ae0be87f40c3e30ffe883a26cfd83c62329d83d7cc788b737fe1f58bcca08b00

Sharing

Copy URL Twitter E-mail

General

Target
ZeroScript-Free-1.5.0.zip
Size 1.2MB
Sample260812-2bmqjsfk8s
SHA256 ae0be87f40c3e30ffe883a26cfd83c62329d83d7cc788b737fe1f58bcca08b00
MD5 092d3bbada87f3316fc4bb440cde4263
SHA1 2bf39cf4e260699eefa0da88964461200a98751b
SHA512 2bc2aca02ae6a42adb50e048fbfbbd059bc34768f7a19dad3047235c7d0106b1a413069f57d10583220254e42f5b7080cdd9878a1b51988d7a357a8b6f7ee77a
SSDEEP 24576:oafjuiL2q5VIw3myNlZYk3WYjGbIZ+twQ5EXST3Oe1QyHTEG4CMtaXA:oaf6iL2q5VHNNl93FjUIe5ESzOejZ4Cg
TLSH
T148453338FBC44D3AC63150F43E5DA269D3082AED77188B7B5C75A2313E1B9381C9BA49
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  ZeroScript-Free-1.5.0/MacOS_Start.command
- Size 5KB
- SHA256 c7c3522036d8ac281150c12815816202702893cd1521181e5e574e336080c63d
- MD5 848672492f34600f9416ba20f7fe2fa3
- SHA1 a2d973bc623846db638e67e56364cd3e1cbd75d8
- SHA512 2333341e9d756f9aa30de9ba9cfcdd49f6d78b20c108497a984e0fdaa4419e5ee3bc2512bcf5d81102fb41af6e17ef4920f94cd0d866ba763ceee786a6d1256f
- SSDEEP 96:M9u97Vra3HeNFMg2vyPOe7MEuDmfrsyEEwKUGB5T0wmkbVgciUzmiqT8P:nRaXe3MvSjhsuU8V00zh
- TLSH
  T1E1C151A77E94077CA778C2785C8D05A9F216003B5D23283CF0AFEA183B154AE657DBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  ZeroScript-Free-1.5.0/assets/banner.svg
- Size 2KB
- SHA256 46ee7bdd7b3e800f32734e54e7edfaa1d92bd4011eff7b4ef4d691c79267542c
- MD5 5a1f97d76098c9b58a406324e1ee7b86
- SHA1 8e4536ae77c6e41bc0c2ac2e99f5ab08cbc891ce
- SHA512 cd96d94e2770c26ffe55d554ff15890f2cda635ba8c29e8291128e9ebb2fce36bd6eafa9c0fca26528e934a892085ec671a7b92566106a42e8bdd129be5f4d9f
- TLSH
  T1BB518572E2EC2528E304830EE78576B7312AA5CFF74DC514F06C16299B8980B5667BDC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  ZeroScript-Free-1.5.0/bridge.py
- Size 101KB
- SHA256 6838afd34a1aa01b56de275b1b8ddbf06fa4de945f655304ee8f202172ec036f
- MD5 142b8f421968cd843821d3f271c385a2
- SHA1 8aa01c819b64ee64f05b524f9527dc01285ee611
- SHA512 453f13c47a5dae10199a71fc5ef5b0329f7629f77d99ff866b1d65eb44f8dd237f4390b421223e4e058b983a2f2dc729a747e2dc34118321ccd863ab794123cf
- SSDEEP 1536:CAogjqApLc9LrB4B6F4IIpIHMsQtoGcSbzQ5taqfCKw4wpCyfP:CAoG9pLc9fB4suIIpztmhbkfP
- TLSH
  T1D3A30A32E514163BA293881C6837E981A71574ABF2051478F9DCF2983F9C139C5BEEF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ZeroScript-Free-1.5.0/launch_studio_mcp.py
- Size 5KB
- SHA256 f53d17f9f48dd606d3600faebf474b559de4f27c6737d3c90e2cd8c4e26f681c
- MD5 6a94322b09b32a5e95f96e690bf99860
- SHA1 3c6a743dbbb9d68c15aab80adc19f8f00ec56aa7
- SHA512 4b51d069e2247b956ffab82bc8579f4e028b6982ee387cc9bd723c90442859f9b867ed95732488677eedd0b012d5095f25b6f6e91a6e9f9ce70fe4658429f74b
- SSDEEP 96:QihZlXmk+cv8QfgbU3CsZSNkofQN2O+/3vXyt8y5VGpR1WgfbeUPOm5gcdSuoRzX:xhZlXt+c34U3CMx+/3aepRVfNzOcdFoN
- TLSH
  T143C165B2D4426571B292C25D664BE8925322BCA73696247479DD71242FCC36CC2BFCFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ZeroScript-Free-1.5.0/start.bat
- Size 9KB
- SHA256 600d0e4ae34057349015d45c520795eb2f1e7c9b25fc5afa1330b41b4fa4b0e8
- MD5 f5b0bf8c2005e460f54def7000fb9cc2
- SHA1 5db0317af667c07c42f566a83687224e761bf845
- SHA512 bf9412ad86cfae714f66ea305f82e131cb43d83048f738dfc63757fadca867c991dae2f3388b8d598d4ae5fd6f967149c4ad25a6306ca5becf5b04f1a4a71095
- SSDEEP 192:0i4Irwm5R7PBNoOEIYOByfOrUQJcFsOUMH5x6nSTou/e6u027VhLaRAnHZ:0i4TIR0iyJruzVXHZ
- TLSH
  T1FA12851A3DD042752B98D7669D1C12E4F30780BB0D671DACB4AEC16C2B4E5EE12FE6E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/background.js
- Size 12KB
- SHA256 9c7f2be09c073eac8b3f4d5249460bc5fc8eacf940753653aec9760ace5f1f34
- MD5 a85cdb0a5b3a48d6df49345d7fc3ee5f
- SHA1 bbd92f3e5a7bd7d05c177c7d20636ac9773e36ad
- SHA512 7a65aecf68f6c69a831ad27a1a2d3f02f825e498d0a835fe3ad8a4fe0d9fec087462e9dbebbfb7e87e689e765414e737cb95a1bfcae8954fc8060789ce6f2122
- SSDEEP 192:nQ9R5TMKGkaStHFDvTJy9UJjPK6aiKPvaWDxgc2kC/7MzjwBYYDGEMFA1HAY20oe:ncQk3VEHdiiSc3ju28
- TLSH
  T1CE4232B59DB2102A76A3E01CEA1FA0527715B1033359CA90B2CD76706FED3D490AA7F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/core/config.js
- Size 27KB
- SHA256 17988476ef66e27c2d574d182a319f61d9eb961ed149859cdd9504917d34fb89
- MD5 8c627eeca3bc2d5503a54a4258b84e96
- SHA1 f71646d2b5ca9056b266478972b2b82a0d2d657c
- SHA512 365812a303dc7e9df30b2ba051d5b3d76934535a78841d07846501a4837e52ac957fdbcb704ac75609542a225c3777f2b7d0b06ef5b1515f538696f229e4dbb4
- SSDEEP 384:efxHQtzctqLIqHMxMVWF1ygKeSuP3ty1ANOVG2hyBefh3KbstLf3ax7fakwL:O+uyMSVWnFKeSuP3v0UOyof93EfakK
- TLSH
  T1AAD2293BE7B4673136C180AAA75E66DAF319B17D73241460B4DDF24C2B8D438C2366E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/core/main.js
- Size 223KB
- SHA256 a89904c5a4d49f46d2900fd380a5a8f81e6fcdd9759797227d334bb1cd33ef6e
- MD5 be9fdf124841b43fae8491d5a9cddfc9
- SHA1 6f6462df9c03c344dd7972e6e84f45910416c33b
- SHA512 3f3b934147e01d9c71f335be608dd76c85f0fb939fa6c8c823665c719ed2f1dd8e6a4a30a4a89484b8fb7dc22bebc2ba4e77c999a16f4d60ba0a5e13ae9b3cec
- SSDEEP 6144:1f1d4bVWHTh3MMXDMmP5V9Rf28IbmTo7XdRN8hNTXjdJqK7kB:dOMwmP5V28ITX87s
- TLSH
  T126241A66B2B513361D4308AA5B6F7AC1B3259027E209D050B84F93D83F6D468C6F7BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/core/parser.js
- Size 16KB
- SHA256 c67af2206e6bb650a157680cd88c741a632bee272a7e05baf8d5532f6c5ee00b
- MD5 a7b306242eeb93da0afaf7e2f57131d6
- SHA1 4ce343a97061ff0dc764a3abbca70f981f30943d
- SHA512 8f198e20f87eb0e8901303de3dbe86951081ceb761a8da3f680bb91ae814f9d48ae978b9942aea58e802a6204abb1e8ca2f1df9017141919b66d72414a7efbe2
- SSDEEP 384:JSM8xHtmcQ0NSFOeQkqpGnAO4YeUIn/XwFdn:JmccDs0kqp0eNXwz
- TLSH
  T1E572E69EB1E72336094111F50B9F7194A23AE0273229C581B91ED3D47F9993982B7BCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/popup.html
- Size 2KB
- SHA256 c3ef926b71a5a9027395c6a04d23a97977fdb24d4f30cf1ac41122e4d0ab6609
- MD5 396e29409befff36dee4dfb866e0357b
- SHA1 633f6cab6c4e94c96129e1afafbb006b0e2ac8dd
- SHA512 b89b7a8a0fb3004e19806b2fa08d105ccd1f0a96e56ca94dca4ccbc55c70e8cfde4b3140a49593dd643e9a62a496e7180af984a8868e82a79deda76027b38221
- TLSH
  T115413156D2A90409B057C9D47802D38F3256920FE30A8A2C79FD55F0DF8EDE9C4AF259
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/popup.js
- Size 2KB
- SHA256 747f16c57325ca6e96954d0b9b9d013fb333c9d9c6122aae1be0b54d52e3282c
- MD5 39c009c2bbe8d7b0588f5b814219bc30
- SHA1 cc1c256bff8a2c7fe33932b177c1d9e25cd238bb
- SHA512 e24b03d4549bb7e2dfc10684ef9da58043b0cfb2ef7f920d17e5c703a218754b58fcf65a326450affdebbffe8318697649123a69157f8fc554549b2e3cb2ea0b
- TLSH
  T11851767770F9183E1A6750977923F51A3B5A44123242E4903E4CD0B84B99BE2D0FFBD6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/providers/arena.js
- Size 44KB
- SHA256 97f318a349e73d50d1aeec446610463fab4b60d19da0eba732ffbb93a648f116
- MD5 d7fc4dac61de27b68bcaf27d63972d31
- SHA1 eb4a1bb50a55fb97fc82560554caede5a375709d
- SHA512 42531afab5ae7f1f9159fcc50f15079b46e607aacb08a6525be6ac68e3ebb009566e8f06b797ff5ceb1641ff30c283027fd6d731379183908566f091c97babd0
- SSDEEP 768:IAbc/PqvQdO93RhBLRZpIRKVfGms/uIAZE/74kfM38nAvXF0CZ+o:FLj7BLRZpIRKVfvs/uM4k48nAvXF0a+o
- TLSH
  T19F13B57531A522367902D0ED5B4B71CAA324B1177209D5A4784EB2482FDE468C3F7BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/providers/deepseek.js
- Size 46KB
- SHA256 719550b6151077b8a5ab58147f672fb9adc72e26c13d40bf2ffe5ce0823c3bfa
- MD5 2ba84ca188cdb2f0b97f666ae279a0c8
- SHA1 e2fc0a55ec3cd012a0dbdb405af4dd10fd6bfe68
- SHA512 b43232f8a975aa86d19ebe70abc344b13b577746a92d26c834b0a41883e2a2ce7a2d785de9d0609e9c3f7787f14596fc5aa85aea9dbc7742099ef1f1bdfdf895
- SSDEEP 768:U/lPGTnEr4MrrGCAZ2gVgaXs3qff6GMmKX7VjK180wk:UiY4EeXVgaXs3qf37a9q
- TLSH
  T1F923A6B670A62235B91281ED5B8F7186B324F017B34AD450744EA2443FDE568C3F6EF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/providers/gemini.js
- Size 34KB
- SHA256 524844d019864d6905accb244e6eccaf678bf423b378cb11575783958a86a22a
- MD5 70a5f9cac5ae730fb53d646fd5687f76
- SHA1 8d2d552efcd429571695fa5f3217f7d951521dde
- SHA512 d8731912aaf6cd5c5b441416c35bcf1c775945b956eecd138a47681c2fa8a9e4e58586c13d44f9713f66d46e8901f667d4f99f3e7c01fbca8a24c354f1eacdb9
- SSDEEP 768:t3xgathOGgIXAI5+l6M1nMTB5BXlCCWSoiu:txgAAI5+7nMXBXlCCWSa
- TLSH
  T150F2C77571A522353952C0FD5F8B7086A324B0277605E560B89EB2482FDE42883F6BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  ZeroScript-Free-1.5.0/zeroscript-extension/providers/glm.js
- Size 29KB
- SHA256 9008488a6ac8a32e330e050c0c18af7ebc1f76aba15864c1274e581de89e2a36
- MD5 0d6edc8d5104f9deedff94f6f5a08c21
- SHA1 894b8bb11aef9ffea3b1f0d599b8c53f0a9110c0
- SHA512 3552905719a49d27ca155610e8876c055f85773a3c9c41e282f353bfba9f803a3d18f7ef5fd7a67a3cc46216276ed2e7c9de1f40e7c49744130468986e2b2f92
- SSDEEP 384:0599j7rc5uzHCGsup1gHmadAg3CgpuYVTjWOaJQaWr1o7PRCG6tzyz5XW+cP:0v9Dc5umGG3yH4HWl2aA1eZXCzkXDW
- TLSH
  T122D2D7B571A922397543D1FD9B8B7186B324B0177205D090784EB2983FDE46883F6AFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32