9124a38873175030cca52083f0780f68407c828fbf8a712cb96aaecf90d9e801

Sharing

Copy URL Twitter E-mail

General

Target
GTA-VI_DEV_Launcher-2026.01.0002.exe
Size 67.1MB
Sample260830-3hd8essblb
SHA256 9124a38873175030cca52083f0780f68407c828fbf8a712cb96aaecf90d9e801
MD5 efa8eba7fb4345e7be5339d1222731eb
SHA1 144a754192829192d5c711127c192a647fe5861a
SHA512 6d197ab00a362a03638f2708736efa3677d9db1c037b2e678ea2ca3a51692ab76ca2b6edf673dcfdf3df2c4759566802ce0f78aabab7fbe8312d36aff97ca29a
SSDEEP 786432:igCj5LdC2AxFd3RRNJhs0lOnIqiHXZ5BOnQhYu79ojF9THcXMOh0Gx+C2RfY0do3:oLdkfRRnJEIpHXZQQhYXB9DnORr0hqh7
TLSH
T19CF733DC89200DB9D20D89726AAA787CE5B8F7BC661F57F270F6766A70D40C0E1C6721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  GTA-VI_DEV_Launcher-2026.01.0002.exe
- Size 67.1MB
- SHA256 9124a38873175030cca52083f0780f68407c828fbf8a712cb96aaecf90d9e801
- MD5 efa8eba7fb4345e7be5339d1222731eb
- SHA1 144a754192829192d5c711127c192a647fe5861a
- SHA512 6d197ab00a362a03638f2708736efa3677d9db1c037b2e678ea2ca3a51692ab76ca2b6edf673dcfdf3df2c4759566802ce0f78aabab7fbe8312d36aff97ca29a
- SSDEEP 786432:igCj5LdC2AxFd3RRNJhs0lOnIqiHXZ5BOnQhYu79ojF9THcXMOh0Gx+C2RfY0do3:oLdkfRRnJEIpHXZQQhYXB9DnORr0hqh7
- TLSH
  T19CF733DC89200DB9D20D89726AAA787CE5B8F7BC661F57F270F6766A70D40C0E1C6721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  resources/app/bundle.jsc
- Size 1.1MB
- SHA256 7e9994b7e4ac1d9889bf014a4c2ff12385249258200a1100de197cbafa5e72ac
- MD5 c464dc2582afd264cae131de1893a430
- SHA1 9a70e5aeaf536eceeb09d6e437198e60c87e024d
- SHA512 0bfd09eec43438ffa57dce06cd9ab4d451f8533b31a693a509701b756438b5041a4ac18131b3d85e9d3428b5b28480585bfb49af71fda0055dcdbd25d6545e2f
- SSDEEP 6144:QSP/iGK/AUIEEdanedjaGo9ctNY77XR5CsQr4GYrBLiTUDFbjE6Pjdm:dP/iNIU+J47XR5CsQr4GYrBLGmIp
- TLSH
  T14545F19556B6AC3B942346ADCC7D5C38ECF108290E0CA339EC1776A0BFFC69E16D1619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  resources/app/loader.js
- Size 183B
- SHA256 195136147a5049f4af25bc27f80e92a531373bc7ca667325f407f3fa79a13433
- MD5 30c835fbd9b01d0daa6cff7eb75d7e40
- SHA1 a52a408dbde427eec8c5545c7cc0017e468b7d90
- SHA512 e0bc6e474750f4d6d53bfd3c50861f3a638665082fdfb9c3eff178731d8d27dd6fd630ece58c3d17c5cc9de8caed8ffb29f794a3f074bb2c7809337ee4aca2d6
- TLSH
  T12EC012448761D45E51A192A5F158145738C3C05023059534C0A58ED95B86DD50A6586F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  resources/app/node_modules/@koromix/koffi-win32-x64/index.js
- Size 52B
- SHA256 f9991ec70a0f775487ffadc2461d69edd1555e3d9bf80de0bbdd2eec7d245c49
- MD5 9ef0f57aa4c79713cd79def89909e55f
- SHA1 380b8f5c86294ef42f983464b04f98f16c44a9c8
- SHA512 997833faf54e78b3da0a25c31474c4038edca84e730834d4789b498421f479193d8166e36323ffa4f733518e9e779414471ba9b143babba0ea2f5d5104c36423
- TLSH
  T1BA9002461690F199A2684594D3D195022C85D4C01C094B0145058DE51C548808905CA1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  resources/app/node_modules/@koromix/koffi-win32-x64/win32_x64/koffi.node
- Size 824KB
- SHA256 96d76a15753e6588abd7a4494985230b795ef8490eb0ebaeb255836bacf2b211
- MD5 6072c21ae391eb22694f632a732c2b31
- SHA1 f31c2e4d2850916c1003ff06c4732d177a6512ef
- SHA512 a105c21e8a0fce0452b5a8df39410404b8933ec6a8a0c23f6bb8d22b1beb481d6076a73aa77e4be4bf0d2eb22d5dfdfc652174727b8081f6a7482d7775c19892
- SSDEEP 12288:kBpfmrytFNXrfKh4tReyXeHlvW5JKck61mq/0yNs82JbdG:iOOt3rKitReyYlvW5Xk61mq/0Mp2J
- TLSH
  T1BE053A43E61A50DDC96ED1754F3BE221B461B849033DA997EA5CFEA02D12B7C233A374
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  resources/app/node_modules/adm-zip/adm-zip.js
- Size 37KB
- SHA256 ddc2c82e58df0054ab2f55153c09435ede4ff593b29747e850d3d22fb6eaba97
- MD5 e4001f89c3c31dd70df8ccf27c1063cf
- SHA1 a955bf9b849ed8690b73fd92fba64fc3e0133156
- SHA512 091bcef6fdd85fb9dc27849d007a484013bedddf6e29354b7f72e960f51ec318199a5aaf308ad6edde3e96bdf4888503b189ccc01d4109fdc5c0d84a300d4e22
- SSDEEP 384:go4Xg+1yf94EAOOLl4ElSFRcgc+EAZDISb+BwkfViCbISV+Ckah1QSqdCC/OctjU:gpg+1c4/4ElSFjEFwi8PILqdC92bU
- TLSH
  T16C03744A2DF2132145B3B7785B5F9004B214E52F621FCA90BD9DA3A43F9973856F1BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  resources/app/node_modules/adm-zip/headers/entryHeader.js
- Size 12KB
- SHA256 6ed1ec82e6124d71dbfb4ee6e5dd4c975657854354cf74741427a1862010a664
- MD5 c2ed7e225f35caea66e6d0d1fbae8b82
- SHA1 c790d906c2270442ffbf427f8f9de1eb229a1583
- SHA512 a9e3fa7e94168b8004376023cc72908cbb4a9da6c3af2553d31bb4c5d87ef9b1313976631d8b65d029fd904698968a5d4685837ae85112b0947830ec730cb890
- SSDEEP 192:ybbx3fxLiIEycM9pWPrVP/UBq6krvJgS+PYfXEflR0QhzBf:yFfxXTcM9pWPBP8BqzrvJg5
- TLSH
  T1DC42FE4E6AE321981E06A0E9CB27E2497757B0077906DB087F3D8345AF8CD3DA5F16C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  resources/app/node_modules/adm-zip/headers/index.js
- Size 94B
- SHA256 536e4b5bf009a3d9f6eccfbbc4157cb6de663d889e0826ea5f6e5fa17aaeb8bf
- MD5 64bc889b89f1c8a04a698a8f74e24e5b
- SHA1 68781da04cf1ebc4f03434ea5b2b65f10cca07e6
- SHA512 9eb207fa61862aebd9cc5a89f85757313c7f163ea0f5a15c16250f79845b9caa1d8109bc3e634a9ed3fb0616c71aed3005ace48eff0941518c778c3063613975
- TLSH
  T1BFB0128D55CB764911340745E119BC811447C0D56110C370BC00036F16C50DCF75E574
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  resources/app/node_modules/adm-zip/headers/mainHeader.js
- Size 6KB
- SHA256 ed5a2b3fc7c8a6937e07447eb3e55e08a0655d2f24fe04039e7008845d221a25
- MD5 1d625a9788b8fd936afe0556478d85b8
- SHA1 de9ef2213b47a8327bf182128c180d0d67e4e4a2
- SHA512 1ea4c24ebc8cc04ed69f50b909464cbe96dc0aa459a2834080361dba134a77d916fe2622ee3289b6e1e20abc53edbc74ed129817a09697a325f487a82e6eeb76
- SSDEEP 96:riX/hDe6p2ciGzYwfoH7gNJzPIrGhbySbfo0lYS5iJfPokt:ra/hDe6pPwjSbQOYTpt
- TLSH
  T1C1E1E08FD5A233491B1AE0AA278794156379B203BD19D70C363D93407F8CE3E95A77E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  resources/app/node_modules/adm-zip/methods/deflater.js
- Size 1021B
- SHA256 6dc41b2460594cfa5136b797653c166b2f7403820a40f2fca17cca35a5de1b5f
- MD5 41fd6791497f7d74ee56a7753e08da66
- SHA1 bd62d07bfe703da89172fcfeaa8848d6ba5c68b4
- SHA512 5f16aeb477321470986a8c9807ebf3b75e979e5fb34156028ef56f44f38c4f4d72d9d086784e9dfedeffa61f91f973b6ac7e7ba1730eebd86bb549de2dbb4761
- TLSH
  T13211F9489EF32194B21B7796C77FAB0D927480131C09DD153D4CE2C64FA4E38D19EAD9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  resources/app/node_modules/adm-zip/methods/index.js
- Size 128B
- SHA256 d67714f1a04be942f90be77069af3ff4214aa8ee84b26edeff3a87eb0d8e2dc0
- MD5 74d54dda1e050cad9b31da325f92fb01
- SHA1 683b0412f3bdb3ae54cd809e37f456dade4d046a
- SHA512 88ff974e69207c427ce1c9161489a275c4328ba392da65b268614fd5c66ef9feb10dafe1464dcc5873221de61bdb045dcf47092760c973ec06825158978df3e6
- TLSH
  T1E9B09B8B19F575D9E2D416C1D133D0461483C0E213408750F11D017B1BD30C4056F9A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  resources/app/node_modules/adm-zip/methods/inflater.js
- Size 1KB
- SHA256 7b62c190669eeefd6b2810a3339d9109ecb219f845fcd12ae93518beec35dc49
- MD5 9672a7960c9e33f661594b34d711c55e
- SHA1 d8823b04170c194c7cb9f22bbc4482832c537375
- SHA512 1d3f374e5bf8d068b9c42f83d18a988b1576ea119856619d5249c6ffee060e716bcda44ca4e0a85d9027b8e38b19b041760914d4b77cdb7875a0f9753971a255
- TLSH
  T1642180489EB3519A762B7394C77FA60DA274C0132C08DD057DCCD2C58F98D38C69E9C9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  resources/app/node_modules/adm-zip/util/constants.js
- Size 6KB
- SHA256 208e943a2e5faad056047f3c7991cce3cde637d8e272a564f2546210ebdf2069
- MD5 9557c90a448baec12cf2cb2f97e2c5a2
- SHA1 19ece17c4aed05723601ec510ad2020fb462cf52
- SHA512 433a683e049a8d2fa321e9cf6932c2f5075c83f1713a9d0514956310174ef2959d0c8378a039d27d0a34f321262f6cf7eee40066ca54da1b57c5483b6d00f089
- SSDEEP 96:Dtbl0W6xP0XM0gly+ESo5Etdt0f2cnHBE8WdQx8Z5h+IrrOnQTUlZmsA:DxyWCsXM06I/uSjG8WdQx8Z5h7rrO72
- TLSH
  T129D1F3A6A8C824536A01C850773EEEF2979DEF0B59645214361F4E8C2F0C97C7FA66C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  resources/app/node_modules/adm-zip/util/decoder.js
- Size 130B
- SHA256 73a0ebb00c4dce2124f07acf0b34374cb03a4384cccd1cd6f58aee27c35953d9
- MD5 36fb8dd4a6ffe2655530fd6c9c8cf1e0
- SHA1 85e85bf9a92432ab576876334e64b026ab3aa18e
- SHA512 f7e6e74931b368ef0c78f9ca6798b09ef9804bd4203b19269ba5fae0190aa59ccb5d972d8993f63f1925f042f0f0d4d730c667646be2041a9989b5e802c5d1ad
- TLSH
  T1B1C09B5674F0206241B7F1485565EF0F64C876651E05547739519BC4454C53474725D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  resources/app/node_modules/adm-zip/util/errors.js
- Size 2KB
- SHA256 d2d243647737c795c2db8aeba2e1f3841d5f76370b521d436cf465322dd4aab7
- MD5 d88386a6ea50c20cfd5ef4517f07bb70
- SHA1 3a75921ab1b86126b2788f2de773ef493198a0f2
- SHA512 84ed1fa8ecbee930b5f34553610ee330f548bd9a9cf9b37a474eba44c63365e1948eb4f0ef66d6798b54fcf23089eed0a25b34ee3c320eb7be913c5cf40b5520
- TLSH
  T1F45184416EA0284B04D680602E95BD1A3A6483175F543D86FFBC03942FAEEDFC9769CA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  resources/app/node_modules/adm-zip/util/index.js
- Size 226B
- SHA256 dc5b230ed853947ea55c0bf69f0e525fbeffefff09aa3da296d541bb8898314e
- MD5 1916e3ec47c420bdcc49bf9a97c7a73d
- SHA1 c14a7e823e8e6b5cd473ce9612e028f03b045ad2
- SHA512 719b4e15c49eecf7d52859018f916043427474f02ca7b456f8dc0e2aa9f4495aaa1eca15fdc3d9b563aace6ec2d2b90c65ff0f531a3ddb9f3fd1a51dfc2c8255
- TLSH
  T19FD0C7C66FE53187621C49D0E262E4021DC6DCB31111D010960C8BFB4288CD186BBCD1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  resources/app/node_modules/adm-zip/zipEntry.js
- Size 15KB
- SHA256 61b6fcc1675725efbd7f0bc7c17529806bd3819b43e3794ffd067eeb7bb88e5c
- MD5 dc76411bba511d17cdcc1e5fbf0fa67f
- SHA1 3844131da4ec7e460c309e54cabd7c48dd0e195c
- SHA512 5c60dfc3b563448eee0d7def6e957eab54f3557904b31955ce71f5362057679b3be264a2c3967e8ab2fde28b9ddd036dea09cb8d912bd498e40a735ebd54b880
- SSDEEP 384:Sd0Gmb6whQz6TuJjjUZCL94kIz/S8+s3P9eqWVZYe:uLmb6whQz6iIkIzq8+s3P9xWLYe
- TLSH
  T13B621F4D59F372014913B529CF8F891A6224B507690DC906BF2E834B6F8847DDEEFAD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  resources/app/node_modules/bytenode/lib/cli.js
- Size 5KB
- SHA256 24a55246e1183b53ec2f926d1d90958e7fb0a813575bf88d3ca8b895a27fea29
- MD5 fbea827b80fab18279151221306b238e
- SHA1 321fbf0f9b9b96f8ad34e899b39e791c2233ad53
- SHA512 614e6eedc8978b801821e122593dd60c8dbbdf1abffb31d19e5e3dd55105cc226fb1c50307255d97ee46aa09b95179ba60e35fa7b1d3240ac0842804099fb8c9
- SSDEEP 96:iqhoaU2pZh3weaU2KgMaGCxc+ymWM97U51+dZNb1nCt9Lx9O7E6E4AL1:iTc+B7//Nb1nyfr4AL1
- TLSH
  T1F3C12218ADFD8A320353206A065A5C0AB35AE0173508DB517AEC8359FFD19F584EF6ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  resources/app/node_modules/bytenode/lib/index.js
- Size 21KB
- SHA256 caf1869f8bac73aab9b47d32031fc4d57aef24e501818ffd1cd35ec3390e4661
- MD5 eaf276c0561d144e34b3572e57f8bffb
- SHA1 32296e516f0af3dd31849b2d18393a3d7b7542b9
- SHA512 cc4ed5bf0948ed3e13f0046a3f43a9b8c7e961cefb9d894a5e75c58707c0d24915e324c691ab6936ec881d379beca2cbf3bbf7f4ea655ca733302544f9d242fa
- SSDEEP 384:aMP5O6Tx3IuCdiPjyzu51YPBDFjqFucT46OMdSLcpBHDd:JP5FTxYukZu/+BRjcu+CYptp
- TLSH
  T12BA2A49D6FFDA231061670D253ABA85E3729D0073219EDC0F9CE87486FD9078C4A69ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  resources/app/node_modules/koffi/doc/primitives.md
- Size 7KB
- SHA256 3b4cab3721ecd6cad4ccc0ba251f9edae24e3b03bb94ac22234b5c8718a7f346
- MD5 d07acb973effeef6b6d44c93405a03e7
- SHA1 b35ec408b3fc4b482b56e15919212e464fc88339
- SHA512 1151c74883f884ccdcc1a4e751d772e76fbe04d0cd70f82e8716adfec64f9565b2f759a8efc04ed18fce723457af18238385831f2d2fe270ab54d202d343523e
- SSDEEP 96:cXnWinghPP1w1H2EvBfGYxtml75eEpMy8l3NLsK9KX+5imMbSW+gYd2:ZRPP1w1HRcqWzpMy8bLsqC+NMws
- TLSH
  T190F10FC71D14C5341579C627A25FB571FE10883E77D62AEE382E943C134BA8E96BC2CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  resources/app/node_modules/koffi/index.js
- Size 85B
- SHA256 34508972d2e18b79fd4a289943568a68bbaf18badd2e82a25c8deb1af27f6225
- MD5 41a4989dc898c85ccf28ad1fddc02e55
- SHA1 0bb42eeda3a963b16d67815ad2eeef165cec4942
- SHA512 9aa53114456ba82075300ac40a1295f91f4ee9bef3924581700a1bf5843d02d0576b238bae00496afc862599eac1e5d8e654345d6ae040fd53de4baa9f681214
- TLSH
  T1C6A00273215FC600511114D5CB07851693F306981C41141401581E19E4C5040E8DD374
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  resources/app/node_modules/koffi/indirect.js
- Size 91B
- SHA256 5c5045c5b5ec2083535efdfdbd95f5212545ce29a4b7f33a683504a35e5b6a02
- MD5 229edfefb90c516d26d8dc24500fc814
- SHA1 917138078e15edb96c7308c8820dd58bad249eb1
- SHA512 cda3b794367bd424e3fa8cf76cde29cbcea6294ae5a111ac7d69aa69f1bc2c28139cc16741eefa0b3df72a01bcb23054facda1e03639b164598beef6ce46be69
- TLSH
  T168B0027335CFC904511514D5CB4F8116A7B20A981C4D542C01581F3964C5000E8517B5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  resources/app/node_modules/koffi/src/koffi/index.cjs
- Size 12KB
- SHA256 9d88ebfdd85954d0620569cbc557070df5ecbf93fe7bb70a96a40cc6fd08ab2b
- MD5 5e2cec3163243a1a91726714ad34fbe5
- SHA1 81903691362bc7d608813c480fbdafe0292add5f
- SHA512 f645293a63e3fdea8618f7a5a63faaefefcdd0b9008ee4435f83bb3a5dbf5bf2746b20af14f03dfaa8ebaa3111e449d390d12cf88da0bfdba9de9da5e7ba8c5f
- SSDEEP 192:3Meztl+YA68htwokQ+PkRuO4igQA1mFIytXuP0fMrmAMxym1ykRS0HCXaPi/vkcb:f5srNhtBb/IAuMfvhFGX7nukE9PSAq
- TLSH
  T18342750A4BFA71129693B065253E54863FF984578248EE1875CCD390AF9D0B88BF17FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  resources/app/node_modules/koffi/src/koffi/src/static.cjs
- Size 2KB
- SHA256 25dff303c876cfdb531e2d9590ecbbb4928c8e60453c484faad66b2a3abd1556
- MD5 75bcccb53182b15569252e35b8e9c68e
- SHA1 5bbcd034eb0cdda2fbbde0b443a1fded5073f18e
- SHA512 ea003482fe300e59fb08f52f2b7d99302f81a48c6d63ec075972a9b3c74df654f35ed916c8fd5f7ecd3912b22df3f5786e494855419576dac7508addf8433273
- TLSH
  T19F5180AA0AE96160640B3DF64EEF10D4B133D4F346097E59FC8E4791AF805754FD0BAA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  resources/app/node_modules/koffi/src/koffi/src/static.js
- Size 2KB
- SHA256 3f2b291e2129181c2984e6508b51efa5be30775afbdbafe6c0f4ed076d80d9d1
- MD5 02ad8994298edcd3becaa5cebd77f14b
- SHA1 63effedaa4b9b0e72bbec7a831eb9bc29e7c2e5e
- SHA512 47c4e3f3637308f83066178f1aa57c740dcb98f4d352326e43b820f27f0c1369fa75df84a068a3e2647f1179bb0a30cc888870131e7a6d4269c2c0543d7a69ea
- TLSH
  T13251A2AA0AE96160640B3DF64EEF10D4B133D4F346097E59FC8E8791AF805754FD0BAA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  resources/app/node_modules/koffi/vendor/node-addon-api/napi-inl.h
- Size 236KB
- SHA256 384d2f7934e898e324560443a0cb76f6c1cfa086f0f6fdfdc643396177025bd1
- MD5 871fcd90b4b614f7e9913f5e162de2db
- SHA1 6800411ef992671afb16918e69c27429c3f8cfa5
- SHA512 e45c3964ecdb1d6424d9b5170378e1e4a70036bd99d14ee5ddf39f4fecc767cc1c1ac82741cce769442bb0d3a9c22a573c26cf9126437e93a727d16b524f55a2
- SSDEEP 6144:rdPvxOsSD7EkWBm8iOwnz65n04Ho8mhRFf3j/LtapJiK7wflzw/QNJbThjh9Dt5f:rdP5OsqEkWBm8iOwnz65n04Ho8mhRFf1
- TLSH
  T17534A61436E5F1012A62E723682A92519E19943B2F3CDF90F1DDB3247F805BEB13A797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  vk_swiftshader.dll
- Size 5.1MB
- SHA256 46afb1ed7ab1b1a679e00784b2e78cc2358cec615553699624ff77882f55787b
- MD5 8fe00ebe76542263463877f27417ec61
- SHA1 763502e57a3c4fbe5fc25ee7e9c942d94505d244
- SHA512 62b375b40eedf04d03d8465570634b56d529e9525bd6d81be94b40c7da21cccaa808be97649f9404ded9edd5ce129f9fb1d462c6a1986a25fa8a228857cda5a2
- SSDEEP 49152:YL1wrvfRIQkXfBe1IlA8gE+LGHEYXb3GNfsUd9QjqZztkJCP1pSN6WxHEmp+DnnV:81w7weOqiFIYBgTE
- TLSH
  T1E9363803B2858199F05ED179475BA632F232F8801B76B6DF52A41F192E77FE02B39B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  vulkan-1.dll
- Size 932KB
- SHA256 fa6b4e20eb448746e2eff9a7fde7a62585e371f3497a6a928eade0a8ce8c1a9f
- MD5 d8f31216785e204da9bad10e9f3734b7
- SHA1 be7f53566dbaec5dbe61afc76bf7401cfc42ef08
- SHA512 d7ef5ef7ed9b5559e107369849adcd18fb9c9c3a90033731a46c4b5d3ba431582936e54e5b5918ce19a667b3f1eb369a93bc3f9a03df8e5397e5f80dc21a61a1
- SSDEEP 24576:CkMYSDIukxvnwhdzY96Z5WiDYsH56g3P0zAk7lE1:Cku0fwhC96Z5WiDYsH56g3P0zAk7l
- TLSH
  T115154C23AA944669D476D034C8C28607CAB178912726B9CF03A81718BF6FFF4777DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32