General
- Target Game-Copier.zip
- Size 124KB
- Sample260819-ad5klabk6t
- SHA256 02c94dae424d1c817fed12a20dd363ef937191b96be8498796bfdc36cdf264ec
Malware Config
Targets
-
- Target Game-Copier.zip
- Size 124KB
- SHA256 02c94dae424d1c817fed12a20dd363ef937191b96be8498796bfdc36cdf264ec
Score3/10 -
- Target background.js
- Size 60KB
- SHA256 089c9c96ee9b12634c32c0c682ebb49e581f2ae9f5111fa42074f3c107528737
Score3/10 -
- Target icon128.png
- Size 1KB
- SHA256 92ddf50a76c9344c0edacf031b31369d39db952acd9c0919cf19f98d8bbb96b6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target icon16.png
- Size 317B
- SHA256 87621d9613284252264893418a32ab31ae4d7ed559847d7540236b7047a62a59
Score1/10 -
- Target icon32.png
- Size 516B
- SHA256 7540d80d3d3d6fb15a6705ed8c740cc289794642b186d09b99cf07dd04a67450
Score3/10 -
- Target icon48.png
- Size 688B
- SHA256 24dfa78d6c3746cbb8664481556b444b7505471c6c8fedc384e1972f501b4b0a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/rbx-refresh-bridge.js
- Size 4KB
- SHA256 0f60b5df09527837f23c0ad5d56c96da122e5470aa91402ed42875031eef615f
Score3/10 -
- Target manifest.json
- Size 1KB
- SHA256 176b9e8b4a15798ef44c5742bbd33075b674473699bf23658651cf189494d93e
Score3/10 -
- Target popup.css
- Size 13KB
- SHA256 daaeb7415461890effa7bbf071e33e798aee768cfbe0713f9930c8becb190dec
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target popup.html
- Size 3KB
- SHA256 a74864f8b73108d5ba03e42235aeffaf56754ea121282ba2a51e9501bae113d6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target profile.json
- Size 117B
- SHA256 aa027ea628cae0c54d44ae65776674af68e43eac9638731fe2311403e879a8cc
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target roblox-mark.svg
- Size 456B
- SHA256 0518ce6c5a961883afdf458be791d75b9f7754fb22590c1a6d849ada3d509c93
Score3/10 -
- Target scripts/popup-bundle.js
- Size 336KB
- SHA256 9e6d8a2b4b941eb360220898b9a1046866ad9f5b74aae2f43baac056f91bef8c
Score3/10 -
- Target scripts/sw-bundle.js
- Size 100KB
- SHA256 c7d6b254f5a911857f83a2f330c6feb24ca31deee72880e1f5a07a6fa1f38bac
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target theme.css
- Size 1KB
- SHA256 7f7bc08574a06e8a8e1e1f301b70a732dd71239f020e3c17600d7265b7f9cec3
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.