Overview

overview

6

Static

static

1

vr bypass ...ass.js

windows10-2004-x64

3

vr bypass ...ass.js

windows11-ltsc_2024-x64

3

vr bypass ...idk.js

windows10-2004-x64

3

vr bypass ...idk.js

windows11-ltsc_2024-x64

3

vr bypass ...tuf.js

windows10-2004-x64

3

vr bypass ...tuf.js

windows11-ltsc_2024-x64

3

vr bypass ...ss.bat

windows10-2004-x64

3

vr bypass ...ss.bat

windows11-ltsc_2024-x64

3

vr bypass ...ols.ts

windows10-2004-x64

6

vr bypass ...ols.ts

windows11-ltsc_2024-x64

1

vr bypass ...er.bat

windows10-2004-x64

3

vr bypass ...er.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    upd token grabber lol.zip
  • Size 36KB
  • Sample260809-qwth2sfp41
  • SHA256 c75760c7c505df86e509b4c555889762ed2afc296a61e686741274bd07ba3767
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      vr bypass fixed by fade01/SteamVRBypass.ts
    • Size 948B
    • SHA256 a1ac0b42a9887e97fcfb1672762ae56fe29c59c5c5095224289863cb2d4ccc56
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      vr bypass fixed by fade01/frida-idk.js
    • Size 152KB
    • SHA256 4aa5ea9182a6c14f9363042e99594dc8c5e7cee2629d45b564376fd2b7ce678c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      vr bypass fixed by fade01/getstuf.ts
    • Size 617B
    • SHA256 795ac2d144398785bba9ff7489459cdc1c4e55e461242b9f1830d638b96cdf5d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      vr bypass fixed by fade01/steamvrbypass.bat
    • Size 80B
    • SHA256 51e96fe3d17a9229309c52c1f962a067f974d09f21a74b56f6b822b348d0e7ac
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      vr bypass fixed by fade01/symbols.ts
    • Size 20KB
    • SHA256 e00df1346f8b05e6730204a007c249f18edb75a91fa12db74f7d7f2431fc9da3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral10behavioral9
    • Target
      vr bypass fixed by fade01/tokengrabber.bat
    • Size 67B
    • SHA256 6b8a23b3e6323ddae5e6b5706cbae98aabb9448e2008898b199666d3851a1412
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks