7c6f91e959afbbab1dc9911c4655631f222a3cb99e709139753e7d0b8ec92dd4

Sharing

Copy URL Twitter E-mail

General

Target
My-Femboy-Roommate-1.1-pc.zip
Size 791.6MB
Sample260827-nlcrfasxcs
SHA256 7c6f91e959afbbab1dc9911c4655631f222a3cb99e709139753e7d0b8ec92dd4
MD5 ae3f9cb53f1ce31dd4e6e15449a2b59c
SHA1 29060906400c8157e347342855672c0092578779
SHA512 88f097b3df38ac1f6e2490d70b3f215674cc3ea9f897f63d5f9b0a0524de0d71dbbc96ddf6b3ca452e7f6de1f19d8c260308d9c6326cd6583aefb9f11904f6d8
SSDEEP 25165824:9+AlITOdjM1Pgmnl4Pgkza+w0dXONCR/YkUXCim2:tGTCjM1g2l4Pgea+wixR/YkUXCi7
TLSH
T1878933CAD6020412F93E71B2D7A86D14BAB99611244DA40EF3D8FD8057EBBD1471FFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  My-Femboy-Roommate-1.1-pc.zip
- Size 791.6MB
- SHA256 7c6f91e959afbbab1dc9911c4655631f222a3cb99e709139753e7d0b8ec92dd4
- MD5 ae3f9cb53f1ce31dd4e6e15449a2b59c
- SHA1 29060906400c8157e347342855672c0092578779
- SHA512 88f097b3df38ac1f6e2490d70b3f215674cc3ea9f897f63d5f9b0a0524de0d71dbbc96ddf6b3ca452e7f6de1f19d8c260308d9c6326cd6583aefb9f11904f6d8
- SSDEEP 25165824:9+AlITOdjM1Pgmnl4Pgkza+w0dXONCR/YkUXCim2:tGTCjM1g2l4Pgea+wixR/YkUXCi7
- TLSH
  T1878933CAD6020412F93E71B2D7A86D14BAB99611244DA40EF3D8FD8057EBBD1471FFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-linux-x86_64/My-Femboy-Roommate
- Size 5KB
- SHA256 590d234571b9ae42ede2a43df44b6ef530d2840c61546fc948f4f746176680c1
- MD5 541e5398c07e73dd738a6924bc65df45
- SHA1 4b23c3839dfaa419cab9268653c831e21a00c9eb
- SHA512 fe18d47a9f22b99435c69ac0242899fb73fc90dad7ca03ac38fbcd6f4b2f81f7d4d047c767f907438c7fed3a0cc248a35a6d28e5a05d979ee2188f01043730ca
- SSDEEP 96:Ru2T8eVnMBWBPUcpMR9mA0V1S0SKg4EkfclcKEY5A:RBob8pUcpG0VLSn4e
- TLSH
  T101B1DD1AF3A0CE7FC8AC82749057073973B2A85453520BA35305B2B53D533DC1F2AADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-linux-x86_64/librenpython.so
- Size 29.8MB
- SHA256 4266c218455302c35f7f4aa45b266808401fe73682fd04d87c4094de9dbebdaa
- MD5 8a4e29ed64faf050d7823e8f1dd68182
- SHA1 d415bd1915644bf2c0ba3296d11768010389e463
- SHA512 3d02e12d94872e97b7c61d064b6251cb06f1e5e00bc4ff43891f092ad5d5192d9d777435a1a65cd665873927358594464c0a3cd15b3f4d72310c626468a82c6a
- SSDEEP 393216:cDv3uFJeNCPwLgccTsQOBlX46nny+72wrtpk10:SLBnndlrtpk2
- TLSH
  T111677E07B46214ADC976CC30CE5EA532F768BC5D42726BAB3194B7603F75A90AF19F80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery execution spyware
behavioral3
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-linux-x86_64/libsteam_api.so
- Size 382KB
- SHA256 6716e3eb68f4a5ca88fbefa6db91b06ae8dafd0ef79db634a3d0a6b6e722479d
- MD5 b15f3e7c87218552467b85d08158a42d
- SHA1 24743ba0debcb8766f4449002aadc1c42c76acb9
- SHA512 4fcca7af28533683ee0f00741d0431d77127ccd11a260b458ca097bfa149724db6223062dab7ad9f00841d1c90ef353ad429cbacb6a148a74d7dcc2be429c830
- SSDEEP 6144:y/KFqDCjnx9NW4TOWhnzfB3fRxF6q/JMHsoC5+MKFHGCjnx9NW4TOWhn6:yvDCjn3kC5PxZ/gvGCjn3kr
- TLSH
  T1B1848137A47524FCC1E5D0368A478B2B377A304B63246E7E3158F9317D42A4E2A37AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-linux-x86_64/python
- Size 5KB
- SHA256 7bb681352218369a500d272b1e0cc57859cbd5e91457322859de0206df16cd4a
- MD5 38824d862966195121486cfa70a998a2
- SHA1 532b11579df73a2b21e5ee76c52b0c8a68d5dce0
- SHA512 96489ffb3ad8a23c2bc3188b0bf7e265f13fe6502bd2899cd3512fafe595cb7bbfcd911a2f5cf7d761accef98d152023b57e2731aa6eb26a79e9d524d500fa3b
- SSDEEP 96:Ru2To0nMBWBPzUpMR9mA0V1SoKg4E5fclcKEY5A:RB0Z8pzUpG0Vln4J
- TLSH
  T14AB1E016E3A0C97FC8AC8274905707393372AC54535107A35301B2B53E533DC1F2AADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-linux-x86_64/pythonw
- Size 5KB
- SHA256 7bb681352218369a500d272b1e0cc57859cbd5e91457322859de0206df16cd4a
- MD5 38824d862966195121486cfa70a998a2
- SHA1 532b11579df73a2b21e5ee76c52b0c8a68d5dce0
- SHA512 96489ffb3ad8a23c2bc3188b0bf7e265f13fe6502bd2899cd3512fafe595cb7bbfcd911a2f5cf7d761accef98d152023b57e2731aa6eb26a79e9d524d500fa3b
- SSDEEP 96:Ru2To0nMBWBPzUpMR9mA0V1SoKg4E5fclcKEY5A:RB0Z8pzUpG0Vln4J
- TLSH
  T14AB1E016E3A0C97FC8AC8274905707393372AC54535107A35301B2B53E533DC1F2AADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-linux-x86_64/zsync
- Size 102KB
- SHA256 4a464ca2acb57547bd2790d21e35594852f25541b9b3d47d4505704a892a25ef
- MD5 557d326eb371a82d5d1b6226009037e9
- SHA1 16aa3b40b7b41a97eb5e11579dcbe4c254ce2f0d
- SHA512 0c5cca8492dd275f83ea4f5fbdebaf283bcb585477b566448a3e5f8411fc643889ef87ba277a362079ff8d005e57342b0211b680183c4f9ac733f262971265b8
- SSDEEP 1536:YyucIOiL/a36A0ItFH++bMC6jT4G2oh1g+brKTwCkPnoP/aENwrJ:JuSimqEtbwC6v4Gnh6nTtP/aEk
- TLSH
  T1FCA39D477AA215BDCEF5CA39829F016AF770B041A31257670788E6343F45B289F1EBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-linux-x86_64/zsyncmake
- Size 102KB
- SHA256 ec49a3b9ee2916bc3e13f7dd5a81d8889270d91397079d6eea26f92366f92b6d
- MD5 9d6cee9cf0d945b0684a90398032ee0b
- SHA1 1e2488c3e33b59089bc987e81b5493a679c9133f
- SHA512 4b128dab6d725747b3ab6a17c99d25246abf4c85ab60e7c3b803e1740aba7429405f969c44df6e404ddd372a68d07e723106e81c7eebd9b1e2c81e6943f0356d
- SSDEEP 1536:1mymIOiL/a36A0ItFH+YxgwNOhT+nwO9PCoP/1EKuI7hpaNCW1lAw7D:wyEimqEtZxg/hT+nnP/1E67hpI
- TLSH
  T101A37E46B5A2216DCDF5C9358EDF4226E778B04096160B6BA788E7303F01B285F4DFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll
- Size 4.3MB
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH
  T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/libEGL.dll
- Size 436KB
- SHA256 b20c1e14e42da55c13dad3c23a5060ca086eaf5b18b12ef5c60cd7e80276a9f2
- MD5 1090bf4c5495697a1416cd77481cf7d0
- SHA1 94452eed4fa88dcb0a5b3c503a12f3a3b5f23ee8
- SHA512 d205dd98260d033300afe3f2a1c0c06f3bfbf158067fc3290e10ddf6f51eb80b57af56fb0e75a56b82dc3ec49190c5d2c296aa548b64e39b4b004f60a7da89a6
- SSDEEP 6144:CrHQz/GL44uCWgSqTpyGRxyB5EdpmMB6cm+p4HRw0FlA1Qu4P:uudhGDyB5Xa4HRw0FlCQ
- TLSH
  T182947C29B2A448A9D036C038CA174A72DB31B89A0F75F7DF12E5D2692F773D45B39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/libGLESv2.dll
- Size 6.3MB
- SHA256 2d171e91e1fe7205b76dd69ba9f7ddce7910283a5a5111c09c84f5db8c795a74
- MD5 7dde909bd5c7538ac46064741a8da6c0
- SHA1 46b50003be83eab7e0c48ebbd9260b5b021e70eb
- SHA512 a057586a0b566c5470a6508e27764f9662ceaf3b08244c3db3d1e07789e87a30a43f1daad0274a4e3d00b641d3f9f90e9c073a5f7db3fa6d1de7f45c33adc092
- SSDEEP 98304:1DACC5v8sHfvlfkvghk3xlkihzsfFUQOJt6c:CvxkvgfyoiQOR
- TLSH
  T1BD665917F2A281E9C009C135574B9632EB31BC851734BADF2294F6692FB27E06B3E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/libpython3.9.dll
- Size 8.3MB
- SHA256 180aade9766446743ea650a4afc28cfaf21784fcd64e30a1b925e8868bd5ca6e
- MD5 5d9b86fe40e6484b6ffba69af9fd616e
- SHA1 184c524ec46a036c54188e0658af737746ee7d1f
- SHA512 45eb3ca880b08d02e9625fedb8593684841c534048630d31dbb35090ca7b47ed2d918b05603751a6ff74435cf6a9de248eeab01a6a701f72097061bbe15838f8
- SSDEEP 98304:jt85Qi40yDueXVj4ka+Pjd2w4Y6XO7dPlMBLa2THxM/UZUMBASd3+opm9g0vHF6:h8r4pr4OjnR/CBAW3+opm9g0vHF
- TLSH
  T1B8967C23B19150EDD93AC13192975233BBB5BC501B21BBDB2154B7702F72B911FAEB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/librenpython.dll
- Size 20.6MB
- SHA256 78373093e3e7251a38af5134b735e5f2dbeff21ffbfb23d200e29c16947cf150
- MD5 4ba9ca59c38e5a3fb014244525264415
- SHA1 333c6fc95a9c2e60a48f73574109bc28ce2f30a7
- SHA512 7508900acb42a2c68c709b7088ac07060850de1a2f47aac699e5acb4cddad95f3609c102adf43c997b33ef962e4b6261c0c81461b1a337f26ecc5c147e947558
- SSDEEP 196608:aLYOpRrHtlmfym6MZQ5B2/8YQa9bWCg+y7QfHQGWFuu8:mYOpRrHtlA76MopYX9q+ycfHJu
- TLSH
  T123277D4BF05254A8C586D174CE2BEB22FB65784C4672799F329457B03FB1BC0AB2AF44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/libwinpthread-1.dll
- Size 344KB
- SHA256 00d784e7e002c1b01f3146c87f30030f169843988f87c9631cb2df211979286b
- MD5 da67da022bbc1bb9409e3328c1cb64e1
- SHA1 e1fd29f4256d7066f05d113cb8e96e1aebaa38e7
- SHA512 24ba4936ff149f0875b3e4c7e36e80f941130faccd4d6296d68c8af8b0e647c37d0822d477218ab0b3d4b51f24cd1dfa1ace54adfbd175d122036c3a7e787ebf
- SSDEEP 6144:Wo14rtZLc1fPm3YjZxgMOKSjkPDNjYBlplydMofn6cHqq85l:Wo14r/cBPm3Yg8SjoYvplydMofRHqq85
- TLSH
  T1E4744B8BE754DA7ACA1146318CBB0B097337D04067979F5BAB2CD2783D8BBC4DD99608
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/nvdrs.dll
- Size 14KB
- SHA256 1584412aa36e14bca2b2e5950ee3d111e5b9f8c13d0359075be5eab7406a0ecc
- MD5 e3df1d5ca1f09db3bfd2651952b8e3c1
- SHA1 5bfa88c35cfa23fc7d23371d5d8c2d45a7bec251
- SHA512 eff97ea5e4c116f955bb363270a24080b25d1cd1cb3d642f1117372489d215859d183380e3125428a54a544ab7af080dd500c9b8a4a3dc7c8844e2bc2ab40069
- SSDEEP 192:FKFj3Az2SjQ0bnUdPIPKPpCxeELcNiTw/dUfYa2GzEfw9v4Q:FKejQ07KPUKueELcNiM/dyDzCw9vj
- TLSH
  T15762E7069B5524BEDE4AC17FC2771762FAA0B960076219C70371F2650E71FD42B3D8AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/python.exe
- Size 101KB
- SHA256 fe4780b4f6edaec8594fbf89aaee7fdd17edeb305ff44e1de55ce969a318d9f7
- MD5 854736e905faac44c6e2746fedc67bc4
- SHA1 295a01384c2457fe2d7a65972353a8918c3c98d5
- SHA512 d58d9ab11acc410c647dd38561179c79f0350be076654b2792c0107fa34f1db9e7ca5be3a57b5cc8d8a502988e840166ff62b7a634965952a0051b5c5ea70922
- SSDEEP 3072:LO+3Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:i4Q+IFCumUGekHRvEuO3go9kfnQ
- TLSH
  T15DA3F10AAF5615BED921403FEAA70562D7B0FB6223911CC71211A7311FB7BC1AD374BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/pythonw.exe
- Size 101KB
- SHA256 1f3b73d2c092af9b11d0f8d9d861ff109b76b34a07b86290f2e5e9f445d28082
- MD5 cde709f80f7912843aa52cf350c30818
- SHA1 cbb1701b4078d2aed7eebb10cbdc3d62a4544839
- SHA512 bae92e3fe6a9ed6fb9863ddfc008dbced13893f8f372f038936abdde358e002860225578cad935b4b8af0f2042f48acf9feaf0c8c8538e20e3c6d21a58817587
- SSDEEP 3072:8OI3Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:pGQ+IFCumUGekHRvEuO3go9kfnQ
- TLSH
  T1EEA3F10AAF5615BED921403EEAA70562D7B0FB6223911CC71211A3311FB7BC1AD374BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/say.vbs
- Size 336B
- SHA256 b253baadc1fbdaffad5ea232080cc731c262779e8d256e8a57f7eb5a684a1640
- MD5 2bb7b68da76cd3be900723983a819069
- SHA1 8e3accc0203b203e514107f610cf4bca1a174434
- SHA512 674b3eb9b09fc8957a7a90239270bda61d6e7de14fe9df9a2a25ddda9f36e952046c7f5e755d56f81033157dd699d19c89a2b8940a30ab10d131baacff842e03
- TLSH
  T125E0260EAD22A2968012800314F5C45E4AD8E52BB20288CC3CBFD0E72F0AA07EE71840
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral18
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/steam_api64.dll
- Size 291KB
- SHA256 a3ccbe0f56e4af7a06a1279bc5b45bf4893caa67e5467cb5df3b3f681fb850c0
- MD5 cc7470b39ac697d9a9d2d43f5c30093c
- SHA1 542d7574b76c16b35912fa8f6a4435b44525aacf
- SHA512 ed84c34b4c3c7ba95418b2d582bc2dea1ca771e38f5abbd400f0d06ee897ccd47fd8901f7ab3a709340d4706c1fe2791473e6d98a1ffaac6235927b1f758e13b
- SSDEEP 3072:D8Y+BDOgGIWcXSEJeRhqTMdU55UuT7+7JtN3RUOw65lhTbCMTiGu2ZvA45T+yq+q:DYPNrQheMW5vTKxRJ8TyKyqO2CMNOvi
- TLSH
  T141545976A2750CF4E076C23989565E0FF671744B23219EFF226053368E57AC21E3BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/zsync.exe
- Size 92KB
- SHA256 dbc39d1d4ddc8c744e7840a294f906920c532adc0dc9e69f7664a91b55b2ff77
- MD5 2e9d3dc697a2e1fc5c5be1f7e04508dd
- SHA1 0f72289874472de314aecefeb5457812f1c72481
- SHA512 d938a7d94c869b3b67c70d016b10c6a3c79fc3e928f3471a829b925041feb192f2f4d77993cd450d8246e0a4eec94f2275fd44ffbb931e15a5f9e74624dc0d16
- SSDEEP 1536:/9yPhoPyrELhNx4xKM87bsp9G8e5VuSYJadGo7/TjX3DvrnAvp3ITPvsXXlgpoIW:KEL+kM87QpRKuSGI/TjX3DvrnAvp3ITn
- TLSH
  T1CB934A89FAC75AF6ED77097044D2F27F8730E601C414CE92D748DE8AE973962281A6CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/py3-windows-x86_64/zsyncmake.exe
- Size 91KB
- SHA256 bb9c90f996a54a6c697f41a7897eb924e90e18a07746b612bcb5e034892f260f
- MD5 ac2119ef9d738e1a3b7f83c40616a238
- SHA1 d3f4e1675e39318e3ad9fa62b1144da637617234
- SHA512 f1274568f646ed807e01268f01407349f4b7d3be3ddc5bea29d44bc260847e6a45017809406632f65fbca25d3c7a96438356bf41b3c71f0f9360e85fd091ada5
- SSDEEP 1536:4bjZoLhn7LOuW35VgkJFNqGTfJUM8EoqUxvr7fYnPHv3jz/jDnTnbPr7Hf/TLzAJ:4/eLpW/gS/BUM8EIvr7fYnPHv3jz/jDo
- TLSH
  T19B935B4AFACB8AF2DD77493084D7E27F5B30E100C514DE9BE388DA46E913932591A3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  My-Femboy-Roommate-1.1-pc/My-Femboy-Roommate-1.1-pc/lib/python3.9/__future__.pyc
- Size 4KB
- SHA256 58e9d4577a45e253caf95fee0d446581b0caf0a3d3b08f4ab09868c56e53d264
- MD5 08d42ce57d4c079f976050586d0d44bc
- SHA1 d22d35f0a1d95ffbfda38385ba64b2686eeb159f
- SHA512 ea428d0e6240337bc30e4110481b955db2deee23a3afa981f894dd13c3cb0194def39f60572fd549f1882521e02ed44d98448f86f718706f5d5a488f9b405376
- SSDEEP 96:Sg1NzUuGd+P2sKNwW8D2j82xnCg8Q/Ks/qN+Bj0ui:n4BRd8D1YCM/KsSN+Bj0ui
- TLSH
  T19D81750A69454AAFFA06F2F2A2C951C14F59C3BD2F94603A355C52443FC38A2937B89A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22