Overview
overview
7Static
static
1NJCICKGEBH..._3.zip
windows10-2004-x64
1NJCICKGEBH..._3.zip
windows11-ltsc_2024-x64
1_metadata/...s.json
windows10-2004-x64
3_metadata/...s.json
windows11-ltsc_2024-x64
3assets/RigR15.vbs
windows10-2004-x64
5assets/RigR15.vbs
windows11-ltsc_2024-x64
5assets/RigR6.rbxm
windows10-2004-x64
3assets/RigR6.rbxm
windows11-ltsc_2024-x64
3background.js
windows10-2004-x64
3background.js
windows11-ltsc_2024-x64
3content.js
windows10-2004-x64
3content.js
windows11-ltsc_2024-x64
3css/avatar-layout.css
windows10-2004-x64
7css/avatar-layout.css
windows11-ltsc_2024-x64
3css/bannedusers.css
windows10-2004-x64
7css/bannedusers.css
windows11-ltsc_2024-x64
3css/game-shop.css
windows10-2004-x64
7css/game-shop.css
windows11-ltsc_2024-x64
3css/itemPage.css
windows10-2004-x64
7css/itemPage.css
windows11-ltsc_2024-x64
3css/modernIcons.css
windows10-2004-x64
7css/modernIcons.css
windows11-ltsc_2024-x64
3css/privategames.css
windows10-2004-x64
7css/privategames.css
windows11-ltsc_2024-x64
3css/profileRender.css
windows10-2004-x64
7css/profileRender.css
windows11-ltsc_2024-x64
3css/rovalra.css
windows10-2004-x64
7css/rovalra.css
windows11-ltsc_2024-x64
3css/settin...ut.css
windows10-2004-x64
7css/settin...ut.css
windows11-ltsc_2024-x64
3css/sitewide.css
windows10-2004-x64
7css/sitewide.css
windows11-ltsc_2024-x64
3General
- Target NJCICKGEBHNPGMOODJDGOHKCLFPLEJLI_2_6_7_3.crx
- Size 3.0MB
- Sample260905-qq1eeaeb55
- SHA256 06841a408be9a7ae46209384b68e5c83db341d8e4bc121143a5134e139360db7
- MD5 65867d9f5b514468bcf94e35ded69435
- SHA1 0cc69c5a5d481dd76a4008b7815f74670839532b
- SHA512 fe190ae4705cd916750024d7161917a57756509a7ca2fc0d113856155f9a917e55a36c62253624eef46e7d1201dfdeef959a94ec9e6ae0253029844de9bb0711
- SSDEEP 49152:nTzcSFOXrAWJic+pwpgVKw6yvpH/vzO4zbo5pgiV00MF73FLIwRaLmg/9okobIab:EGOX0i7AwpgVKIvJq+lHZLaL5/lo0ab
- TLSH T18AE53349EBAE6912CC31D778E7DB4A93B308A48C8F4A8F6C4A1D18DE1612D51F048F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
NJCICKGEBHNPGMOODJDGOHKCLFPLEJLI_2_6_7_3.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
NJCICKGEBHNPGMOODJDGOHKCLFPLEJLI_2_6_7_3.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
_metadata/verified_contents.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
_metadata/verified_contents.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
assets/RigR15.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
assets/RigR15.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
assets/RigR6.rbxm
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
assets/RigR6.rbxm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
background.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
background.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
content.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
content.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
css/avatar-layout.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
css/avatar-layout.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
css/bannedusers.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
css/bannedusers.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
css/game-shop.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
css/game-shop.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
css/itemPage.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
css/itemPage.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
css/modernIcons.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
css/modernIcons.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
css/privategames.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
css/privategames.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
css/profileRender.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
css/profileRender.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
css/rovalra.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
css/rovalra.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
css/settings_layout.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
css/settings_layout.css
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
css/sitewide.css
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
css/sitewide.css
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target NJCICKGEBHNPGMOODJDGOHKCLFPLEJLI_2_6_7_3.crx
- Size 3.0MB
- SHA256 06841a408be9a7ae46209384b68e5c83db341d8e4bc121143a5134e139360db7
- MD5 65867d9f5b514468bcf94e35ded69435
- SHA1 0cc69c5a5d481dd76a4008b7815f74670839532b
- SHA512 fe190ae4705cd916750024d7161917a57756509a7ca2fc0d113856155f9a917e55a36c62253624eef46e7d1201dfdeef959a94ec9e6ae0253029844de9bb0711
- SSDEEP 49152:nTzcSFOXrAWJic+pwpgVKw6yvpH/vzO4zbo5pgiV00MF73FLIwRaLmg/9okobIab:EGOX0i7AwpgVKIvJq+lHZLaL5/lo0ab
- TLSH T18AE53349EBAE6912CC31D778E7DB4A93B308A48C8F4A8F6C4A1D18DE1612D51F048F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _metadata/verified_contents.json
- Size 7KB
- SHA256 724659d2b25cf3b566373da4d93c6c7a38d50ac9122b5b5a1e8eae1e711ea516
- MD5 e7213b6e72ae9d3d79766b159bf0fc04
- SHA1 0e2a3dad7b0b95b91536abae4b030333dad5d1b6
- SHA512 b5f011568f33e55dabdbfc1553163ba2d3d1721372cead4928af99e955f6741f04702feac278c1ce1ffb6f2fb2c333fc75a47e238953615da63677fd9d6b8cd0
- SSDEEP 192:RiGpIMTcOORQbUPe9MHUlhkAGjVs5RN8ih0BiKbZwIZ6:+Mzafstubh4
- TLSH T1C3E1D5A4CC2CB28D7D28377C9E693733C318D5D4F6582A2F0BD2849650E5B9A44E64DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target assets/RigR15.rbxm
- Size 28KB
- SHA256 1ced4dc9e7a927a3b23a455376d2c4254529fd4221bcf03b3447342597aab65b
- MD5 011d213c3ce443eba99437b9024baa79
- SHA1 ea8a69c2a75437b809b1a0a3f91365ea6800ba66
- SHA512 07610f0a50f4c2f8e2c483e9da8949fb2987c76e4f98b3eef2991e40f49637d97b4954a43cca9bc344b30220c0a2f3b6e988117f95a575dec984ad09c6059513
- SSDEEP 768:Z330PIyPpvcqbbJOLYKs5dXJFQHqP/D4i88rgtwaboL:Z3EPIyeLYK6s64b8QjG
- TLSH T1ACD219F7FD308663C5A87331744A45661B30561E9246C319EBCCA8B3AC8E1793FE524D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target assets/RigR6.rbxm
- Size 10KB
- SHA256 45d0d686acac265fd9480ff98773d7fb447a3bd64588332477f3a78ec0c4b958
- MD5 1f6c5ad0337f66e0127cd5185171f6dd
- SHA1 786bf34a1564d2e0430a0c417972df2d37bd1032
- SHA512 f845359e4c58d8442e7ab53feb66b1f338a55b689c4d4b9e2834ce057859b230d4520a042fa768b38cc493983c6fcc172fecb2e593196d20d668a2256d4b6eec
- SSDEEP 96:f/oTshtI5JYW13PKG4p1KeFv7fu4V5juMtsJ41erzgZn3V7fHXRQA2UF+B745yj:f23T4pHZ7fuu5u4crcxV7PX6Lao
- TLSH T1F12294FBF9298467C54CB33634890D772B25460E524BC319E7CC68B76C8D5AA2FA470D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target background.js
- Size 181KB
- SHA256 7ac8eff99493953eea24ab614acf491d38cadf5182f6bb8e24304d814c3d29c0
- MD5 17d983bef5505b512ff936de3d84bb95
- SHA1 2e3559cab93c6d2d3fa551117220bc0403fd2232
- SHA512 dbd1145c815504f4b2d855c1f7e8ec54affe7f20d727d98bb31b6756b698d88ce5ffb609ec2597fda4f5ebaf8324bf5750797f3031a950881a2c03baa4bad10e
- SSDEEP 1536:YHCmRjOYpyxmN/2c+MRxozEMKQY3q4HRQAU6HR3wbKMmjt4VdUp96PF:GCWpyoND+MyY3OAU6xVtaF
- TLSH T1FB04C70A9AA555260957A170999F85037730828B4F26BC30FFCC955C3FAC49E92FB7EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target content.js
- Size 7.3MB
- SHA256 06f1a02ded7c12d8843c840e752517e28fb31993eec11a803f26c6b5a1c732b8
- MD5 2697950b3c652bbc7513c6bfe6c4206f
- SHA1 85d1aa4bb53cfd919783ad9877c9f485217f5aba
- SHA512 5b29dd0bfe30da032329f216a6e1ac6fa47a1b377e1138a5f6a56294253175e9a7e62ca0aee178f83bd9d8b7ea922b85231208961ed00dfafbd29dbcf99f24b1
- SSDEEP 49152:qaLDNEeHqlwWLlgoS7vDOubKRzF2NVRf+s0lEVtAmhOsHLpI5kqlW2Qp3kYWPfOM:1QwWtR
- TLSH T158764A096BFB10364653B03E9A5FD845B634910F8509DD083DAC96AC2F89D2C63FAFE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target css/avatar-layout.css
- Size 1KB
- SHA256 300d84833b3215c8d85077fd5287645b39aa0da85f0688fbdb8706550e21a709
- MD5 136e2e1609b2b47b2adeace99af697e9
- SHA1 ea028dd660e7dc0ded17bca26507b84787ec6afb
- SHA512 42db80ee15d41e484181b81520510ed6e388eb86c594e21bc09c74dc2e96ef2eaefdffdc39c277b3ec304a02424c3bbc2b534566f388f3c3b146f05400bbe62a
- TLSH T1ED21C323F6E126CEE9526769CC277BBE787D18405F264A74C802FB3C07A60D36791894
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/bannedusers.css
- Size 2KB
- SHA256 3bd5927edf3a1ecfff1d614ba05c2a8ada7b126cf8c596519a40532d7c466565
- MD5 6347151f68112fc8e1145a6ff6cf8afb
- SHA1 2dc65d0dc54149a98b08f7517ed91cb3b8a754c8
- SHA512 55a8ef280f7750947d5c16ce56d103d9b1c1055af5736081bf73a7ea1571ce5f7e8d38118cf8b8b412eb21e9671095a2d0fa917a6b1f39541cfea67d773d487d
- TLSH T191513331D32108FE36B95B2EA5C56B5BFA7BEC51D7024CDC6142921D87CBDC121A0A1B
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/game-shop.css
- Size 5KB
- SHA256 6bd5bea1c8925d876a8027720d4b6ec5af8c5c3f7c853c21f2ff096a1341f06a
- MD5 d2c16519331d76435acf3d077a18696e
- SHA1 1728d0d8d697a36f72437a5ab3a6cf83c92fc634
- SHA512 5d395a2579cc8c2d504656a074f125e780bd97b19455b64b57d2c43466e6d1fca3f9d4cc846ffc9a2892c38e6fed7e86320ef1e845132bee8df4562a5420efd4
- SSDEEP 48:C8sJxLP+hBjjGxj1AjNG7RNkYN5tfVlSrofAp5o:oxLUB3IjCjNSNrzlSaf
- TLSH T1C2C1F5F9207426FF749F4A222A01AF86F5988F14F762C148B633E79ECA67CD1475208D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/itemPage.css
- Size 23KB
- SHA256 4dec069fc6bec5be0f4a94fd5cb28c5b014e598958e057e4aa1779d6fd79be0b
- MD5 7b8e180b834ed9ef1526a59eec9c460e
- SHA1 e6fef642c9f7178b2c1560ea67e9d64888440c44
- SHA512 1e0780bb9035c11f718eb15bb102cd4883f0e6d00083b5acb2e7b4dc37cbdbfb97f19c9c053e8a97366cb7059f8e3c75d7e85c3f2cbf6287112c3592674047a7
- SSDEEP 192:1HKeBWyTJX332a9zc+4HxMFl88dC12rZoBz1Z+JJuT1ZT3VW9IpOImCNCRn:F1RTJX3pvKmC12SN1Z+GT1Zz6IpOIm3h
- TLSH T1DCB275124B53103CF2BB5128A466554CBB24DE0BE7C74EFEA922F5A8C5D99C8363788D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/modernIcons.css
- Size 398B
- SHA256 2d5eda2b1412e859d785d6698626acc0b1dbdce9c30fae22dcad80c112b2ffe3
- MD5 fd4f065a0d9344b302a9388ed2750789
- SHA1 c38ebb5f15ae03b47cb056bec079451e117e3684
- SHA512 56951e10a4c86e59161744c3326fa2d97ea1a122178769f4cdcb77ceb4e9250e65e1f55d5e5fe02e49b48696a9ddf551011748e495333e25e52060fa18e68c88
- TLSH T172E0ABF182728AFE6F5E26725B686F87F2098C04EF901A41C0836B1A44DB4C61781ED8
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/privategames.css
- Size 22KB
- SHA256 3df265f74cf8efcac328ff2ec57a36c09264f1a803aa9a9f7619b5a4860dc432
- MD5 4a0f4d3bf0329641fc5bf5d44caff9d7
- SHA1 bc502ba893c1796bc37c3c5ea2bdbae3898d3822
- SHA512 eb721378b6eb59130912825e37f2d37cb9a7fafc3bcf272cc88ed851b4ed4e0656bd84d23c25175bf0fab0b9460036121d1e720c5bb8a7a4babfb7e0e7d18fde
- SSDEEP 192:YQLALA16FbMIUTdPJCTtMuN38UKWPCSlvW:VALA16FoPJktL81WPCSlvW
- TLSH T199A244196EB122BDB9F7062E39013B8EF270DE16D28175CD7462EA0EC6D79E5076320C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/profileRender.css
- Size 1KB
- SHA256 5105afe70e98ad0db020b1dec08f9681b9164928997b4858c8d3a2984f8ea96e
- MD5 904781717c2db4942e6dfb7104c53f97
- SHA1 fcb75bbecfff74479e7b825b6500c7294019ab35
- SHA512 a54072d78cfe89e87ddd9dcc7af5c189fc64818e09b70928a9862af5072abe44e40c4d436444513cdc4818e404cee8a0fe1a281f44caa1538502542fe592eaf8
- TLSH T18D41357106C3581DB527A1A6757416ECA12AC246EB234F3847DDF23DD5DA4C34C756CC
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/rovalra.css
- Size 138KB
- SHA256 eca7979fcf72221ab2a11ecb327170736ab30aa2fdc733d9b622720710949d31
- MD5 91f5d2a09dc2f8c534a6c4396d7e0d40
- SHA1 4f0d093a55db667957ef754f71ffff778884f8bc
- SHA512 16a54b9e6f9c7f9b1727f4822c8bad908eb147377d95f3a4de8616d265920e86d2c16563d5feee774a2ee693acf3efc03e1e48f8d057f49c7da3366f0363ffa5
- SSDEEP 1536:xADBFbj25dthHkfBfpeRXa9aeTTSXI8obShCfSf3KhILIMn:qr25dGpUoKXDrIMn
- TLSH T111D34032E17415FFB0AB87395B807F9EE5298C11EB625AE8B492F21FC1C7DD21361648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/settings_layout.css
- Size 241B
- SHA256 8ad249b8d111144d6b19755a2b201ea31272f907aa6f6450346287498f684562
- MD5 dae240921465f7b1dfd1874fde90d072
- SHA1 b98c7e0e9f7e840c7c4dc7449f3c949ab66481cf
- SHA512 b6845f88e68481823eb6938452a64cc31d2efe5c6639e2092511597eaf50b481be3537873dbccb6d25c001604f36ca4b2f6d6186bd7a5f617afb1bd027b05e3a
- TLSH T132D097F5C162A34E2BA126DCB1A8265D874E0849FF480390810100088E0D3520363CCC
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target css/sitewide.css
- Size 3KB
- SHA256 52c45ebf2632b9648c85d4f81f0b23e269339cb42d673dba1fcf0d549f245a46
- MD5 b7032c765608e09c1fd35ba4329bcbcd
- SHA1 174334b126482a5e2c68e9c89b0eddda25988d61
- SHA512 7259a74cdea72a2030baab7b38484eba91843c6b2e020c8f4ef7eb0d3d0685faddf7059a82f932d26a823f07716d08ccce828ada37f317b675d2533afd0f0ea5
- TLSH T1617118A5C57601BA722B47BF7386DE0BFBB12D438600E208ECC5F4DE094FAD1D295245
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.