4xtw3DXvhN0ta0UHcZgVyxKOM/HpOp:OZB/p7c33PJGHqcXYtahcNKJOp
- TLSH T1D952C5FAFA10C8B7C899B234714744366A304B4CA745D31AE7CDB4B3698E96D3F9A205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target content/avatar/characterR15.rbxm
- Size 12KB
- SHA256 e841643e20711509082f48643d03ffeae2596391d17f4a49f26e3397d1f8c017
- MD5 6649034e05ac771e2ada13012e128919
- SHA1 6c974b73b859332caa29bd2c1d91531a505c734e
- SHA512 1ebc69c738a0b78094e5a2bc39c3400e3cee1b0fdb773fd3d986e0f2e4ca8f8d01b8c50162ef495179b7a7c7f08cba6036af34db785a2a93739f4113ff50ad6e
- SSDEEP 192:U1bFguZfQepQfnZLeCIM6qwXQwbWHdE9JCJG5ToscGJ:U1biSp0ZLeCoaHK9JPHc8
- TLSH T1FC42B4F6FA21D96BC49972307186446236314ACDE651D32FD3CC34B3B88E96E2F88649
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target content/avatar/characterR15DynamicHead.rbxm
- Size 15KB
- SHA256 96fea8652ea38a9bd7f071d2f8812b6f793d27bd54166da9671c3053a3e3c65b
- MD5 a14218a6d342fa0cd7e5390dfa7999b3
- SHA1 c5de91b373b7c0cc25612e8ccad3fba64a216135
- SHA512 5cf47cbe8b44bccd3cd7fb9b0abbe0c4088b7f531728c997ede592dcfff73e3f7b055ac2b0ef04ff8b84ec78c62bedf3e6df5f54c2bcb608d981fbdb52201674
- SSDEEP 192:z+nbCBmIoH5OtepQnd3PlGwWeIt+B4kaYvJh0Pa0UHcZgOxL9IlGSxOpopj:z4BIoZLp6d3PlGwS0B4yIPahcBSMpopj
- TLSH T11762C7F6FA60CDA7C8987271714A446226314A4DA202D317D7CDB4F32D8E97D3FA9249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target content/avatar/characterR15DynamicHeadV2.rbxm
- Size 15KB
- SHA256 3a3ae38cd53b0f4004d7980245ca586c9ee7d420bd38705891f9fa97e2405df8
- MD5 18cca7dc0ac12eb0054196cfb0bf3237
- SHA1 abb7f3155c92dca60bb8ea7a7c1ed423f261a2b5
- SHA512 f5ee3361dc3fb3fd515d68e20a0347d43f0734000249a3600655df7923d6e9a2f05ada3d27282d26f17447fef6d3a318a79b6af9e25551fb7c31955f1fe48126
- SSDEEP 384:HZ6tIzZLp6e63PlGw4rHTKPahciRMAotj:HZ6tIFLp6r3P2DG0RRo5
- TLSH T1BE62D8FAFA208DA7C8987270714B84662631464D6305D31BD7CDB4F32D8E97E3F99249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target content/avatar/compositing/CompositExtraSlot0.mesh
- Size 817B
- SHA256 d49a6c4733b1f95242958d0df6489c5eea5872a0c7e181c54c93d74324439d51
- MD5 7eff866016dcdbb1b62328a8c420d7e2
- SHA1 80ca518891ba4f8e2b500817ecd6f8ace831ea81
- SHA512 7632b40585c780bcf478f10782443755891c988d93b73b1c604948f1fa41bb0854c7f7f56089e5f81d9b2f62aff3d58e731ed89b4e543b8b0c1b38a372a3c13c
- TLSH T185014F416ED05D8EC130563B87D34F90C734D6C845720A3713B8A82C9CC634E2586E65
- MD5 SHA1 SHA512 TLSH
Score3/10