02c94dae424d1c817fed12a20dd363ef937191b96be8498796bfdc36cdf264ec

Sharing

Copy URL Twitter E-mail

General

Target
infected_Game-Copier.zip
Size 124KB
Sample260905-vkg34afa32
SHA256 02c94dae424d1c817fed12a20dd363ef937191b96be8498796bfdc36cdf264ec
MD5 28dcea53cb2ea5fcb766567da112c55d
SHA1 0057661f6b865be5338e94f508b78aa1f26fcffe
SHA512 e243138dcec43e10b597787fbe1fc7235b3b1063706c59dc717130d0665f98c42f74ae4b4024ce72eac143da64403ff225f0f9bf113e2f59cd6ec61a913af3a3
SSDEEP 3072:tJv/Ce1ZFAL5xzOFWkqgScCc2l/ar+rsUAQ:tJSQEL5xivqCnrq
TLSH
T1C1C3127998DD5237E38ED83362CC2667E46D0A38E248BD668A7274FEC45E4F109537C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  background.js
- Size 60KB
- SHA256 089c9c96ee9b12634c32c0c682ebb49e581f2ae9f5111fa42074f3c107528737
- MD5 cf08a7e42e02faaa6d82edec0c5bceb8
- SHA1 1fbccc0407d44d8b5e19c6340af74c1e8489c3c8
- SHA512 84fb1ffe9d5d4a07bfa5f04255d8c220574eeefe94e940842b966352d696274383c1f00b9a093b0c92086cd9f9a0982db66e07f8adf663b2ec7d13bb84140509
- SSDEEP 768:H7kFGwwj6IGmvudFReViXCl3uq4ruxYdtLmhK8UtMm3NlClY:gGxoWYjmBK
- TLSH
  T18A53939D38F760392523707D8B2FA00572619503088DED64FE6DF670AF4593D1AAAFCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  lib/rbx-refresh-bridge.js
- Size 4KB
- SHA256 0f60b5df09527837f23c0ad5d56c96da122e5470aa91402ed42875031eef615f
- MD5 05613f037a79450708aff7fb662ff337
- SHA1 af9ab838588c7ff0ababa79cd1fe14d16198e672
- SHA512 91d29284ba1186a61af2c7a754a208772dc0b87031e8a3b01e55741631241b1ef48b64b960bab6cfde6d6263644c5cd1964bef15deb9736479e96ca158975b27
- SSDEEP 96:OGT2ChmncCMOWt0UNzENOdvgoQoHk8rSx0aYABdmgQJN/pIb0:cC4ncCMOWtXuNOdooxfAjmgQJ60
- TLSH
  T1E8A122D979E7301E4913703CDBEFD401786525034A49DA04FD0CA1B06FA8D6E9EBEADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  popup.html
- Size 3KB
- SHA256 a74864f8b73108d5ba03e42235aeffaf56754ea121282ba2a51e9501bae113d6
- MD5 d3ffc775b682a9fddbed7909dd2fd380
- SHA1 ea61b643b5e856205f65bdd8626c0acb9d58b827
- SHA512 3ad36523317d5077c9abcbd69228ec21df928c9868a02a622f9954d4ee2b18cc646236c52fee91db2d88764637b1756bb1bd335c9fe05656dc6567287c892f9c
- TLSH
  T14561BA2151F965B362474288B9C99E2F3AC6E603CA0E0208B6FE27D10FD7D81ED2705E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  roblox-mark.svg
- Size 456B
- SHA256 0518ce6c5a961883afdf458be791d75b9f7754fb22590c1a6d849ada3d509c93
- MD5 3888539f28f7aec8e2dbd9d4007a89d1
- SHA1 fbe23cf026002badb7deb3ed4be169be74132bfa
- SHA512 c4fcb2b7c37314bf97b872e3b928785465c486b862fbc625e54a495d992b4388f59a258598f466e53292b4f5b306a11a553ebfa9af5298b0a90bedb04bf2284c
- TLSH
  T16BF05C54B1580118C0248A0677A57968654BF1C6C756CA10F79176051D598DF7ADD24E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  scripts/popup-bundle.js
- Size 336KB
- SHA256 9e6d8a2b4b941eb360220898b9a1046866ad9f5b74aae2f43baac056f91bef8c
- MD5 19dfdc3bdda0383e11ae060a8c6b23cf
- SHA1 a6561613fbd76de40af38cab5d8b67c76163b56a
- SHA512 552f6ed0d9761ed2e958448e545233f55b24380560c9340231f727d622820226de627b5affc58b6351d5c1ca4610e397111caea18fdd6eb96bb63c23119c6a8a
- SSDEEP 3072:/ybjqHz3vPA2kwU4JbsW10YOuPAeA3bRFJcpPAax3or4WgebY9X1RPT7N7Gv:GIz584x10zvu4W3feB
- TLSH
  T12274C9AE24F720660663707C9B9FA005B235D023188CEDA4BE5C83646FC5D395AF6FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  scripts/sw-bundle.js
- Size 100KB
- SHA256 c7d6b254f5a911857f83a2f330c6feb24ca31deee72880e1f5a07a6fa1f38bac
- MD5 51b974941166485b2f045e2228f99771
- SHA1 031e9ed58dd57f51cfdc95af8bf7b3cc03ff4a5b
- SHA512 f8eb982320730fc52cc3569c2dbebff035d7cb6bbf048e1b24e35eb08c11b017b020ebf3345de61c4cfe9dfc29a193bc2612ceb358c972299fbe0abc94eaf126
- SSDEEP 1536:vlxygG550tnPAeArrbaWtxzyerGurcvKx:vBPAeA3bEWTx
- TLSH
  T145A3C8A979F720191223607D9B5F6005B23491131C8DED50FE5C92346F8C92E5AFAFEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12