580abad11fd46279ba70b39f2aa506b8f256a6ab89e3895dbad3091f243c023e

Sharing

Copy URL Twitter E-mail

General

Target
Exoliner_1.2.3_x64-setup.nsis.zip
Size 9.5MB
Sample260807-ppnhsafh42
SHA256 580abad11fd46279ba70b39f2aa506b8f256a6ab89e3895dbad3091f243c023e
MD5 d70092c1b9e64b7bf522ee50e991cf56
SHA1 e6de105e49c32e4b7333b2c098dd398b677ec8f9
SHA512 f008753ca2c4d548c5fcf4f2ef083d5cddba3a28d89e730178267775cac4e5ff84f6b6cd10dc5d737d6b7b7b3c88505a369dcb74f206d481465f16f9cd72c5ee
SSDEEP 196608:2ySbvxpPLLBvR6UOtbYWCBsTknwom3Q7aUjN6WO8Wpd8V+QxO8rltIFb:2ySbvzPBvR6ssTknwo1aYbOf8YYlt4
TLSH
T160A6331BA511C6E7D1909738EAF1E900653D29F924661F0DE32C37A9DEDCE90E71E0B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Exoliner_1.2.3_x64-setup.nsis.zip
- Size 9.5MB
- SHA256 580abad11fd46279ba70b39f2aa506b8f256a6ab89e3895dbad3091f243c023e
- MD5 d70092c1b9e64b7bf522ee50e991cf56
- SHA1 e6de105e49c32e4b7333b2c098dd398b677ec8f9
- SHA512 f008753ca2c4d548c5fcf4f2ef083d5cddba3a28d89e730178267775cac4e5ff84f6b6cd10dc5d737d6b7b7b3c88505a369dcb74f206d481465f16f9cd72c5ee
- SSDEEP 196608:2ySbvxpPLLBvR6UOtbYWCBsTknwom3Q7aUjN6WO8Wpd8V+QxO8rltIFb:2ySbvzPBvR6ssTknwo1aYbOf8YYlt4
- TLSH
  T160A6331BA511C6E7D1909738EAF1E900653D29F924661F0DE32C37A9DEDCE90E71E0B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Exoliner_1.2.3_x64-setup.exe
- Size 9.5MB
- SHA256 48dea9380e5228fcaff0c29a1ed6c0be858a353aa9182000c5b5372421f5255f
- MD5 2d124bb0adf8caacb4de0dc1da4a04c0
- SHA1 abf1408945639d1472b9613b62f992f9f511018f
- SHA512 e2665665f9f0711a2d1b6337fbec97461cfccf2e5cf19ccdcc5916d81fadcf513a05ae96acf66b589abd14f0cbe1c0802b8348a0f36e48f781263c3424b98936
- SSDEEP 196608:3ySbvxpPLLBvR6UOtbYWCBsTknwom3Q7aUjN6WO8Wpd8V+QxO8rltIFj:3ySbvzPBvR6ssTknwo1aYbOf8YYltw
- TLSH
  T1C4A6331BA511C6E7D1909738EAF1E900653D29F924661F0DE32C37A9DEDCE90E71E0B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral2
- Target
  lua-language-server/locale/zh-tw/meta.lua
- Size 40KB
- SHA256 295f1d5f611a6f404dc3caa81568e33eb08748ec62ae8656ad103fc6d7e44b22
- MD5 27ab7245737418758bf0f80f4fb559dd
- SHA1 0cbc0dc43d3a19afd4933e7e27c2305b48625f5b
- SHA512 5ad52b51919306175c3b9b51124b0faeffdf6c419092d47a743d0cd704cd5433384862d4d4026a421af7def740014aaec50279ecd969bc0942c77198ae2a5f8e
- SSDEEP 768:ZQu86Qemec5ftZemt7gzM3uTObPaWoip/Q1/7TdFYKjIWJV5L56gDMMgz4+je3LJ:ZI6OZemt7gzM3u6z3oip/Q1/7TdFYKjH
- TLSH
  T1F003F63206427BF811C3E3C26F8448576BA01D265A37959DBF5D07F2BB92EA1403AF97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  lua-language-server/meta/3rd/OpenResty/library/ngx.lua
- Size 179KB
- SHA256 b225a898138ffc7e83917ce4d8f9eb220844afb757074979fcd38bda05d137ad
- MD5 5aec9ad555c18b72b95ba955d98da2fb
- SHA1 2f8fb1ecbfc8b4f623b4f90bf11f4e438a6c60ad
- SHA512 dc87d23a0c5b1bf96943f85acec6df839d5f3868712af1caf22e822780d3e683c75510ca3785e485b94b9c2f66013768dee1dfb365c92a2996638073a162d7dd
- SSDEEP 3072:Vkl0ZUlI1vkOueuFwW7TBCv6sQ2K1TrTrBWKTmYOU0ei2eH6WRc86JxTXTRVrD/l:DZU0vkxFwW7TBCv6sQ2K1TrT9WKTmYOc
- TLSH
  T17904A54A7682E3760AC20333650D63C0E716C064373125BCB8DDA5EB3B76669D2FE6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  lua-language-server/meta/whimsical/rule.lua
- Size 3KB
- SHA256 5a700091fbf45de8b77578ea053b85817fca6f91963b4d941bc9331687720a6c
- MD5 b93e71dae49b5df53a90134931ef2bf5
- SHA1 8ac53b95921d43b78be44252d0764e229824a085
- SHA512 648a0a8889b9fc4ca224cd4263e6213522990753b6205959a1918edfc974f1b6139a919e7632443a31335a7748ae87dbddb557d308ee0fde2d07aeccdcf97b95
- TLSH
  T17161D849388260B476F3D856CE1F3617E02A5943065C02A874BC65D65FB09ADB6F8FF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  lua-language-server/script/await.lua
- Size 6KB
- SHA256 61bea73f3e244a7345b3c1c704f6fa304434f725dfa63f22dbf32627f5eb4a4e
- MD5 88b8c25095ec36256251473ec050087c
- SHA1 f043e1935f1f4d8ec333d11d1a476a4b337e5d7c
- SHA512 6548cb88a5112de646bd488e0390fe97473a874425ad3bdaf460168a502cb070e3eb458e189bc12d42d0dd881c22742354e0383eefb62dc4c35ef5b30dc912ac
- SSDEEP 192:lD3Msxo2UnNM4qVacrckn7+quKzjNmCt2:lVN/mK2
- TLSH
  T15DD1038AAD97717098F2D72B484B2061EA280247363D1565FADC62D63F3019CD3F9FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  lua-language-server/script/cli/check.lua
- Size 3KB
- SHA256 dd24d195f912c2baa330aa360abfd74999b8f7f4447de61356e6db8d35d99364
- MD5 06bfda2a600cc5b094ab6ca477ae9f40
- SHA1 15188bd1a546fca443e364c4c840337aa77d4eef
- SHA512 eb1b549066220418e0e1eda86bab7d639d1f029dbb111fbaf2c17823d0af7671b9e8300b72be11460615228f9164be994ed91c07cb435435be1ab9f70fdfffc7
- TLSH
  T14581D022698E96F0A4F68A5E9C863802F7179653075C0268B6EC21911FF1E5CD1F3FF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  lua-language-server/script/cli/check_worker.lua
- Size 8KB
- SHA256 38d8477e64d05b6168193e49ec07f53d418e311072de39d25fa93e3b412b4d57
- MD5 c19f08058564e4664e2c297123524ff3
- SHA1 2274fb05cfcd6f226f367080175dc608a5609322
- SHA512 a2bf1676aa82d31cc28ac814d4f7a080d7a51d39da7072179ef72cba12aac197920382633d59ede17424be34a8b61321b180f67658cdff714e058240238b7f63
- SSDEEP 192:nzSlEhUGMuFtUUM1ZV0i3tLaqHDqIHyEox:nzSlEhuuFtUUM1Ai3txCx
- TLSH
  T1D5129853AE8316615CB2C685DD8B9405D722826312692256BDFC62D41FB0E6CC3F7FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  lua-language-server/script/cli/doc/export.lua
- Size 13KB
- SHA256 6dd2d1609936316aa43b2300e8bc5e4a20e1fd8027c81827ec47d629e342222c
- MD5 2199db41f348ea20028bff7336643dff
- SHA1 0811c90e1c26f421c18a6c6d90dcc2ba421db5bc
- SHA512 290fa32c4661fa94c5af3947ef75b24af6b1e0b583d59f268d5943db3beba589528027954f25501a9308dd6d6d71827e43a48b4a6e1c60f2ed4e714774478486
- SSDEEP 192:9uPaJ36Eg8abD52LNxaHVFw8TEmA2UzLCeDDHk6co529KoKMqV/VJ8Z8QYbllZxD:9kaJKEgpRLPECuDE9KRMY/0Ex
- TLSH
  T13252615B2343B0F22CB39354966FD041FE114213B91D2499F2AC86B63F74A6D45EEE2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  lua-language-server/script/cli/doc/init.lua
- Size 8KB
- SHA256 ec375d4e99f5289d6941930ae9b32f75c5d4a28385d553acf4ad6b7cd3fd5fab
- MD5 7a3c0c4cf64e80c23b634eaeea49eba9
- SHA1 cffc701bde866d0a0c5ccabb55a3f4cffccdd626
- SHA512 a3fa3de9b7d0408dacf1c7c49bd1f7a9c3ef4220afe384e852584765cf31f8b8c5c51d8752976bdfdf7f0abd8ef2986f296f88a4d4f2678172befc8857648a80
- SSDEEP 192:N09SAPikPUkFq1IpbJ1C0k9glvS/wNaVgSMms/NWFDcFZqH3H0e8IN9:N09SAPiEUYtSwS/wIVp3/oeB9
- TLSH
  T1DF0275876AC6A133147782C4DD9F0444EB52858311292096BA7C92F45FB0EAC87FAEFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  lua-language-server/script/config/template.lua
- Size 20KB
- SHA256 24c21ed2963d1e9ba41c920044fc746576de6390c5ebed3a03536693b66e7a5b
- MD5 6b0425cdbe51e8b952d1ac241dc8ece6
- SHA1 ae9b5784a4a2a122ca7bcdebcdd3131f52bebffb
- SHA512 385bd4af97768a2dd6811dc546d0aa0725b9209cd5ea26eef17eda14ac1c09d00e56fc23fdbd3cb02f51bcaa59e95ec6b2f5282e36f2313094e34006fa590c37
- SSDEEP 384:vi0KLiQC6hTlQN+AnE+h/zugDnJyeNUUWoZJIZUFXad65nO8fg+E7hqM5HjctCxS:vi0KLiQ3hTlQUAnE+h/zugDnJyeNUUWO
- TLSH
  T18892A82370C2D035453BE52FAD4D8818DA568267037920E7B9BDA0F52F752A2C1ADF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  lua-language-server/script/glob/init.lua
- Size 89B
- SHA256 151b0445ff82d71b101ecdb3e0e809407df8a2161a736c904be8f0378c293bea
- MD5 556b53780ae2670793e1cda5c2be1b3b
- SHA1 9c46f2f5ece5217c4fc83b6797dcdd3caa98ea31
- SHA512 fbd3124651edbadb228c1e9885669a8161dd5545edfb1e19472e270de2d7af0cbbbcdcdd5700321ae086fc1eb920603d1b1406fb905abae9fa90076e271d7d82
- TLSH
  T12EB012C127D2D11011A59C9FC13D884FDE49C0970C441020B83240B34AB14008201C95
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  lua-language-server/script/glob/matcher.lua
- Size 3KB
- SHA256 152cfcd402398e7914ed783fa0d046a1b916fc5cc8b48de0f26dd783fed75842
- MD5 a5004ff6eea5ee76dc443d36919c86e3
- SHA1 569a34a039370b803cbce1dc143395df43927ce5
- SHA512 40eff8311fc4ae8d5b62805cca0d56491b557338269d4f214556d3a38a16de82a0b8b0a4d4af3631dc940f356629b2e41c5508b29525143a3ba88c627b9bd639
- TLSH
  T1EC71289639537079AAF3CA3C884FE916F61A1593131C1150B5AC14D23F71A6EE2FCAE0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  lua-language-server/script/global.d.lua
- Size 2KB
- SHA256 ef32b8d835594b707eb51cf95392bc6b905eb4b7dc9f7c106abe53c44109942a
- MD5 f5bae4e5e50f4a7eb867adb6814158dd
- SHA1 18cffa66fb7872d6dd15e87b430091a962666ac3
- SHA512 09ec5ece62970337e9ed16be77811f6f90e96136286e38a5ef601c2b855bb7c7510104564b9f846e4b3aef1aebe20755c70499aa6663f8fa01ea17b8e0e374ce
- TLSH
  T1415103A79DEFE2351548037EABC9B261DD0005B6225B20F2F064383B64E54EC52FDE9E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  lua-language-server/script/jsonc.lua
- Size 10KB
- SHA256 a99334325c6ac9619e3f9f0bf7645c76d59812754689dd8936472fb119dcdc53
- MD5 72148a6f6d6f32285ce3e3ee24a15212
- SHA1 ee56f4003dec25a8ba2b4d2209e4ba32ab1d7c9b
- SHA512 4d0186019368d4f9b449469eae045170974d827d6d4b80be64d2fe577ce22404ca9aa4af16006cc6513050ac6c2d25a5d45d8ab3a160f0da41d1458e5ff3bd68
- SSDEEP 192:O89lVlurP9UneKWn1pK+hcv/dltls0ClL4t+ioJ50K50ClQkP59cKkOSgxG55Atf:O89lVluzCKAgYZlLeMTe3s4tvrdYAFFN
- TLSH
  T1D2322147A98250E05DF681B9E8EB4023F99E1943212B10ADBCAF05D01F719BDD6F9DF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  lua-language-server/script/jsonrpc.lua
- Size 1KB
- SHA256 b55169819225a719b900b69f6fff9e19a9d5f4b68eae1f0ae0e9f166b905f89d
- MD5 6532b07441638f45a5098e5b211d6100
- SHA1 8f2f516af13fc0c3384626c08b8e3875031e9a25
- SHA512 3d3dad383a729e4510f220720caf51cdf1943f7c2075ec3e466f83592f4932389a7ee098e5ffb8e3d8c681efcaa704cf281503006458f60d6f4f67f33e692ac5
- TLSH
  T13B31CDA53E86A1A476FAD195C98F3403E18D892351580019B99C89DA3FF46DCE2F03E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  lua-language-server/script/linked-table.lua
- Size 4KB
- SHA256 c8d8ebbe665b7c75d7a01821d1e4bc048c461226a3c3da6ee8623f51ae6a8ab7
- MD5 532b2291d1eaec64f220975aea80a321
- SHA1 760b83defcc97941dd9e4303b717486b33abe9b1
- SHA512 852ac1d8036b213ed2bac3165b32ea03638c158a44592e6a35b65cf7c0a64262206f722737a35a7859f600aef41cdff1ef59dc2f32fcc81d177c00e3dfecfa06
- SSDEEP 96:KiQbrVFZpdhKTNkoNYdCpTXkuop7Zo/hJ3BM4/A1Qqk5v0LNvNEHw2Bsp:KiQbhFZpdhaNkFdCpTXmp7yD364/A1v/
- TLSH
  T16AA1179A2D83A46167F2D93FD80F7006F11D4923320E4241B5AD18937F3456DD6F8EE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  lua-language-server/script/log.lua
- Size 3KB
- SHA256 2f5aaba497fe090119edfb50b0de4e8d424ba974b8f055eeac6959706e6d60af
- MD5 453190acb2f8fe3e58c6b1c482b4f65b
- SHA1 3a691489d1b13ea292eedc92002352501448cfcb
- SHA512 1dd7e156ce8d1855f7ad394d908b09cb57ece89f53c27e11790e374f96861ea4648be1cffc665c001bc5aa681d7b86430d0252248d8e9ef1c34dc17dc63f8fdc
- TLSH
  T1AE81B92B348321B5B8F3C268DD8B4426E731444B2A295A61B8AC07D17F7067CD7F0ABC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  lua-language-server/script/meta/bee/channel.lua
- Size 578B
- SHA256 856d22eab095861f6b653732bc5daabe2acb12b13ae5d79687c14cbcf1ee2f71
- MD5 5340d138e69e792532d64d43f8dd8093
- SHA1 207b84fb7f8846dc5bc4a5882a74e55a4a542d6a
- SHA512 5901c810fbd949ff85053c7fd1a3b0543db1fdf6fcdd47ae9cca6a8cc94afa805209179475df43a3d9536d2f752d14266c5901160cb2c5c69e6f51661fcf04c6
- TLSH
  T129F019CBBC6BD09315912D3344CA2454E83CE631BA254560B598F8C6DD340BADDEAE39
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  lua-language-server/script/meta/bee/filesystem.lua
- Size 2KB
- SHA256 2b7ce6728533cb0a151f5377e807bf5cad9e52942929eea458df952938a12a38
- MD5 c6740e9cd3cd7c37c24acd573b88896c
- SHA1 6be247e9918085c14ca7a8984a1b0f79fa02d27f
- SHA512 e24763da64c6252152cb8c5b2c64c1345836440701b19a60bc245e3fd93d151646ef8f5a352ffcd74f66d5481d55199b451e6cdc80960cb2bfbfb95072b6da06
- TLSH
  T1AD4181463C9BD4408AD22BB3186F25C8A428EBD4B2174154B0D87DE7AC39CB98FDDD38
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  lua-language-server/script/meta/bee/filewatch.lua
- Size 567B
- SHA256 ac9cf7a7ee82a9f20c894994683f9b91607c911458ee2b38c51c3e8668df2c87
- MD5 3b34c428f9ee4f6dfe48895a85fa7b31
- SHA1 0284c90d1b3139073d1ca666d90613c6bd366210
- SHA512 cb0f95ddd14ef476de517d8d5839d287624c2eb651a7c2a0252b3b1593e5d90c2394c94f1610187a68e9d27cded218bea38db104fb55c4252a1488d0b748f66c
- TLSH
  T1AFF0C88F2EA7E041DC95A677044F3205B41E8820B51551A4B09D3D9F2C2A1AEC9EED3D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  lua-language-server/script/meta/bee/select.lua
- Size 1KB
- SHA256 5e598974ec65160db1a0faac9e2ee01e82b6b212c8d6c1f2deab8cbbd8e422b4
- MD5 31ae14ff67d7d6b21f0e5ef241ceb3fb
- SHA1 99154d9c8c29047321834c840d1a79817ee6b023
- SHA512 6c62f04a06d1d8b00c7a4060f80beca7e5b17c171f85b2146e98013a8ef3c4f2435d6c529d1fe9668dc7b3009fb02f95b6bf506409c58a1b63d5ab9c7fc2a497
- TLSH
  T18A213B471D97E0A408EEB6274E0E6981F06EC5DE32499A82F0906CA51C750DDC7FE99A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  lua-language-server/script/meta/bee/socket.lua
- Size 1KB
- SHA256 efcc069a38cb92f771fef6e23781e5954b04cbc87a380bc74889d40df33a2ebb
- MD5 c23b12484490123258f4d09cb144780e
- SHA1 506d6cee3cc61eada99eb20817b8c8f4f524bd37
- SHA512 c3e88372181e410ef5f3ed7d94a1390e3dc0d2b1826315eacdb9883cc7db988c7ab106482b36dc3ff477fda24ecd23fc3f2f408ab0c62430072682286566d4b6
- TLSH
  T185315CC6BCBBD0045AF62732500E7404F56DCA60B69A6355A051ACDF3C378A9CAFEA1C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  lua-language-server/script/meta/bee/sys.lua
- Size 254B
- SHA256 e49bbfbf11b114c6f9e6b8d190a6dd897e3b638e022996ade773f781ef718faf
- MD5 0df0bcdbb39e2918142a8fe5ddb8f01f
- SHA1 f90df319a2964a97f008df30b70ed5fa80b5938f
- SHA512 d85a81d116d56fd681919e1566c5c78c58a3942559e50f2cb4920d61d7de80f5d072e13430c6e3a0bb59145c1b5c869093de5d4451490b2b0f3dc3be1612d1d6
- TLSH
  T195D09E467CDBF58006852FFB181E64D8F498DED4B1264540B0C478EAEC248B9CFDD938
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  lua-language-server/script/meta/bee/thread.lua
- Size 1KB
- SHA256 ceb750ba3f6bdd5d0498a71b304e06e32702939a52346e4fb060425fa0a2ef07
- MD5 fa9f2e6721b317f9e4ba52ddbf6fd447
- SHA1 f1e1263d4a2912b60c24aecdd760a21552f22d32
- SHA512 b4089804f8f20e742ed81644054dceb825ac2794bb9a4dc1523be5ca560d909a96959beb039e9d0656adff521758e1f2c279f45e6dc66923455941607c481694
- TLSH
  T120119CCABC5FD0830CC62D73609E7448E46BA11072A56110F498ECD79C3E5AD85EBE6C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  lua-language-server/script/vm/init.lua
- Size 489B
- SHA256 55086166cc20b312b83b66ccdfc84c9166250e5c08a5dc626196f31df4257773
- MD5 cfde65cbfe8f0f8395ac20689b13bdf6
- SHA1 ba575cb3b2a25ea545661f36c5bd2a08df43af87
- SHA512 0541e02743acc2c77b2b0aa2b68395d49900bd285116bcd1d217510a006ab655fef864736f491803e69e7080737e85ca180188912808099d0b96e6e08b69d344
- TLSH
  T182F07CE0C3C6DE2E322C0BC892BC4052EE02C000482096A0D1BBF1DCA4CBDE08327DB8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  lua-language-server/script/vm/library.lua
- Size 329B
- SHA256 8aa6064d8c644c909aa0ca07fef73f3ca0b041cc1f8a5141a335e40987ee8424
- MD5 51f43b020ee761adfbc13ff36639d4f4
- SHA1 e2efe8b7d717c9f0f9d5b310a548bdaa1fc01106
- SHA512 77d84a84935fec0f3e96bd73023cbf0484926e9b44a3e8616326581121050da9df243dc306ce1a96fa8371bb7e74ae6c39b69c5b7fffa2efa3e512b6c0e72471
- TLSH
  T1D5E0864B6A83F47C39F7CA49445B4007E125410742040845F1AC40B13FB815E99F1AEA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  lua-language-server/script/vm/operator.lua
- Size 14KB
- SHA256 8ad8226debd1a25d3f53396ab2dcce57bdc435c55a73bea3d0adf3bbb2a0940d
- MD5 d645ccb8b17ec9809bed3f146b69d49b
- SHA1 d47ed284730999848981ce62049cfcaea3d4b85e
- SHA512 c811eab9ab9dd2f6b99e7a2c3ea0bfd290685af219f1ee76d9219cf19843d6de996cf3810c79dfe4281e8e4c4e1e2b9f71fc752c3db63d3a6ba3c814d9353c0a
- SSDEEP 192:Mdwmc70uHIk300PjJN3InvJVWPVOEqIwea+Pvi1:MdPTuHIkh3yv8wea6i1
- TLSH
  T11262E157594A50362C7BC7EA8D9B0802D50101338A6C5C5EF5FC49907FB1F2EE2F9B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  lua-language-server/script/vm/precompile.lua
- Size 524B
- SHA256 41b40ca8c83a0f1ff5524ce318d078bff4c88a251aa1cdd0613afc706209b7aa
- MD5 e823d9ff38ffbc46d75c91552ac6647d
- SHA1 2f834b18e387f8db9826a810da269b18d7c088e6
- SHA512 2cfe0e798091ee35456f62ae66773df893239af5df4c3c4004c87acce1222cfb24fc6dfe11e8fb4afb9770be5c97e27162d5912f598f4a3ed4f3cabdf1b89211
- TLSH
  T142F0E22667C70A693DA598CDC59F6062DE48C137011C5020340C46CB6F74B6C41EDAF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  lua-language-server/script/vm/vm.lua
- Size 2KB
- SHA256 509fbaade9d345b50d413b0f4cc14cca84085578a656b0fddf52f15002c398e3
- MD5 bc7b296c27f056459d80efb77e23f1f3
- SHA1 1075dc675ba9a80ae501dee3891d833ace02b2ce
- SHA512 d9804b785b0cb30193f43122f0b2107d7f697e64921d5c5b8226a73b8961ef5e7d124b199aeab94a7528796600fd0ad2b9da18a719be6b6be7d6788b87cdc272
- TLSH
  T1C551FE9F3A43D1B478F2A2695D8B2002E534425322645198FAED81E13F7016E9BF5EFE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  lua-language-server/script/workspace/init.lua
- Size 69B
- SHA256 f5113de49c61aa38c39234cd879a2d23e5dcb42eb06b1db1b43d05a76f7e1d73
- MD5 ebd7641dddb45a5ea78d325dde96a761
- SHA1 64b15bdcda225076f279ee9328d973792ad65df2
- SHA512 c37d1b86673311106e7c5e14f9224c9d1816a57eaeef5fed3f1b3bf31cd9df4736652be1fe0c3a6c047b430c99410c02c22a0d525ef27da98c706a0dee5507c7
- TLSH
  T12BA002D321C3BD0D3138F18893591057AC0AC42E155C2996A052CC5D71E4F458177554
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  polytoria-defs/polytoria.lua
- Size 61KB
- SHA256 b23a833e15d7bb272db6bb05f8509f0b55fa71ab77f79e6b482f122d5264a773
- MD5 045a3908d6dcc9d0208ec60081d7c052
- SHA1 c82cf43f59187de7985b7036584f107abe738174
- SHA512 070d8a55a21a919105408b43cf236a182f346e702fc7bae8d103139e451f67cfef9a99233de76fc777e2a9e08b83d1f376c898ff2fdae45d4604a7ce16a3bca0
- SSDEEP 1536:WHokq8eb2fGCNS9Tz12bQh4TiNmgIGhgNOgCnc5HXJeJaAl/ETjbdOhcsLsMrnPb:WHose2NSCbQhgiNu9aIp1yV7
- TLSH
  T1935335463F91133204472632560EF0A45F395171F8D171AAE2D99CBE4D2AE3B07FFA9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32