31ecc3d60b3e516995655eaaa6ab5b98fececc7a4dfae8758b1d7df03f0db927 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

Roblox-Ext....1.bat

windows10-2004-x64

3

Roblox-Ext....1.bat

windows11-ltsc_2024-x64

3

Roblox-Ext....1.bat

windows10-2004-x64

3

Roblox-Ext....1.bat

windows11-ltsc_2024-x64

3

Roblox-Ext...ec.ps1

windows10-2004-x64

3

Roblox-Ext...ec.ps1

windows11-ltsc_2024-x64

3

Roblox-Ext...ug.ps1

windows10-2004-x64

3

Roblox-Ext...ug.ps1

windows11-ltsc_2024-x64

3

Roblox-Ext...es.ps1

windows10-2004-x64

3

Roblox-Ext...es.ps1

windows11-ltsc_2024-x64

3

Roblox-Ext...tor.js

windows10-2004-x64

3

Roblox-Ext...tor.js

windows11-ltsc_2024-x64

3

Roblox-Ext...oad.js

windows10-2004-x64

3

Roblox-Ext...oad.js

windows11-ltsc_2024-x64

3

Roblox-Ext...oad.js

windows10-2004-x64

3

Roblox-Ext...oad.js

windows11-ltsc_2024-x64

3

Roblox-Ext...ver.js

windows10-2004-x64

3

Roblox-Ext...ver.js

windows11-ltsc_2024-x64

3

Roblox-Ext...ces.py

windows10-2004-x64

3

Roblox-Ext...ces.py

windows11-ltsc_2024-x64

3

Roblox-Ext...aml.js

windows10-2004-x64

3

Roblox-Ext...aml.js

windows11-ltsc_2024-x64

3

Roblox-Ext...ore.js

windows10-2004-x64

3

Roblox-Ext...ore.js

windows11-ltsc_2024-x64

3

Roblox-Ext...it.dll

windows10-2004-x64

1

Roblox-Ext...it.dll

windows11-ltsc_2024-x64

1

Roblox-Ext...or.exe

windows10-2004-x64

1

Roblox-Ext...or.exe

windows11-ltsc_2024-x64

1

Roblox-Ext...or.exe

windows10-2004-x64

8

Roblox-Ext...or.exe

windows11-ltsc_2024-x64

8

Roblox-Ext...ax.dll

windows10-2004-x64

1

Roblox-Ext...ax.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
PeytonHack.zip
Size 7.4MB
Sample260819-wgedgagf52
SHA256 31ecc3d60b3e516995655eaaa6ab5b98fececc7a4dfae8758b1d7df03f0db927
MD5 c8172ba03da0b5ca12f55929997f8bc4
SHA1 b9627bec80bddbe8937a9eff6927ccabeacacbc5
SHA512 f7767b3f6116d06b79a6a1cf6bb811bff1bf54beed695024f3f96309019b68da6f9c8071ce6c1c2e483914b1042365aa20a24872aafc16af342c218087c561ff
SSDEEP 196608:dSu8cswr8c7IqkjROQH4CZvFenvmjfNKVLSuFcswDOJqv:4u8HwH7IlOcFevm6WwHwDx
TLSH
T1077622B989710D82EB4811F9A2714711F27ACA11F4EE9DAC9050BC743CAB54D2D3BF9E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Roblox-External-main/build/x64/Release/ALL_BUILD/ALL_BUILD.tlog/CustomBuild.command.1.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Roblox-External-main/build/x64/Release/ALL_BUILD/ALL_BUILD.tlog/CustomBuild.command.1.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Roblox-External-main/build/x64/Release/ZERO_CHECK/ZERO_CHECK.tlog/CustomBuild.command.1.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Roblox-External-main/build/x64/Release/ZERO_CHECK/ZERO_CHECK.tlog/CustomBuild.command.1.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Roblox-External-main/scripts/attach_and_exec.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

Roblox-External-main/scripts/attach_and_exec.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Roblox-External-main/scripts/call_debug.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Roblox-External-main/scripts/call_debug.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Roblox-External-main/scripts/push_changes.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Roblox-External-main/scripts/push_changes.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Roblox-External-main/src/execution/executor.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Roblox-External-main/src/execution/executor.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Roblox-External-main/src/execution/sunc_payload.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Roblox-External-main/src/execution/sunc_payload.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Roblox-External-main/src/execution/unc_payload.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Roblox-External-main/src/execution/unc_payload.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Roblox-External-main/src/http_server.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Roblox-External-main/src/http_server.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Roblox-External-main/tools/check_braces.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

Roblox-External-main/tools/check_braces.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

Roblox-External-main/ui/MainWindow.xaml.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Roblox-External-main/ui/MainWindow.xaml.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Roblox-External-main/ui/RblxCore.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Roblox-External-main/ui/RblxCore.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Roblox-External-main/ui/bin/x64/Release/net10.0-windows/ICSharpCode.AvalonEdit.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Roblox-External-main/ui/bin/x64/Release/net10.0-windows/ICSharpCode.AvalonEdit.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax Executor.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax Executor.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax Executor.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral30

Sample

Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax Executor.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery persistence ransomware

Behavioral task

behavioral31

Sample

Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  Roblox-External-main/build/x64/Release/ALL_BUILD/ALL_BUILD.tlog/CustomBuild.command.1.tlog
- Size 517B
- SHA256 51167fd09c290c9c08e3010cdeb58d125e36a65c760a3e81c41af4296f66e3a3
- MD5 934876314509e6016727a482c3e01717
- SHA1 6f7331dd191e144b83c67e7de36b22eafc03b92c
- SHA512 fb3455b7cb1a5ef62e7aeca462de372283f22f2a6c25bcc3a97465f90f017edc6fac819a2ac5c524e157e1755da26e9e1833236db15d035139af1879ff9a1b2b
- TLSH
  T1CDF02B7E9197428F5900AD0962386143B1F4CB530D4DB1DAA664C9C5E914D2C48C7DBF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Roblox-External-main/build/x64/Release/ZERO_CHECK/ZERO_CHECK.tlog/CustomBuild.command.1.tlog
- Size 608B
- SHA256 6b2c52c9e8421575db9ade2fb22f1e7d5705d7dbd8ba28822e4888a524497ba5
- MD5 dca5057443deecc50a7837e577018a96
- SHA1 c2e8d6058adcdc21884fc9c3b72549d9ad1edfbe
- SHA512 89f4110b6e55b4bdf4bc29c873ddd1537b5d03b34449a39a601ed5e9addfa98d46d77382054898bfa014e7ec38a156ac84a5105df6c5231ebe9591291a30f067
- TLSH
  T1C1F07D7E92A3428F5900AD0A66285143A3F0C6531C9DB1DA9AA4C9C1F554D2C54C7D7B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Roblox-External-main/scripts/attach_and_exec.ps1
- Size 1KB
- SHA256 bea0b6485752eb5d4faee576afa4e72336bcaa30dcd9fd00da08aeb373798a6a
- MD5 dea03f069cfe148f488d1449904ea8f3
- SHA1 4ba78078282a468bba556ff3a96e42e9e38c615b
- SHA512 f60349e65c176e4ac189dc419876c640708c74b10eb42c30279a02602cdccc7b5a774b3d1bca0101900e8108b1414d327cd7b80149c744035608ed5573723652
- TLSH
  T1D9311E78E5864EDF6B63402699C26327BA6B005DA39D1900CC59E814BF671AED2328DF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Roblox-External-main/scripts/call_debug.ps1
- Size 1KB
- SHA256 f68b110b20ae53658673e92422f89c7878abf1ae883054698b872ad7b872beb9
- MD5 f76c937a0c0b726a917031b9e71feb5c
- SHA1 22aba9b0286b69053e2ab6fe9e35d72f593ea1c8
- SHA512 35ec1d07fe056cd0ebab797b933ed94126c8464b98179a7a41c2f9d5b920f7fa9c632eae91d32bc0485fefb1a2aeafee4e381d5ddc72e9b5f8162c04e4cb0251
- TLSH
  T1C521F038E1461DDF7A534123D9D21377BA7A006C93991900C965C814BF971FE93358EE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Roblox-External-main/scripts/push_changes.ps1
- Size 876B
- SHA256 c7f6388d9bb367828b9222252b47fb4936154c3aa1ed345cd2ea9596004741e1
- MD5 eb887a34415b8e9935d79fae2b68a0ba
- SHA1 dcab0c44b84fab0cecc84da66fc10017b72adde8
- SHA512 aa5255f34f5306b1df134cf6149423b86c8e866d3068863e42d27ed1e1eb9d1f0a77e01438345af865414a0e999050743880698f1d19631b78a1e6b04ac4141c
- TLSH
  T15011EF00AC6049338DE411124D5CE5A4EAC481EE9E8C6C21FAA57C47FB6CC8DC5B0A5D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Roblox-External-main/src/execution/executor.cpp
- Size 49KB
- SHA256 f827528234e38cdb3305a31f4d957c61b880339f8cc10822bc411e5e2c9e0b61
- MD5 a2ebbda6d05dfe81c5d1d401d613da65
- SHA1 1fa0387f0a434a7f494c115d32be27c8a7d45dcd
- SHA512 64d9d201bd5dced7182f46bd28e34e36176a8f50cfe0d72705584b305d7de8699864baeae086ae5503b8c6555257661d5eed2e08460943cbcf2e3888eef55175
- SSDEEP 768:mi22/qI+0mjYUGogruWv1JyYAXV2TYevIvSWSRd/tcWvMB8:/2nfQrvtoOTvVdCWMB8
- TLSH
  T19F33B90D1DF7392529CB9A789B6A31037DA69023C6758630BD9FC2D09F8216E4DF136E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Roblox-External-main/src/execution/sunc_payload.h
- Size 6KB
- SHA256 d93f5e4f9b685368fda8920c3007cd4149c91e8754a0f1439943f0125e1b7c1f
- MD5 9d7a6dec0b94ab790417cb4a689adf7f
- SHA1 c3e2c5af26d7e2aaa12e963542375600101b5a47
- SHA512 6a1301f78d017072df4eb88d4b08f2d06c49884b43fcf9b432746b00861658941e5126aaf9e02d8e6036c0a402c8a61fa3b654f95bfa770f3025220ec8087377
- SSDEEP 192:uGXHjfR8UhZ/YiTGE3g/g3pBX5eBX5QIFWRZtd3MZhldF:uGHF8EH3Fik7p3MZbdF
- TLSH
  T1DEE122CEBA8279A0029364F0D987D806B126B42323481174B6CD41E42F7172EE5F3FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Roblox-External-main/src/execution/unc_payload.cpp
- Size 14KB
- SHA256 3b15c195376093bc8a1f681016132a74c33d84bf055112dd8bc29aacb0fe83fa
- MD5 6cd4e01cafeac1a6da6ecea9277c354e
- SHA1 e9baf0cff912c20c5482fb4c81fc513e221ee3ce
- SHA512 7ba295d521cb3e081911ae0c23bf9fe9aeda1e253f3242a8c9845f97559a3bda77a2ad28e244e9db76c4de04d6da6cd42ed11c6d367c6baa52ddbdf668b76ca0
- SSDEEP 192:hs9+tqngoK2GdSjQ3XuIOO6PX4+K+ghzz8HLCl0ZqVViQkwY3e/CGvCFvDIAuVV5:hs9+SZQOPdK+ghzzeLlQkwsGSYqhw
- TLSH
  T19562EFCDB996717487A37070D9EF6409BA3B782212891090B5DC81E46FB172EC1B7FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Roblox-External-main/src/http_server.h
- Size 13KB
- SHA256 4fcad1825074c33c7c7debec608981fece1fe980615fa9d955b41d23ac6e6d6b
- MD5 3c6dd96f97c12dd7a0a66eb60a799f61
- SHA1 b7e7989f14f6b8f6d1d3367a05d9f0da011bab62
- SHA512 3c951b891bfeb061635d4dc8e4db1eaa2b086c2b1bebd436a08dc371e6e3a9690c0966b1c39a9f7d6ae991cda7b5b933537487eea9aa8895783e03b04d414ad4
- SSDEEP 192:p4XYZ96vRo9lMQ8M5DUNsjm7C0zscgkjuin+QahC5EY7jG/FJ:pyY8uHIsjeg6nlkH
- TLSH
  T19352634948B7742149E3942BEB6A61527EAB9073F368C6A0FC4F43C89FC035946F52F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Roblox-External-main/tools/check_braces.py
- Size 637B
- SHA256 3e19f67d233250d2836bcd1d0c1b225509c3af60f4f44ad0724b7872bbe19a1b
- MD5 dcc49c2147c76f19bce4054c34b698be
- SHA1 cbf8261a9ff61687b64959abfe97d8deed3f2a25
- SHA512 731bad39019ad859fa92f8e9510518fb96b82e275b4244c13484a28892cfdc399186a67142e019c65d74c9e24d88934f14195690aa6deb1eb3dba2d294fb2e0f
- TLSH
  T11EF0498B5A286461C7639A7EF9AA01A201133DCE05006528F79DA2D51B4021CE9F1FF6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Roblox-External-main/ui/MainWindow.xaml.cs
- Size 24KB
- SHA256 97977098a6e46bef6b02f9a9ef96409517ce91a39a8759875d92f2384393544e
- MD5 c38df708b76f0b3ffd63477990be8a4c
- SHA1 5ad5bcde36b730c025222463967cf1c66bef8b07
- SHA512 83db05950595a0782995bf387a4797deec2316b6eedd3d6a2bd800728de145cd617a6a68d67f69971dec6c24e813b9357bb667bb42b54463be314d15df1f6ee7
- SSDEEP 384:tdY6fhfBmXoUas2YBxCZiQl8BSvLr/y+b:PYKGXofs2YTiiQysvLr3
- TLSH
  T11BB2546EAAD741615793603F9B9F95052A33852F161FDC20BFCE41409F402289FBEB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Roblox-External-main/ui/RblxCore.cs
- Size 2KB
- SHA256 09f99196a2c767d9c84776e0eb2fe0333916420f51b2a6f59bc60854d10bee49
- MD5 d56b5b0b7e03c5e54b5b900374c57a92
- SHA1 d927643a6812a289ff1c296a5a36de8a0982e3c7
- SHA512 8cd3810f6e718e276e1e4b5f152a6b00dcd4fa679c7fa962c54c5c57c607651c2bfbcffb0cdb33c516b0bfb0b4c7f175f3f83fe8facefb6fb587652db4c96506
- TLSH
  T1F1518D5825B48F1C192B4628EBC75376723300A772B93900FDAD5E251F571B9D93AF8C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Roblox-External-main/ui/bin/x64/Release/net10.0-windows/ICSharpCode.AvalonEdit.dll
- Size 608KB
- SHA256 0fe9ac94aa22e60b32d670a3d35c58fef628d1b3352d56f32f2986bf5f96f844
- MD5 5b5bae107f9007dc699a29899171df43
- SHA1 34f7a876b5cf0c9ddf46c7e46cd3b9920db0b8ce
- SHA512 8a6262271d3e43bce9f64e119c1a36c338b77bb94ccad4dd25b007879b8c721bd5cd32e651f838e4fc4d8ab0b8b69d7b773c13b497c37c9b0e0e82ab70977410
- SSDEEP 6144:SZnm+2rRLUWzCplOmoG+HRksdH7Dn9JYD//T+jvD+cXXjaoUsCfqMZsCQIJjBZjl:SZf6UWkOH5H7JSLy3JCl
- TLSH
  T1ABD42A2933AC592AC27E1777F5720144A3FFFD87B269DB8F244461BA7D427224C41AA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax Executor.dll
- Size 40KB
- SHA256 f8b1223d7a31039679f8c80a0ad389ba8e2c7d154f9015aa91c5cb6688229d4b
- MD5 aa2888dafdec2482d8f6f9991e4a4f69
- SHA1 2b115ea24e613890b305b455150e9807047d48f5
- SHA512 a67539abe60b243aaaa66ff35e1a27a73cf40dec823587e6454348298e211ef4239b0a95cde934a9da628416e052ac8d607467af417c10bcbb069218f6e200bc
- SSDEEP 768:NAQvNtWyovXcxJXaNDBLAWuWxtC36fqYrIXE80IWD97X1:8yqNDB7DqKi6IX0HD97X1
- TLSH
  T157135B007BB94933C6BF1BFA19B383841E76BB52A462CB0930DD140EB9D730507627AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax Executor.exe
- Size 158KB
- SHA256 17ba536fbe7cde0230ebd285dfbe788b3b6e64acf33754df5360f68fd1d3188c
- MD5 91db703d7bf5066361958774afc967ee
- SHA1 9cf619063d0cdd2b29799bc56ec6661df27bca60
- SHA512 55a16329c58b6685f0dbd1ce408153841fead3120add0c4566c4fcb4ff4e87cadb1ba9e570de5da04314058815a449ba32bc7bdbd75d2d6078cb23b3672c9191
- SSDEEP 3072:OXwANETcQt1Onb5RHrfqDQXFn4dPPYseJwmm82jT6FbE:0lxnlRLfyQXN42DC8
- TLSH
  T131F33B13A6AC11FEE1B7D678C9924941FB7278594B71A6CF03504EBA0F76BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral29 behavioral30
- Target
  Roblox-External-main/ui/bin/x64/Release/net10.0-windows/Syntax.dll
- Size 1.5MB
- SHA256 f9a8fb2c8d639451a50dccf5a4e5bdb9b375353461f8c3355458ba98de26ee4a
- MD5 044595046a98d76fa39aa5998b5ddfca
- SHA1 c6fbb7d7bff04a8d480a1af9f4cc0df0aef9a797
- SHA512 8e807148e20fd5329cf39edf4d839cd6b5ab4dc85b87fe65633f6bd0ff9f44b1d9ac873244b9dfe84d0cb1c3880acf124fe01cc957293a2cde80179ad1ca1005
- SSDEEP 24576:SKahMm61wKoNjWzVrwVRn0DHFwBUxhn1HIEn+335dm6fkqDIEW+d:MsoFWzVmCrFrn9+zmL
- TLSH
  T12575AE53B19400FCD027D2B8CA679A13EB71B4460B20A7EF63D49AA52F17BE50F3A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

discoverypersistenceransomware

behavioral31

behavioral32

© 2018-2026

Terms | Privacy