3755321fbc3afe4d68185a8078bc28acb87a2b5e3cf56675bbfd9fea1a69b2c6

Resubmissions

13/08/2026, 14:12

260813-rh5vla1hlg7

13/08/2026, 14:12

260813-rh4brs1hlf

13/08/2026, 14:04

260813-rdnera1gpb7

Sharing

Copy URL Twitter E-mail

General

Target
RivalMods.zip
Size 112.3MB
Sample260813-rdnera1gpb
SHA256 3755321fbc3afe4d68185a8078bc28acb87a2b5e3cf56675bbfd9fea1a69b2c6
MD5 78a35b173291a4a0970178224c63a89b
SHA1 c5723d593ec8e9f821da367d2789ca0e24a62d2b
SHA512 4222e43a03f912b0a572658423353edd3401aaae9e53682c774d1e1516363454fea63fd8a9dfa04933c346cf8795be8c54925bd1c07f4e4305af1939baac088f
SSDEEP 1572864:gT59LKeS9gyaJavQIQ0JVBXKav4v6QL5SCyuTS7pZzUOoVgFXUHpIGzn4a5V9U6k:wbLKfycKYARdWAOoCFCpIQn4UU6k
TLSH
T1074833A626DE0B01CE9D18BD506A37DB1EE45A2BC2195A79DE333F48079F06B4727F04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  RivalMods/lib/lib/javassist-GA.jar
- Size 731KB
- SHA256 d19c1ef43ccd9cb1b39466bb2f1c8e45c2b6752f1e13a3dfb60096543d1791fa
- MD5 60974bfbf014085986b1d1eac44222c8
- SHA1 50120f69224dd8684b445a6f3a5b08fe9b5c60f6
- SHA512 f08d31069e208d1ecc2956445098dd54947db3c3f1cb719513b9660c152877d45a528482af937a58724b76f935d82849805ed2e6cb0161f06e9aab6a32389bc4
- SSDEEP 12288:sG7wv+Ogw7Aauh7yUWp2D0TtIdCwTLfwo/QEur3cyVI7gX5dUr:sG7wGONAy0wo/QEm3cGpdUr
- TLSH
  T1A6F4E11DAF94A03DDCD3E1304450D162F7BCC9999057C09E25F4C9A7AAB0CA50BB2BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

google persistence phishing
- Drops desktop.ini file(s)
- Detected potential entity reuse from brand GOOGLE.
  phishing google
behavioral1 behavioral2
- Target
  RivalMods/lib/lib/javaws.jar
- Size 465KB
- SHA256 b637b78cfc33c92d4838d5fabfd0647ce03c3ef69d86ef6a7e6f229510aaf3b5
- MD5 5d8c1723f3005bd63dba2b478ce15621
- SHA1 ab26a6167789dcf81a0c40d121dc91005804c703
- SHA512 9830ccdfe913a492bb4e0015ee3e729bea8ec1f22edf48ed7ce2aefd5376df24f33948b9155e31edfa9bc240544406fd2c43a34dd1366e4936b3318d3ca5ed1c
- SSDEEP 12288:k4VtaECp5plmgYhuWvHuR9Ta/+Aw7okxygk+W:kUChlHYHMaHw7XxW
- TLSH
  T1AAA4BF13D14FA07DFC534EF384A39263391D48B1B48A21FA25E40CA3BD66D1B6B3567A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  RivalMods/lib/lib/jaybird-jdk18.jar
- Size 1.1MB
- SHA256 a012722091bdbf995c4b3bad8d1145bb127f92ece7bdc1491b35e3151461270c
- MD5 65fd53fa5795d63c869c37cb1a08cb30
- SHA1 79d1a6e97f8ed4a3f1341d5672dbd027a4ba0007
- SHA512 384d2f5a204c0c0fff47beca0a3d8f6ba82f261bc7c6b5e65d75541b710cc5a42775a73a8317f0e52284b8a6df02b25ae636f42eab73d9994b34a97419c99750
- SSDEEP 24576:6rV4xHpge5ZHB7DfjLOKHQ250VQc4tWznYwyVu/e8M/:6rV4xH+e5J9TjLNl0mpmYJufm
- TLSH
  T13035E13199C650A1FE778A37707B58533E2F0AC998CB3412A5A047F2DE39C596BE3361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  RivalMods/lib/lib/jce.jar
- Size 112KB
- SHA256 60724d9e372fbe42759349a06d3426380ca2b9162fa01eb2c3587a58a34ad7e0
- MD5 a39f61d6ed2585519d7af1e2ea029f59
- SHA1 52515ac6deab634f3495fd724dea643ee442b8fd
- SHA512 ac2e9ab749f5365be0fb8ebd321e8f231d22eae396053745f047fcbccf8d3de2f737d3c37a52c715addfbdbd18f14809e8b37b382b018b58a76e063efba96948
- SSDEEP 1536:5sNJO+ylt6se6sgU0w/XzGYWuSy15DudYLSfaxwpt5g1naZEqwoJ8sYcF+z/VSG8:aj8GHXZSy1pudYLdQe1ATtKVS+ws9O
- TLSH
  T1F7B3D0667C8DE974DA63C03D8D70C43FB84E0598610FE31B83A990E964B1EE55E43BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  RivalMods/lib/lib/jfxswt.jar
- Size 33KB
- SHA256 c6574f4763696f2a83028de143d9ed1c975062ba2d44cc5c91558751fb84bcd6
- MD5 c401e00a5de0dd9723885cef9e2f5a44
- SHA1 b6735b93811517f062a20869d8a0b57faeff6a90
- SHA512 595b950ad5bff930654bf7fb996ba222d19b4f175821ab0fd6ec4f54d4b7d62b37757429051d1302bc438ab76350b4cd0a07ba712caecc79dcdb0c60494b5ab2
- SSDEEP 768:xYJfTGikW6VajSe/SA5vN9kqizE48ojVxQYuW+t:xY5TpkK/nFNIzptjVxYHt
- TLSH
  T175E2D0E7601D50ABE81392352F646993B83ED9F9D02093093B3D9AD3A0FDDA5BF12350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  RivalMods/lib/lib/jkeymaster.jar
- Size 51KB
- SHA256 a2d68aaf08f15ff1c3b9b224641e8b4c35ee30b10f655d6420571b0429f19c87
- MD5 21a017201cbb16ae0546069d4371f1c2
- SHA1 9f1e8c9341a8a0c51299b961c4f6c7661c822756
- SHA512 6c65740c17de72ba7b0df95aa29d095a1502f298924c63f364328f6fbb38920e92e0246d28a642f7c9fe3ab582341e607b0ae01515d470b4595d698ce81363d6
- SSDEEP 768:MfvhdjG8x0IODNsLOl8EHSsyxIicvyxIuAcPGzd0TZAjYHXI:cdjGjNsVwSjxIicaKusqW5
- TLSH
  T100338D6FBA4A0A29EC1B35FE6600E153B42E53F0AF5A211A34DE14B1A437E145F2176F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  RivalMods/lib/lib/jna.jar
- Size 1.0MB
- SHA256 c4dadeeecaa90c8847902082aee5eb107fcf59c5d0e63a17fcaf273c0e2d2bd1
- MD5 34d3537524a6c8c134e840e7be601569
- SHA1 cb208278274bf12ebdb56c61bd7407e6f774d65a
- SHA512 d38d124f5d2c227da57b0473bb37709a4d9f6fbcf5b6da3a6e15e2a90e5c2980d9dc649cdaeecb08b376dead73267128c1972d9e25ecc243424b8f6e6f4e67b3
- SSDEEP 24576:n4URralwgzl2KYrdk8d1+NV08ctI6wCY+CnErouvUlsYyB:n4G3gz1YrdP78V0buAxpU6v
- TLSH
  T11D352367E08B7639CC3243B2C1F322F3741B1AE8E55BD6B942E51EDB5121C5F0B6492A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral13 behavioral14
- Target
  RivalMods/lib/lib/jphp-app-framework.jar
- Size 103KB
- SHA256 15f36830124fc7389e312cf228b952024a8ce8601bf5c4df806bc395d47db669
- MD5 0c8768cdeb3e894798f80465e0219c05
- SHA1 c4da07ac93e4e547748ecc26b633d3db5b81ce47
- SHA512 35db507a3918093b529547e991ab6c1643a96258fc95ba1ea7665ff762b0b8abb1ef732b3854663a947effe505be667bd2609ffcccb6409a66df605f971da106
- SSDEEP 1536:CPj4aLCBcnn4xGrpR7H30x4VTNVNM43QHt0msLiWzO5SQJn4494m75CYl3U:ETCBmnoCptBNNVNzQ6e5SQW494mlZ2
- TLSH
  T18BA39D2709E43120F6B15D7BB2503C82F87A086D7847669F2835579AB9B3D6D8FC2E0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  RivalMods/lib/lib/jphp-core.jar
- Size 464KB
- SHA256 5b37e8ff2850a4cbb02f9f02391e9f07285b4e0667f7e4b2d4515b78e699735a
- MD5 7e5e3d6d352025bd7f093c2d7f9b21ab
- SHA1 ad9bfc2c3d70c574d34a752c5d0ebcc43a046c57
- SHA512 c19c29f8ad8b6beb3eed40ab7dc343468a4ca75d49f1d0d4ea0b4a5cee33f745893fba764d35c8bd157f7842268e0716b1eb4b8b26dcf888fb3b3f4314844aad
- SSDEEP 12288:pyfuv+DnikW2IfqFXKzNGNyyRmfD4vCgdiRST:pLWDnid2IfZGAyAfczdig
- TLSH
  T15FA49FFBE0CA2472F4962FB39CD61072262F054DF04E19A91B5462D2EC21F17679B3E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  RivalMods/lib/lib/jphp-desktop-ext.jar
- Size 16KB
- SHA256 cf4068ebb5ecd47adec92afba943aea4eb2fee40871330d064b69770cccb9e23
- MD5 b50e2c75f5f0e1094e997de8a2a2d0ca
- SHA1 d789eb689c091536ea6a01764bada387841264cb
- SHA512 57d8ac613805edada6aeba7b55417fd7d41c93913c56c4c2c1a8e8a28bbb7a05aade6e02b70a798a078dc3c747967da242c6922b342209874f3caf7312670cb0
- SSDEEP 384:Paj1PXNyyQwsCxm7VXh3il27I8pdo63XNrqlY3ylWn4iczt3Z:e1/BQwsCxIVXhuF8pKaXNdXn4icz9Z
- TLSH
  T124724C37B5D514B0F0384DBBA8E3BC22F23E0D0C51DA35EDA6719B66B534E258E96260
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  RivalMods/lib/lib/jphp-desktop-hotkey-ext.jar
- Size 5KB
- SHA256 c55c267d954ec9f24226780ee49fa7e1bc2baec3af6bfc0caa6cc1b49d8ca90c
- MD5 22acc05e1efc1d4c5faa0359ce725d47
- SHA1 458e7f911d024a3d786e76f256b017b0901f48f8
- SHA512 b11754f5337a73d317ae311fd4c20c0b548e1163107b741cc9e6d4d9027a8f99551e3184a83f9ad20098092e87ef1741c1e437058b7cac92727124589c303ef5
- SSDEEP 96:6dei+gyKpU6W4NR4Wc3deZ5G2FEyd65/HqQA+Ns9boCJ51xfopgk5P62IaJ+jlt:0PNR4Bd3cUHqQ06PYt
- TLSH
  T139C1853F95C198B1F07C6E7799D2B543B13E2E4D16C726A420441DF4E83EB585FCAA48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  RivalMods/lib/lib/jphp-game-ext.jar
- Size 68KB
- SHA256 cdb830115b087cda78c41f972118c49d899b578e8d562e134740d66e11292034
- MD5 8f952ca7a11355a54305d6e23174aade
- SHA1 ddc83e5745daa7ff33afb4095525f2ee22422487
- SHA512 7156879f87c27baa9706eca20f108de45dee71ab3c95247edbd1b5e82f52fe5c8f285dc39b2495b696fb7247ff9b8779c465d95b655a3216928f316ec19e0583
- SSDEEP 1536:2g7ausUcHlZEo8PnAfjtwkCmI8HdaNiRQPob/e:2waufPFIfemIAdaNiRMoi
- TLSH
  T194637C3FA0C914B4F1766D3BA4D67033713D1CCDA08B1DA962606FB2FC368758E8AA54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  RivalMods/lib/lib/jphp-gui-jfoenix-ext.jar
- Size 50KB
- SHA256 4bec0794a0d69debe2f955bf495ea7c0858ad84cb0d2d549cacb82e70c060cba
- MD5 d093f94c050d5900795de8149cb84817
- SHA1 54058dda5c9e66a22074590072c8a48559bba1fb
- SHA512 3faaa415fba5745298981014d0042e8e01850fccaac22f92469765fd8c56b920da877ff3138a629242d9c52e270e7e2ce89e7c69f6902859f48ea0359842e2fb
- SSDEEP 1536:1shuTqhiMtf/2PXkXgjYcO1556i/canPH1y3F95grf5CjdKBfn602ZhqsNgsSJ+y:nw1pywCjUfnX
- TLSH
  T17C333B3FD0DA1479F0612D3E6CC29827745E285ED0872AAE11785FE6F836C5C4F9E608
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  RivalMods/lib/lib/jphp-json-ext.jar
- Size 16KB
- SHA256 9967ea3c3d1aee8db5a723f714fba38d2fc26d8553435ab0e1d4e123cd211830
- MD5 fde38932b12fc063451af6613d4470cc
- SHA1 bc08c114681a3afc05fb8c0470776c3eae2eefeb
- SHA512 0f211f81101ced5fff466f2aab0e6c807bb18b23bc4928fe664c60653c99fa81b34edf5835fcc3affb34b0df1fa61c73a621df41355e4d82131f94fcc0b0e839
- SSDEEP 384:fSw3uFslDvQGOoqdoUFKgvXj9jmHo5+FejOcEDffWPvy:KwJlrQGOdoUFKgvTmn6y
- TLSH
  T187729FBBD0C90472F16D03BB5CE9785621BE0D0D81CB0EE819786DB2F5B584E8B9B271
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  RivalMods/lib/lib/jsse.jar
- Size 619KB
- SHA256 bc3a736e08e68ace28c68b0621dccfb76c1063bd28d7bd8fce7b20e7b7526cc5
- MD5 fd1434c81219c385f30b07e33cef9f30
- SHA1 0b5ee897864c8605ef69f66dfe1e15729cfcbc59
- SHA512 9a778a3843744f1fabad960aa22880d37c30b1cab29e123170d853c9469dc54a81e81a9070e1de1bf63ba527c332bb2b1f1d872907f3bdce33a6898a02fef22d
- SSDEEP 6144:ABoQeW0HKwYGORU+ehqEmke1WEAibVR0GPs4j8GgflXhuuMAjYDTj:Uo40WGdNmpb3DP75
- TLSH
  T1F1D4D71BE20D59BFF250EAFF9871432C23349C325A73A3794E49582AF9C65F14970AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  RivalMods/lib/lib/management-agent.jar
- Size 381B
- SHA256 52ca96531445b437dca524cb3714fcd8d70221d37a6b9c80f816713c3040dd0a
- MD5 b608d45dcdd7a4cad6a63a89a002f683
- SHA1 f6e3bb7050c3b1a3bed9b33122c4a98e6b9a810d
- SHA512 407e7ca807826f0e41b085bca0f54f0134e3b9ac16fa5480ede02774067dad46aa07d225ba2981dec2a7297ea57721eab8c54e8bed83d352ec6c00abfdbbf626
- TLSH
  T17BE0CD3B3FD5D55DF50D73B477825F1E5A2780440B0C66474781AC545A34D405D23DD6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Detected potential entity reuse from brand GOOGLE.

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32