a027084bd37d4b3450dee7dc94360357e7c519301ea3693e2923117ab54e6810 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

WEAO-LIVE-...05.zip

windows10-2004-x64

1

WEAO-LIVE-...05.zip

windows11-ltsc_2024-x64

1

WebView2Ru...t.yaml

windows10-2004-x64

3

WebView2Ru...t.yaml

windows11-ltsc_2024-x64

3

content/av...r.rbxm

windows10-2004-x64

3

content/av...r.rbxm

windows11-ltsc_2024-x64

3

content/av...t.rbxm

windows10-2004-x64

3

content/av...t.rbxm

windows11-ltsc_2024-x64

3

content/av...0.rbxm

windows10-2004-x64

3

content/av...0.rbxm

windows11-ltsc_2024-x64

3

content/av...e.rbxm

windows10-2004-x64

3

content/av...e.rbxm

windows11-ltsc_2024-x64

3

content/av...t.rbxm

windows10-2004-x64

3

content/av...t.rbxm

windows11-ltsc_2024-x64

3

content/av...n.rbxm

windows10-2004-x64

3

content/av...n.rbxm

windows11-ltsc_2024-x64

3

content/av...n.rbxm

windows10-2004-x64

3

content/av...n.rbxm

windows11-ltsc_2024-x64

3

content/av...r.rbxm

windows10-2004-x64

3

content/av...r.rbxm

windows11-ltsc_2024-x64

3

content/av...5.rbxm

windows10-2004-x64

3

content/av...5.rbxm

windows11-ltsc_2024-x64

3

content/av...2.rbxm

windows10-2004-x64

3

content/av...2.rbxm

windows11-ltsc_2024-x64

3

content/av...0.mesh

windows10-2004-x64

3

content/av...0.mesh

windows11-ltsc_2024-x64

3

content/av...1.mesh

windows10-2004-x64

3

content/av...1.mesh

windows11-ltsc_2024-x64

3

content/av...2.mesh

windows10-2004-x64

3

content/av...2.mesh

windows11-ltsc_2024-x64

3

content/av...3.mesh

windows10-2004-x64

3

content/av...3.mesh

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
WEAO-LIVE-WindowsPlayer-version-ddf602d9cfe44005.zip
Size 315.1MB
Sample260814-d7fp4sfa34
SHA256 a027084bd37d4b3450dee7dc94360357e7c519301ea3693e2923117ab54e6810
MD5 699c84cbdad7d344713fdd208de53cf1
SHA1 150b880ffcc44e8428be35927a21b0d02835088a
SHA512 d37c27138704f9423ca81f4274dc25fe40fa0f8188f8023caf09feb27f14149bbbc4dfc112c4c0425087aa4e3669af9a93fa10244d3847c49eff05f2305e885c
SSDEEP 3145728:ZEUnwYz+lXLTlteuUA3LABioZlwZRLnwbQbTwdb/PbLJCh+/aUBPsWUcod0jxRag:ZTMvLZzAwoZAF7Xw9P5Ch+1r4GrF
TLSH
T173F8BF0BF3814AB6C99E4236C9E36720F335E4281FD287D3169D62257DB73885E731A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

WEAO-LIVE-WindowsPlayer-version-ddf602d9cfe44005.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

WEAO-LIVE-WindowsPlayer-version-ddf602d9cfe44005.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

WebView2RuntimeInstaller/.manifest.yaml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

WebView2RuntimeInstaller/.manifest.yaml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

content/avatar/abilities/AbilityManagerActor.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

content/avatar/abilities/AbilityManagerActor.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

content/avatar/abilities/AbilityManagerActorClientInitializeIsLocalScript.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

content/avatar/abilities/AbilityManagerActorClientInitializeIsLocalScript.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

content/avatar/abilities/AbilityManagerActor_beta1.0.0.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

content/avatar/abilities/AbilityManagerActor_beta1.0.0.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

content/avatar/abilities/AbilityManagerActor_oldClientInitialize.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

content/avatar/abilities/AbilityManagerActor_oldClientInitialize.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

content/avatar/abilities/AvatarAbilitiesServerScript.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

content/avatar/abilities/AvatarAbilitiesServerScript.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

content/avatar/animations/humanoidR15AnimateChildren.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

content/avatar/animations/humanoidR15AnimateChildren.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

content/avatar/animations/humanoidR6AnimateChildren.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

content/avatar/animations/humanoidR6AnimateChildren.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

content/avatar/character.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

content/avatar/character.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

content/avatar/characterR15.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

content/avatar/characterR15.rbxm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

content/avatar/characterR15DynamicHeadV2.rbxm

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

content/avatar/characterR15DynamicHeadV2.rbxm

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

content/avatar/compositing/CompositExtraSlot0.mesh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

content/avatar/compositing/CompositExtraSlot0.mesh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

content/avatar/compositing/CompositExtraSlot1.mesh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

content/avatar/compositing/CompositExtraSlot1.mesh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

content/avatar/compositing/CompositExtraSlot2.mesh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

content/avatar/compositing/CompositExtraSlot2.mesh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

content/avatar/compositing/CompositExtraSlot3.mesh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

content/avatar/compositing/CompositExtraSlot3.mesh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  WEAO-LIVE-WindowsPlayer-version-ddf602d9cfe44005.zip
- Size 315.1MB
- SHA256 a027084bd37d4b3450dee7dc94360357e7c519301ea3693e2923117ab54e6810
- MD5 699c84cbdad7d344713fdd208de53cf1
- SHA1 150b880ffcc44e8428be35927a21b0d02835088a
- SHA512 d37c27138704f9423ca81f4274dc25fe40fa0f8188f8023caf09feb27f14149bbbc4dfc112c4c0425087aa4e3669af9a93fa10244d3847c49eff05f2305e885c
- SSDEEP 3145728:ZEUnwYz+lXLTlteuUA3LABioZlwZRLnwbQbTwdb/PbLJCh+/aUBPsWUcod0jxRag:ZTMvLZzAwoZAF7Xw9P5Ch+1r4GrF
- TLSH
  T173F8BF0BF3814AB6C99E4236C9E36720F335E4281FD287D3169D62257DB73885E731A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  WebView2RuntimeInstaller/.manifest.yaml
- Size 164B
- SHA256 cd1e69be66551aaff3763c91e922de26570b1c0d515e917eada47fa1886588b6
- MD5 5939079fc81dfd7063792f1ec44fa7c8
- SHA1 2efd5928073243060f4eb058187a1ce236439765
- SHA512 803baf19a196b35a4d33db781c1c753a79a494f7253c3f96ed8771f0f9d37baa3f94002ae34fd5d335816727dec21089b774c9170c48838d80a1a080b9dac56f
- TLSH
  T1E4C080451565891771545F5B532B1B52D395F06250F1112058831384574157DD1CB3B0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  content/avatar/abilities/AbilityManagerActor.rbxm
- Size 3KB
- SHA256 77fdf4f5c16c201cd5b5a30a37903a4f2d3463c122aab2b68485f27c848d5ac4
- MD5 0a0be697ebe8eadf3f482a2e99a324d7
- SHA1 070e1fd626acd619d9a29a4b9b89ada1293441a6
- SHA512 b4625ea4e0f227bd2ddf94fd0a83ca8dd001e50ec3562dd60c0173ac43c1a2ae766e0c5b65f7403b990fb894f94ad54483c1bf8b753663442ca6b1320e122b30
- TLSH
  T1266170FBE46A4973C244B373B45E59823320864F9282C32EC6DDD47B0C9D26A17EE52C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  content/avatar/abilities/AbilityManagerActorClientInitializeIsLocalScript.rbxm
- Size 3KB
- SHA256 dda1dacec6fb87c0347ea67aa1004b5ded0bfedebecfd0884dd5c49105d95100
- MD5 32b190383a93f20eeb1245e640daa812
- SHA1 a43b17d033303010fc99a48922d4cf80afe5e65b
- SHA512 2359dbcbbe7f2b73551dcb2ad2186e8f114b9cc173c8a3784bcfbd6ea52900a29afaf4c2ba24127eef58c6e7dbae61f5330cd971267344699fb565283cedb059
- TLSH
  T1E87132F7E5658873C544B3B7B41A89427370490F9686C31EC7CDA8B71C9E2AE1BAE11C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  content/avatar/abilities/AbilityManagerActor_beta1.0.0.rbxm
- Size 3KB
- SHA256 702307dd27b3a0fd9bd02295d547c1ebbd245c4945a03c2f2017c1e2f5028031
- MD5 d95773ded678c912ddc0293f7c97b175
- SHA1 96e1c8a65260cf11a360115428d208bd8f8368fa
- SHA512 e247524e02c472178e4355ae95ae5c0f62b9f1774cd1bdcc91aec88369f1e0ecae079d569d3dee0a36ad7f8ae94896aab289f0c0d00a27e543c4603625366e50
- TLSH
  T1E37132F3E5A5C873C1057373B41A858673700A0E9286C31DC7DDA8B71C9E2AE17AA15C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  content/avatar/abilities/AbilityManagerActor_oldClientInitialize.rbxm
- Size 2KB
- SHA256 bf24a2bc787927ff39743551aff8437c9f9366edae3dfab0029aa081a181d7f8
- MD5 d9173cd1a84703fca8ff43226fcd974e
- SHA1 021050fdf14ab655855698e036c36c7e03d16a00
- SHA512 e9340b81cbec7a2f1773481e326c3cfe4c36870a3144a4c7ec3deb410f51ce553f8a855edb42e5dc0d7e93aacfbdd9501cc6ff808000b2c03b9efdf9eb25062c
- TLSH
  T1D75125FBE5658833C144B373B45D49427370490FA692C32EC7DDA47B1CDD2AA1B9A11C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  content/avatar/abilities/AvatarAbilitiesServerScript.rbxm
- Size 756B
- SHA256 0628c4c42b04fdd3f06de244fb64d234e2f64d30bf649914723bb1d40c9dcab0
- MD5 523796c65b80027171e76701220cd1ad
- SHA1 6099ff45c3f2fffae1b287cdea5d8e4af7218865
- SHA512 2f0dc05535ccf2d71393d1db4aa7d03c00ec7f6d23a476d5ec4622b60b7cfbf9a3647bf8e1441fd5f08eb8d983ead85aa82e482b85986a96e8729cc253f7126c
- TLSH
  T1FF01ACF3C671C033C54071BBB51A8A5573310529A292C338C3D56F731CCE0A62BD45E9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  content/avatar/animations/humanoidR15AnimateChildren.rbxm
- Size 2KB
- SHA256 d3bd21b14670923c793e4d08d6be1f6306b2c4d6aac05b8f0fc11c1358641e40
- MD5 2f0a44ee2d2ad5e09551b0e8413ae781
- SHA1 756668c52f4c63a71e09131ada33cf57a992b7dd
- SHA512 7c8c09d64bb410a7ffd1f698c95a8293997e9758c50ba770db76675d29e567071112cf117791120236714fc9e83ecaa7ce448a910d462da371c7172e56715820
- TLSH
  T1A2419377E3A4D893C604B272B00A04E2B3312F5852B2C758E5D42973AC8827D2FD252D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  content/avatar/animations/humanoidR6AnimateChildren.rbxm
- Size 2KB
- SHA256 41a1be5af0678d17fc5ec860755455917fd3700101136938d0c5b437b26bd7d9
- MD5 1cbb67d2844fde04838730b0ecc9415c
- SHA1 7f6620597fc433bbd0d399fbe6959794b5eccb01
- SHA512 be6ec120bd67ca42446d6f1dac4eb53a689b574b3703cef3190e0738d4900fce67ba17cfe6371dcfa40d2a058861aaea9ea1bc1e2ba96d27dd60768b4e19c71f
- TLSH
  T13141FEFAEC388963CA4872B2740D589273314F5A1692C729E6E878B35C4913A1BF5519
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  content/avatar/character.rbxm
- Size 26KB
- SHA256 d8fc2950ab9fa5762838d3c09af5e35d01749cbd5d4b67e1b829091619291208
- MD5 dd57193b0b60e1caf22544e05bfa180f
- SHA1 8abbfa60241ee266cc76bcfea1cd7bc1fadec4da
- SHA512 fdc4ab94fa50c34d9a751aa250b0936416d571163e0846602f255bb3ec59984bfb015310457ecfe1fcd893cadf912d8199f29cf3c0a4a6d774332d15ea34090d
- SSDEEP 384:aj61+KQmElpBpbpopsWGYipXpAZpnpBpR8prpyp9Y1Xp7pqUd1dpPpdi13pN31ae:ajMI/NysDZA3p/RGdY9wtqUfxdkN279C
- TLSH
  T17CC25704414D3E9E49BA2EB1CE0A7D9CE89F5EFE25AC22B170FFFA544C5945418227F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  content/avatar/characterR15.rbxm
- Size 12KB
- SHA256 e841643e20711509082f48643d03ffeae2596391d17f4a49f26e3397d1f8c017
- MD5 6649034e05ac771e2ada13012e128919
- SHA1 6c974b73b859332caa29bd2c1d91531a505c734e
- SHA512 1ebc69c738a0b78094e5a2bc39c3400e3cee1b0fdb773fd3d986e0f2e4ca8f8d01b8c50162ef495179b7a7c7f08cba6036af34db785a2a93739f4113ff50ad6e
- SSDEEP 192:U1bFguZfQepQfnZLeCIM6qwXQwbWHdE9JCJG5ToscGJ:U1biSp0ZLeCoaHK9JPHc8
- TLSH
  T1FC42B4F6FA21D96BC49972307186446236314ACDE651D32FD3CC34B3B88E96E2F88649
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  content/avatar/characterR15DynamicHeadV2.rbxm
- Size 15KB
- SHA256 3a3ae38cd53b0f4004d7980245ca586c9ee7d420bd38705891f9fa97e2405df8
- MD5 18cca7dc0ac12eb0054196cfb0bf3237
- SHA1 abb7f3155c92dca60bb8ea7a7c1ed423f261a2b5
- SHA512 f5ee3361dc3fb3fd515d68e20a0347d43f0734000249a3600655df7923d6e9a2f05ada3d27282d26f17447fef6d3a318a79b6af9e25551fb7c31955f1fe48126
- SSDEEP 384:HZ6tIzZLp6e63PlGw4rHTKPahciRMAotj:HZ6tIFLp6r3P2DG0RRo5
- TLSH
  T1BE62D8FAFA208DA7C8987270714B84662631464D6305D31BD7CDB4F32D8E97E3F99249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  content/avatar/compositing/CompositExtraSlot0.mesh
- Size 817B
- SHA256 d49a6c4733b1f95242958d0df6489c5eea5872a0c7e181c54c93d74324439d51
- MD5 7eff866016dcdbb1b62328a8c420d7e2
- SHA1 80ca518891ba4f8e2b500817ecd6f8ace831ea81
- SHA512 7632b40585c780bcf478f10782443755891c988d93b73b1c604948f1fa41bb0854c7f7f56089e5f81d9b2f62aff3d58e731ed89b4e543b8b0c1b38a372a3c13c
- TLSH
  T185014F416ED05D8EC130563B87D34F90C734D6C845720A3713B8A82C9CC634E2586E65
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  content/avatar/compositing/CompositExtraSlot1.mesh
- Size 817B
- SHA256 ecac9821ab14df8ed697f3b25a79040dcaffd58df36afada42b507132a9816b6
- MD5 13dee69b54242510ab96c8be606b5d8c
- SHA1 d5d1a5761e74ca7f588cb29e01da42461f251f03
- SHA512 5c94717cd477954885f5fab5565b9e8df662e3469bb3a2bfa3036e30ea49240e4806268f137dc5f12d60466f6c14ca72ab29c5ec12a09e4862576fd44c5214f1
- TLSH
  T15E01F55159501E9ED035523B84971FA0D228DBC465750B3723F8A82CECE235C6D46E55
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  content/avatar/compositing/CompositExtraSlot2.mesh
- Size 817B
- SHA256 61b73386d67d4f9b97bd4c920278efcaf41da123e8eb25507c03bd3db96ebb21
- MD5 2fbc81e73f73a8c2a700e2b7cf1a0301
- SHA1 f6e82dfe14e37317c7aadd3367357489bc278fe3
- SHA512 23fe9271ebab99071f8658ffefe27873027543ddfcabdf5e5726e79d2ca95ef8a1369bad11b740b620bc2768599c2c77f85c1b3746daa9de8dd090bf3e9b0005
- TLSH
  T18A0175115A900E9DD136923B94975F20C634DBC469350B3753F8B02CECD235D6D85E54
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  content/avatar/compositing/CompositExtraSlot3.mesh
- Size 817B
- SHA256 61dbbda0944f612350682562340055bcbe5b8004ed028929154ce95da7299769
- MD5 aa2652301ea85eca27b3473e0390c35f
- SHA1 eca478305476ed26e5ce0450ca841a4b1bcfac52
- SHA512 393d044a8476093894eb37931ed6861172fb0fd570d070d38a4f1987bc5896f032c4c11333e6aa0ee4f8229a406f0038cd8a9a180d1540c7366266fad0b94f7a
- TLSH
  T1C8011A414A611EDDC030523B46531FB4D738DAC066780E3723F8A86CECE270C6D42F56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy