Overview
overview
3Static
static
1CoreScript...pt.bat
windows10-2004-x64
3CoreScript...pt.bat
windows11-ltsc_2024-x64
3CoreScript...ar.bat
windows10-2004-x64
3CoreScript...ar.bat
windows11-ltsc_2024-x64
3CoreScript...ger.js
windows10-2004-x64
3CoreScript...ger.js
windows11-ltsc_2024-x64
3CoreScript...er.bat
windows10-2004-x64
3CoreScript...er.bat
windows11-ltsc_2024-x64
3CoreScript...pt.bat
windows10-2004-x64
3CoreScript...pt.bat
windows11-ltsc_2024-x64
3CoreScript...ipt.js
windows10-2004-x64
3CoreScript...ipt.js
windows11-ltsc_2024-x64
3CoreScript...t2.bat
windows10-2004-x64
3CoreScript...t2.bat
windows11-ltsc_2024-x64
3CoreScript...le.bat
windows10-2004-x64
3CoreScript...le.bat
windows11-ltsc_2024-x64
3CoreScript...pt.bat
windows10-2004-x64
3CoreScript...pt.bat
windows11-ltsc_2024-x64
3CoreScript...ipt.js
windows10-2004-x64
3CoreScript...ipt.js
windows11-ltsc_2024-x64
3CoreScript...pt.bat
windows10-2004-x64
3CoreScript...pt.bat
windows11-ltsc_2024-x64
3CoreScript...t2.bat
windows10-2004-x64
3CoreScript...t2.bat
windows11-ltsc_2024-x64
3CoreScript...ngs.js
windows10-2004-x64
3CoreScript...ngs.js
windows11-ltsc_2024-x64
3CoreScript...ols.js
windows10-2004-x64
3CoreScript...ols.js
windows11-ltsc_2024-x64
3Libraries/RbxGui.js
windows10-2004-x64
3Libraries/RbxGui.js
windows11-ltsc_2024-x64
3Libraries/...er.bat
windows10-2004-x64
3Libraries/...er.bat
windows11-ltsc_2024-x64
3General
- Target content-scripts.zip
- Size 967KB
- Sample260731-g1symseb43
- SHA256 7ddd3b37470a03060378f9318c2eb1107ab69c2392cb3d4cabd1717e6e6cfc20
- MD5 070df6ac9076978492f14c260e8317b3
- SHA1 4bb2377bb7d1c38b8ed5936fdeea806814aeeeea
- SHA512 fd14e7d465c3bfef242d02b4f9473de004978e15e447c8c477a8479e4100d6da20e12af4db21bfc882f4a3390549e0d8fc615150a06ccf3d683a48e81f3ea00c
- SSDEEP 24576:aFY/EoxYrzfKRnAx1lrYEzsQTN1oq29K6BRzf:0zsQTND6BRzf
- TLSH T1FD25E95DFE0F12B44C96F269E4774441FD7ED03120262288F1AA54ADB0C866D81EFAFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
CoreScripts/BackpackScript.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
CoreScripts/BackpackScript.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
CoreScripts/BackpackScripts/BackpackGear.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
CoreScripts/BackpackScripts/BackpackGear.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
CoreScripts/BackpackScripts/BackpackManager.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
CoreScripts/BackpackScripts/BackpackManager.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
CoreScripts/BackpackScripts/BackpackResizer.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
CoreScripts/BackpackScripts/BackpackResizer.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
CoreScripts/BackpackScripts/LoadoutScript.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
CoreScripts/BackpackScripts/LoadoutScript.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
CoreScripts/ChatScript.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
CoreScripts/ChatScript.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
CoreScripts/ChatScript2.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
CoreScripts/ChatScript2.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
CoreScripts/DeveloperConsole.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
CoreScripts/DeveloperConsole.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
CoreScripts/MainBotChatScript.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
CoreScripts/MainBotChatScript.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
CoreScripts/NotificationScript.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
CoreScripts/NotificationScript.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
CoreScripts/PlayerListScript.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
CoreScripts/PlayerListScript.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
CoreScripts/PlayerListScript2.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
CoreScripts/PlayerListScript2.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
CoreScripts/Settings.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
CoreScripts/Settings.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
CoreScripts/TouchControls.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
CoreScripts/TouchControls.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Libraries/RbxGui.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Libraries/RbxGui.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Libraries/RbxStamper.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Libraries/RbxStamper.bat
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target CoreScripts/BackpackScript.lua
- Size 28KB
- SHA256 b84b1395b5ec61303e21ab0310ee7eb35a9ba112bf31ac014f8c7991fb9e9821
- MD5 1131a39e1e8d6ad6716bf9fd4bff5fd2
- SHA1 a3309b8be239e9328ecdefc11b94d06c519a7630
- SHA512 ace425334bb12d4955cfa29fd4eaffaeb7d30205c91dfef83da5940ffcf8507d9b5710a28390b76cfa4b0a04820f43a068cfc1a27b8053aa783e0e28c45ede01
- SSDEEP 768:aw3skJcMvZFhmBNBn1ZaYWyEC+eErS9dckxYSskcpqeFjxrMYCLU1RrzfUPkdenj:awckTFY/EoxYm8zfKRnLkx1lrY80V
- TLSH T132D2C81AF10E35F21C2BB1A8F6F248826A2FD071712523B4749B253CF19D62D42EA7F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/BackpackScripts/BackpackGear.lua
- Size 25KB
- SHA256 bb2c160821be4e932e4f1fc09e11d6f15905040bc44ea9f0c968c93c6471263d
- MD5 f5bc9d5bdf932e3b9ae11116edcabd44
- SHA1 0cef853461ba58ebc580b8a910aa560a29020686
- SHA512 e4558a095c018556e3f64355ee4e61818093159d631f55984b0831215a829a9f7af77f73ee2d72c1e40517e2caedd08b8bf5063baa73656b916f50752f38a29d
- SSDEEP 768:hsCiJyHCFYm8AlukHy9KHpH7D3yLv8zBtg7/rh9AOBIi+o/30GIhsVegIMMoEd+c:WTamZb56Lv8zBtg7/rh9AO6k30GIhsV2
- TLSH T141C2639DF11A33A4ADFEB168D1334154BD2FE02530356250F55B98E560C4AAE80EBBFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/BackpackScripts/BackpackManager.lua
- Size 12KB
- SHA256 d5f9c7805a9bc69a6069ab358010a9aae67d2ac605e8df00a605c1d0b111ccd6
- MD5 bd9f2547a99251a58714e2ca11d69757
- SHA1 f98d97bc718fbde21f2556e34348a909d1d2bbee
- SHA512 f7a0ddca9720178857e9d4458965882b464cc9c4252183f13bdad164d617d2248c45ad680f09246751632da92338b7fea0a98a737cd3a3abd286d3fdea0ef0e3
- SSDEEP 192:m+4CiJgDlnU38E1umamW5u7vQv5fhRoiFChj:m+4CiJgDq38E1umzW5u74BfhRoASj
- TLSH T15242954DFD4331AD89B6F0A9CA370181F93E6879202A2541FA7598E660C497E00DF9FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/BackpackScripts/BackpackResizer.lua
- Size 28KB
- SHA256 a722616e27fd10eb6022960cbfe8d9de5e9d302553a74b8657536578b8a520fc
- MD5 4aa9fe418a04cbb6c8a7880aecb4f7b2
- SHA1 c06248001ae6bcb3393ad94ac72d5100e78ff247
- SHA512 5d9ac7939d9c34369687289e1ceaab198fe42bfb463cfcebab45326d058c3dd273874cc701aecaa31e9f29898add305efda66bee8b0354342e2390da15987f91
- SSDEEP 768:h4C4geJolukHy9KHpH7DX6Vv8zBQg7/rh9AOBI2Hbq+o/30GIhsVegMMMoEd+Z2B:uCb5SVv8zBQg7/rh9AO62Y30GIhsVeNT
- TLSH T1ABD2745CF01A33A89CFE71A8E1334154BD3FE42561356250F55B94E9A0C4AAE40EBBFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/BackpackScripts/LoadoutScript.lua
- Size 31KB
- SHA256 f38a498b8fa9fc41b78334400e1984adf98c13ff93de94250b3c414e03faaeec
- MD5 b0d764383f4b15d7ead51eb44da44b4e
- SHA1 c1fe4542ecb5abebcb7d582b543c357502b8fe00
- SHA512 18939cfec49f5ed0d46fc70502bf35e97547225aff826de825c95a4c0c6f88066032829378cf9e189b60630f7678e884be9f2720db49bbf10932d463d3104719
- SSDEEP 768:h4CiJgiUiLTtNSLSb25IOA5AYY1sL/uWNYhIZNo9LGtTE6:uTnsSb25IOA5AB1U/uWNYhIZNntTE6
- TLSH T1ECE28459F04E229C9CFA3D98C5F38094B93ED47529262214B1DEA1E731C816D40EBBFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/ChatScript.lua
- Size 31KB
- SHA256 8aac5ad45af889b55def6c6714da00f6b4813ba4faba6dffe66e9d7b0c6b4cd1
- MD5 a08968ea05f544cc44a9ac656f1faab7
- SHA1 a3d757de20ed3c4ec6d0ccb57a5740b6a6225d7d
- SHA512 6ca43c05a71eb2f54900cd341ed47ea7c5c766a37f2b3fdd92a18652368e48bb178b4d2706d7368bc6e67e6156f710eb03c8bc5ca2689dab57b737ce79b33eb0
- SSDEEP 768:RQA8+ZacvmfDOu9tDy9DPjN6jOMMArCOk0gh0I714M8dfHfuG23:BZacv6i20lArCOk0gi64M8df6
- TLSH T172E2777A7B9F126D8453E21BFC361401FE6EC431911B32F9F4F97069609854D82AEEA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/ChatScript2.lua
- Size 63KB
- SHA256 2c92a768a968c4b3d845bfe80a02cb2924dc5f4134f271160d11c92679aa3ee5
- MD5 72d1ad30b35e1c954c892e71db34002d
- SHA1 aa0845f6829e7521675a507632f81b5226ebda54
- SHA512 0f6cf3890252d5ddc2e1f79bcccbe1a0653db57410fc4ba5d5771ce829402ab36a8b78d6630bf63625c70a1e92110fdc65e965da1f0e8e225b8bebf95816a3ed
- SSDEEP 768:wPizaI6EMRrJo1nrBaqwi4/HQEmqyUOxNfM2iBrQHDcdeuh0rv0rirHM2HLEKxNH:wvI6EMRrJ7ZdxrQHDc4AuxzQ1syfm
- TLSH T16B539876F24E01685D77201FF93A1941EC6FC0325126317DF4F868FAA9982AD43A6FB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/DeveloperConsole.lua
- Size 38KB
- SHA256 e76eb82bbbb04587bd656d6a5928d6e056ba86b833e143a12c925ab99c20932a
- MD5 e9e441ee47151c694e28233a232d1cf8
- SHA1 65dcc9472d78ee18368fd0cd37d405d51c27c66d
- SHA512 7f5bbd68b21fb64c81c381a18360a772a14a3fc66238b5de387becca1f1208bcb216efea77184aa6fc7de18edfc3c16670e3e39ebdd4b5eea471c9fd849024a2
- SSDEEP 384:o8ohiFoA0zI5GKvosAIy0LIsjgrYE/T7Nkpg:34iFoA0zI5GKAsAIxLdjYYE/TBF
- TLSH T1AB03A629F51B20E85983FB5DB8716E00BDEFE01521193ACEB87D9024E0C875DD3EA9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/MainBotChatScript.lua
- Size 16KB
- SHA256 35dff61de60311c38a78dcdebc04e76875bcc1d668015fedc2964b24f4f3ff0e
- MD5 f31f89d24ae6318bdde177f213e16d6a
- SHA1 4f34065d66aee943c4ca152cc11b1d43f900286e
- SHA512 0b2595e41e10f79e3220f2987fc3f1368bf1bcc3b635745a25f6e56ec361126ae088ec37777042225d39bf28838302013ee18d0985f9fd17193b715ad7b16144
- SSDEEP 384:mhCCUOiZpkO5vbkNOPpjawPOWQeF2h1K9O/UBvtArA9JkK3fi:mhCCUO4vbka1bWWQxhCO/kCkad
- TLSH T18A72845DB22E26A9DCD72E37B4330884F1738420362E6289B59F08F5B15565CF1E2BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/NotificationScript.lua
- Size 11KB
- SHA256 4ce5ec57d79385be2f494083df17376673905b8029294914db99396cbf59e4b6
- MD5 601f6e7cca919e01e0d4a9e4ac05027c
- SHA1 386869c867edd8f77a8b7eab5e729b7c2d4c6ef2
- SHA512 8b98871c5d055baf67c984b6b52e2e2b0a5b389663eb0d14eeb425a662b2d8c86c857eca28f83b4bc24c7360ce7a738f8bfe07a7961fe0eeb336b3ceab2a5257
- SSDEEP 192:eiCmhspGrS4Ss78ZwBxSdgMmSeLSzdS2G6wSy6wSCD1ArSFc7+SZhv:eiCmhspGrlt8Z0zJTL2kVHVJDirOc7+I
- TLSH T1A84294A9F95F72B088ED12F5B4775605BB3E8470712F2824F6C969B2A4CC9AD00538FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/PlayerListScript.lua
- Size 90KB
- SHA256 6f7128b71f40233f801ecc93950997bd5b3356ca7cb6ec9a45168a8d232781eb
- MD5 5a9549ed774808b8134aba008cf569a1
- SHA1 1309020c293798d1c671e59f99542fd70ddf3608
- SHA512 3739039f800bc6f2bc16d51a84a9af00a56f3459130341dcdf4f749ead476d7dbfd47a151bb049db385b56ba8fd6adea2142bd7101b52cf91d93a1c2a6a7e357
- SSDEEP 1536:R1A+ZxScV7hOqCDuF5eYSIg1VR99KFrD+DFK26iwlz/O5W/bMrOs9qMKOPs33xLu:s+ZxSyhF5eYSIg1VR99KFrD+DFKPiwlo
- TLSH T13F93E89A7C1A13748CC7F285F8778510F939D026311626C4F6A1E2BD708896ED1FFAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/PlayerListScript2.lua
- Size 57KB
- SHA256 6a51c75728301e0804f92d0d572d16e5957d434e631234f9d1e2582563f166eb
- MD5 d837e1f5513fef992698e6e318381696
- SHA1 f03018f9d91cb5bf4113926c27692be2eecb63ad
- SHA512 3638de7f8016fbbef8486e70029c9666fe1f6ede1268dccd27c61b4090e85d50d941ea838aee44577c6feeeb6b6197dd180644bd2fd4d5b5c282eb91d9a18301
- SSDEEP 768:E7w7eEF6rNec1QTEr3tCwB4In2gvyEHxzhoqT6gxhE/jd8sAoRCb0AFFnnnwQ+Wk:McmN1oHH
- TLSH T19543856AB42E12B08C4D72DAE4B30C117DBEE051311522CCF56A966DB84CA6ED4F7EDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/Settings.lua
- Size 93KB
- SHA256 96aa5195fc5ed55e6590ed0947bc03e5f5ab20f505dac9060b851aee72d08ded
- MD5 fd76013328eacbf46e863450a0764751
- SHA1 8d083d724925a0ea962325668e34045c92103a88
- SHA512 ed717f4506a0bf4cc9d92b4dda5a3c406990d440d5e5387af6376a7f543bdf8d689f918d09d995bae4edb43cd3ee5ea9158266ffe4ad3fec55b5f9900f240a36
- SSDEEP 1536:fG1/RJcle6lGJQjgFPGTA7ogmaamz5cwVz8szTo/2LxVGz9s:fGfJSekGqgFPGTAEgmaamz5cE8szTo/+
- TLSH T14193A76DFD1E22E54C5AF769FA770900FC7DC434582A356CF09A14A9A4CC8AD40EE1FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CoreScripts/TouchControls.lua
- Size 61KB
- SHA256 6d0c3f7c89b6fa621f0f794c5757ffb9f74ce8e2a53ac97c4b0a8c371c86ff5c
- MD5 7af24cdcd1853490d6006fa45d6cf07b
- SHA1 9cd1eb1ae4b4f08498627d224a80f29495c83632
- SHA512 a31fed32a54a3f6541d42176c3a17a73e0b06f6b69a5807d119f888430b8dae6c043c91e5b46d138924ad088c8ed1fc095ca9cf1719ab7ec0d74f1514609f848
- SSDEEP 768:UDcDQYZp1Lu8rKWno941QWY1qkK+enblX0B2w2DEHLdKcdLaEIjnhcDFOUmXO/ZN:B5OAo9IcDlGO/ZYUb
- TLSH T18653745FBE0E52A10C82F1A8E8B70004D9BFC07125297989F69D516DF94AA5CC3CEBD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Libraries/RbxGui.lua
- Size 130KB
- SHA256 e6058ccb89e347da211b257a52668704e36bdff0bf0c87945da1ff04e43a0a9d
- MD5 b9d9841a2924ac8f91ff70ec73bb5968
- SHA1 2d53863ceec9e3363841242a98ca2b6d14d2a78b
- SHA512 05cbd458283743a5a306ed1dc8110247d6e93c417153a740098f749ac2419f700d41b91ce7cd36abb060f9d4670f4f4286f2a1da21eea071794ab20370234005
- SSDEEP 3072:6Vk3lLcH9AeZ98EOvSBio7rptdlshnVrIz5xAndmXZS8a7hyhbmX2Y5T56xVSjNK:73lbnVr1gXZPOhyhbmX2Y5TsxVp
- TLSH T10DD3C75CB20E2294594B72ACF5B7454178BFD065B027364CB19B58B8A0C5B3E80F7AEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Libraries/RbxStamper.lua
- Size 82KB
- SHA256 f05875439dedc58ad6de6a78cac6217f392a968eab58eb04d76b77da9b84675c
- MD5 312fb4cff30d9b419617cf25c4bfcb36
- SHA1 9d90fdf904328c495580229cc68645a9e6f79182
- SHA512 2523ec34fdaa99b7158b33d9c38f16525e1066c83099b7dc62442cd1fd30e83e5263c6a8c56029121b0e52d9c7e5e42e1062cec18d932aead141b6c28dd31cae
- SSDEEP 1536:6V6aLTncCP4N8SxDWTQEJD4ioyPYlf0jjnuvtuEFboV/6B5kMLXb8z:6V6aLTntPu8SxDWRoyPYlf0jjuvtuGbU
- TLSH T1A283B50DF74F42F59D687725C8761082FD2EC4B31D6B0580B8D896393485E2EE26E9BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10