General
- Target ZeroScript-Free-master.zip
- Size 1.2MB
- Sample260825-rr2vasar7w
- SHA256 f9d813d9770fab9406b1b9bfde9c9b3014f1b286b1cd43ac28c3ac9ed13662b8
Malware Config
Targets
-
- Target ZeroScript-Free-master.zip
- Size 1.2MB
- SHA256 f9d813d9770fab9406b1b9bfde9c9b3014f1b286b1cd43ac28c3ac9ed13662b8
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/.gitattributes
- Size 239B
- SHA256 2fc595a550fe5a987ae373c6c7c652f49802a49ea6f6e2eb68d4dcb5b46e745a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/.gitignore
- Size 228B
- SHA256 6a6eb0dd1d6bafd2ed3facc8df5fee549f80f9d2c98a65acff43ade25e6a3bed
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/CHANGELOG.md
- Size 37KB
- SHA256 8f3db27f8a32cb3cf7a0af6b14bbf0d6149388f76e5a36c8429866d28d1351f6
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/LICENSE
- Size 34KB
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/MacOS_Start.command
- Size 5KB
- SHA256 c7c3522036d8ac281150c12815816202702893cd1521181e5e574e336080c63d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/README.md
- Size 11KB
- SHA256 f4e3e7b83fd1f2a9969d6556034137573f6943fc56a32f714640f552df410744
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/assets/banner.png
- Size 933KB
- SHA256 bb7241e703c179387d413f98fd81004a0adbb33322149bfa84a7a5059b7b88ae
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/assets/banner.svg
- Size 2KB
- SHA256 46ee7bdd7b3e800f32734e54e7edfaa1d92bd4011eff7b4ef4d691c79267542c
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/assets/icon.png
- Size 4KB
- SHA256 08b4f4b16be0a6d8f858c5824cb04512af05e6f7128588f8c0cfbe23668b9517
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/bridge.py
- Size 101KB
- SHA256 94fd9f47b03f2d10d24bcc3d0b4cfb889f4a93c7ba2336a7e605966b1327d33e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/config.json
- Size 105B
- SHA256 6129ccbf86a3ae80ce03ada760a42a0c6b54af6bd1adda2ca2fd91e2c0b31bbb
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/launch_studio_mcp.py
- Size 5KB
- SHA256 f53d17f9f48dd606d3600faebf474b559de4f27c6737d3c90e2cd8c4e26f681c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/start.bat
- Size 9KB
- SHA256 600d0e4ae34057349015d45c520795eb2f1e7c9b25fc5afa1330b41b4fa4b0e8
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/background.js
- Size 12KB
- SHA256 772d826f3af013ee148c95370fdf9b159cf0cf990a44ff5a858d52e28b8fe2a2
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Network Service Discovery
Attempt to gather information on host's network.
-
Network Share Discovery
Attempt to gather information on host network.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/core/config.js
- Size 32KB
- SHA256 2ce0600bc9f2d103a519e23021508030403dd89c875e0301719591b2d281e9fa
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/core/main.js
- Size 252KB
- SHA256 a4f301b2b0a51c1fac512907cda63ddf4998c1105062edf79f5567654821cc52
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/core/parser.js
- Size 17KB
- SHA256 a94c812df1f08bc2943cde606b1a174dd9fc2d2ab71b51c8bc655ed36a63bf00
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/popup.html
- Size 2KB
- SHA256 c3ef926b71a5a9027395c6a04d23a97977fdb24d4f30cf1ac41122e4d0ab6609
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/popup.js
- Size 2KB
- SHA256 130d21c44e76108742a24ff151b341a341e512742e391bf477441805689b1ef3
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/arena.js
- Size 44KB
- SHA256 97f318a349e73d50d1aeec446610463fab4b60d19da0eba732ffbb93a648f116
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/chatgpt-cm.js
- Size 4KB
- SHA256 61f6b1a5a7fca7531bb21a3219212ce0796b3df200a1cadfe969885015f6019a
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/chatgpt.js
- Size 48KB
- SHA256 a4e965dcaa6cf5dd6746edb2ce374cee2ce0ddbbe1050b4c75caadfdc863af91
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/deepseek.js
- Size 48KB
- SHA256 efbd4f16a4c4300f0e743c9a934ba1f4e425a5977d3aaeb71383272433125c8a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/gemini.js
- Size 34KB
- SHA256 524844d019864d6905accb244e6eccaf678bf423b378cb11575783958a86a22a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/glm.js
- Size 29KB
- SHA256 9008488a6ac8a32e330e050c0c18af7ebc1f76aba15864c1274e581de89e2a36
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/kimi.js
- Size 40KB
- SHA256 9b44adbe3d844b0ed9b0dab1dc4239b924dc60be497965a593f77d6a18185f24
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/meta.js
- Size 38KB
- SHA256 f4b54f2e20b8b6340b2303f7d817d8050a26b24af462ed612fcf7ebe8ebdaf56
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/qwen-net.js
- Size 4KB
- SHA256 1c5734f018ce7aff2c4665d5c414672f57869672fccfdd0aa74a06f23ab897ef
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/providers/qwen.js
- Size 50KB
- SHA256 726c346c8ef6d7f761da5fb117fdb7cc74646b8c03343eaa11c24ee2e8d28b2d
Score3/10 -
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/test-chatgpt.js
- Size 6KB
- SHA256 5921797bc6f728a408544d10f46426d06ba35da886a7e0af3bb465473232108a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZeroScript-Free-master/ZeroScript-Free-master/zeroscript-extension/test-parser.js
- Size 8KB
- SHA256 2efddf202c0f6c9a6d9e02bbf09b9ab4ea3de72f8cb3e33dd03fb14f8cd43d18
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Discovery
Browser Information Discovery
1Network Service Discovery
1Network Share Discovery
1Peripheral Device Discovery
2Query Registry
6System Information Discovery
6System Location Discovery
1System Language Discovery
1System Time Discovery
1