d51c7eb7f1aaa2a9eb96c75cd369207ab476a776695d146205e33ecd0b768dae

Sharing

Copy URL Twitter E-mail

General

Target
Release.rar
Size 27.0MB
Sample260912-yllz8ael5w
SHA256 d51c7eb7f1aaa2a9eb96c75cd369207ab476a776695d146205e33ecd0b768dae
MD5 ecc339b249609c7629ad92b0926e1895
SHA1 4497c392f35bf31c3c1f9046c257cd503f88125e
SHA512 6f09365f9b861c6ac370a14139d29f56e71a38b5fbfd2f95522cab2c32b4cb39ac9c1983a3802c6277d010c8bc8fd4b05f87fa58a3d5327a00a4b3d696f8e0e9
SSDEEP 786432:Xfs1AJYwOKza49l2YpugbVobouPB8DFW59VwcQH1v9fm7:X0cYBYakeKVobXuW59Vwce1tm7
TLSH
T1FC57331F525ADB08EF9CE98B4F68E22E8585C9F5D201C6406B97BF83C4F47D8602647E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  injector.exe
- Size 20KB
- SHA256 e1e6f4e2bcf955635885749f98b35142619a14fdcc1d320578d0b4d0f460f8be
- MD5 e45cbcfca5489f543321d5118f39ffbd
- SHA1 32efb04ede8ddc5c9ad14c6d2acba9844b8a3431
- SHA512 1c026edfa1d52c9214959dce8b20e3bdfaa1961978caec4d5b67ae8503c11371ebb34ff30b9ed8da176e60468f8282cb4298fb6f6e44b791a9c34d34055b29df
- SSDEEP 384:12ZhzWSsXirbaOYBJT/sqAK6FvBWNpI5t7x87j0:12uurbW+KCB2IT7K
- TLSH
  T1CB927E4AFE054E73EA7001F8157E563AC97B76323B0991EBFF694A9601682D4BC3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  neverlose-server.exe
- Size 9.0MB
- SHA256 50c55624c981bd167743d721a5cdfcabd93a09b9d21218274699d44c259085e5
- MD5 6d7bd49d24ab491ddf7b1466d0a3799a
- SHA1 f9bf52a9e3ba8a024004c584cd7c7ad1de7b2d5a
- SHA512 b6264fde6250ac69ce800d71c6f44bfc4a0a8b9336e4ebf7440623271e0989070b11d05be37eb067d6cd4c71f4c78dabf671d0e69db8d66c2a468495c02c44f6
- SSDEEP 98304:CGkJlOoaMRcg6yQuN306IA40J74MAznDgwT3kEbfOCMCIe+4mf:9glOv1ME+yMAfgGkEbfOCMCV
- TLSH
  T1A9965C257B5B94ADC156C870C31B4A239A65B0CB0B35B9FB70CC81383F69AF81B39759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  neverlose.dll
- Size 53.1MB
- SHA256 fbab91bb8c824c08fa6db3bca473af6cc7dfa896c780449b1c9ddca17f32d7be
- MD5 8ce9c01995a6985ce6b4ab367bb2abfc
- SHA1 1b026b4775762358174a1576a776c9ab2afa1604
- SHA512 72150ab030efd69b1b720f2ad126cea42d72acc830a572c00583a28f0d68b86036045c96a5a1a60a7b188d880b4f400dbc700faf71b803002ab5bfd42f05d2d8
- SSDEEP 393216:b70h2BKmmHQTs12tkP1rDXDMw+2s60NDUwNcrnPEFDE1IlO7je28jrZ3TImMgK7:b70hmKLMHvX2jT2O7je28p3TIrgcvY
- TLSH
  T13AC7E002BA82D0FBC58213F1E11E8F7E5E29971A6B114CD7D7849EA98CF61C46472B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  nl_cloud/scripts/16_A#29.lua
- Size 14KB
- SHA256 1cfd7488b659f041647a9e10d17cb234c07adea8555f36461506c11e91395cd9
- MD5 04e9fe624a5558f90878b05962bc43b7
- SHA1 7964de6934ccc4640f97cb0e0520f3d739a80558
- SHA512 78c2eb3e33a75efebd7b364dd48e046ff9992500ac06b10c5e3611e8e74ae18fa67b4dd6c06054706115c66e38b36090cab7916e42feb9d0401c89197ef99f40
- SSDEEP 384:KWKc17dx+5O9T1zvCGK/MjO1ZrkNWVQ7K9MOAOhOzO470BCpY571Wmt:KWKudx+5O9T1zvCGK/MjCINKEKv9AqHr
- TLSH
  T1D362325A1953A0D187B35658FC5B5004F36EA563143A041EBBBCC7C63FBC86CD2A6ABC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  nl_cloud/scripts/18_automatic grenade release#4.lua
- Size 19KB
- SHA256 8d30a76e5c0e402a2aec939e101c15c7977cc4d35fccb70b41c60f4769e6de5b
- MD5 de132a9a20aa254d57a5e96dc8a41bfe
- SHA1 ded68c073e63bb5533a2dbe1899e2d4fc8b11521
- SHA512 5896370c263e4041e21072f33bfb034dd6d6756a7ca46847a023854b3835d2fd85fb1cbf325df734de8f96ad71e8dee55ff58c470779a35c1f912e09da81b3f4
- SSDEEP 192:QXfVIqcIVR/iOSXpfCGYkF6390Q/5LC26lNMCe4bLR/IiDknBnKKiVDrV+T2SZRk:QXfrR//SXBe/5LHELJ4nBABrg6cC
- TLSH
  T19492FC1A2BC7467198F2E6D8DC47680EF3A61043025D12A6B7BC52C53FB925CD2F5BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  nl_cloud/scripts/19_dasd#33.lua
- Size 66KB
- SHA256 d572391ee40872524589305e661eb8c16b5f477f591ed6ad0cc3663676f4423c
- MD5 eddaba1d973fecb07b0e4bdda43752f0
- SHA1 0e3f0185341fe7d0e678711c74e524af6f903f0e
- SHA512 380939c0a99d9a547b71b9a10c594eefce891682a34225e8741049c2fdd4e8a3d497d17db6d06e68e67b40ce98045ea2fcee9eb98a6141624e8d05344d511ae4
- SSDEEP 768:oiv4+uO5uYkbSsV6+r0oJWCCdL6ZrZ7mRF+8bJ/pbrQoiJGGgWH6UaJIji/LY4cA:oiv5zHrCZXJGGgWFJMJT
- TLSH
  T1406331567C1B64A098F7D2989E0B0409F3E24443115D462AB9BC02ED2F7576CE3FA7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  nl_cloud/scripts/21_force shot#7.lua
- Size 10KB
- SHA256 a55a7604b4ae0c124f2a56151dffab4137e532376608d4530ea1faa9c4087971
- MD5 65a300e628b67f1a81fc4f57c12b1f36
- SHA1 8b2736cab5987a45c7ac58dd002e2fb48b7ad3d1
- SHA512 c2e3ba16e122ea264250d409127590245f18e3566524f2f75811d6ff050316cdf42a2e8001f3230f8738e8c19815da270fb4c71b08ea2ba12481842c6be7de78
- SSDEEP 192:S2XXvNalkQ73hv7mq+CNCYJ0W6vz/kCDIzW6ov6laXWcp:HgkQxtCYJ0W6vz/k0IzLoylamO
- TLSH
  T149223E5B6603627398F6F7D8EC431406F39658A311292636B5AD41B53F3439C93E0AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  nl_cloud/scripts/22_gazolina#8.lua
- Size 165KB
- SHA256 aa84e477d00ed1112105b72b99c68ca220bb3e84d2aeaeff411ce86416b81938
- MD5 beeb2c382099635ab07e303581905bb0
- SHA1 32b12d3f903c8cdc8faabe5f3fd01cfd18e4eaac
- SHA512 228b409c0ee8535b68cdaa5e01ea9aedbc9bccd837e1c5a80b53a4300263a4833375be5fc423728addae30520638ac0a8f60b9568903cd527dba46205a1c1086
- SSDEEP 3072:cNU/JTJMJR/KB1VJgJaRGJjJ9tViJM9JgJzSfJYJ9T:cN81OHEy8stu8uuKD
- TLSH
  T1E5F373263687153259F3E6D9DD87180AF7665063112C012BBBBD42993FB860C92F9FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  nl_cloud/scripts/23_grenade helper#9.lua
- Size 201KB
- SHA256 a61f258eb8e71bdd4e1fa5e149c47099543122cbc84a862387781987abf67a68
- MD5 fbdb3108abac0bf88c4a9c5cf34cbac1
- SHA1 485d3655ca49c4603277e0b41f5c42e12a96ba6a
- SHA512 a2834ae1dda3ef88da9c84952153f79b50507c8b4c9d6724aee7b521a00a25a3ed2ae159cdefaaabee5bbe6cc3eec87cd5ae314747c8583f7cf7f37ca4637573
- SSDEEP 1536:9AOZGBNqint6DcSQoMv+JY63fG6gijeKqwUVQGQTKqSiFi9dLDhQw7/:KNaoSgtRifqwUVxNd/
- TLSH
  T18F143356EA4716B2CCBAE6E98F664003F96548831148C32FBF6E16C16F71B1C52F35CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  nl_cloud/scripts/24_GS Indicators#23.lua
- Size 20KB
- SHA256 294d9dd425d88892892f840a87027523c94cc9e5abff2f6605a69748e5e64d3e
- MD5 cfb8a587e8cda5837efe63bc5831bf44
- SHA1 8a9260afbe8f4859f868e1f4c6d1b31322a2f982
- SHA512 ed39746fcf517353a0fe8cee8f2f21bbe2aea31c41d170f47d01d79f1bf4f6132aa962c17b4ecee9136da8f81e4afec416468ac6e170321a86f2eacdf61612a2
- SSDEEP 384:VvCPQGJGRyqMfOTT/RrP3b3qd4cTWlRgwa0onJis:VvCPQGJlqjNL+4cTWlpqnJ1
- TLSH
  T1F292403A72862267A9F3F2A9AD871144F72005B341680E5B3A7D01641FFD5ACC3E5FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  nl_cloud/scripts/25_imp exp#15.lua
- Size 2KB
- SHA256 e882a7695cd85c61f1001a6d38ee4b3397b038156f43bf3457a2adf3ef878afd
- MD5 a009a1c474cdfad8cadef49b11220a4a
- SHA1 cd67e671b635f291e808d722a18d95f51206f7e6
- SHA512 f51039b279e308abbf020709c4714ad558c0a001436575c81b0c77cd08dc3df86f6cc024eb2b2ecdbdcf2ee89888e654e35c54ea2a1793030fe93c108b5a2d73
- TLSH
  T1C8416956210A695261F3F2CEC857201AF7130C63176C1063B53D0AA65F7414AF2EBFAD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  nl_cloud/scripts/26_luasense new#16.lua
- Size 233KB
- SHA256 154cc9d49c56dbba6c1b9fc68ccaa8e3f4d9a52e35a024c1235875110f8db08b
- MD5 e616c6f55e88945fb93e62b1525e5ab3
- SHA1 ac7db315434b313bb2ea4ff5fa46e7cc9f162d5d
- SHA512 8fa0a91a567785ba9eb382e9f37de9c86b9314ad905a213e19138f5691b1aa456fe6e8ce3c6f9c17317f06f213fd4b10c6f5805065454e0aa358eb40d8766d33
- SSDEEP 3072:R/J0zpJCEtv9JqvSNDcZkaOVJkkaJXHsu7:R/Ep8EtvLoZkaOVJkkaVsg
- TLSH
  T124348326A50351F3ACBBDBA99C8B4413F17602571228822B7E7C47853F75B4C52FBA9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  nl_cloud/scripts/27_luasense old#17.lua
- Size 365KB
- SHA256 d28bbfee52ce5473485db065410352f5d2feb334f0a0ac47a06c71e58abc93d9
- MD5 44e2a466b8e058ab6a944b0f50c1b91d
- SHA1 12e040acab1f9786d57ffc8855fb400d54ba4700
- SHA512 89f0a45964f550bec5a840426774c15b36a09aed5da10219c532296e6af750eef98cf024038942539f8af6357aa84c6b10e6667c72fbb907ad7580a458989db7
- SSDEEP 3072:6j1Zzo2WqJqxJ2b8cglwdJc3JNij6niMPOB6:6j12oqob8Q8nn2B6
- TLSH
  T1FC84957AE2173173DD78E31485C60185EA262067807455AEFA4D10B2AFB4F1CE2E79FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  nl_cloud/scripts/28_model changer#18.lua
- Size 103KB
- SHA256 19dd3c2000a486684181943431fdc852f3d87b0a0dae3d16bfc4a03f240979e0
- MD5 1de6ada015850b71272c4dcc6a19d3a5
- SHA1 34fc70a7ed79b0a6c3ef2ecacd5b7af16ceb3c67
- SHA512 d15818050aed7c134a7b41f1f72ccbef18a49f2759f278d53ad2b7b5e35157ec421e7686e07c683a27ad6f9e633ab68acf83b9d7c1fa8c30b15a08f400a122fb
- SSDEEP 768:26xOQnuAL7F5Rpta9a/uN1VWYrQb3VLlSeS3E20BzZ4zTCiMo6CD1Wx5MupGzoC8:ZW15w5tCMVCpuhGUoqASWCTr
- TLSH
  T15DA3844768F30FB2E57EDAD97B6E2A12384B84935414D516BAAC859C3F5CB0CC0F429E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  nl_cloud/scripts/29_nyanza snapshot#19.lua
- Size 311KB
- SHA256 16519e23f5c37d6d1954ee143dd86ac61fea64fe665d6d91594f4bd28f7096cd
- MD5 46714a92632c8619c1a53fe207bd3d1e
- SHA1 bb1f25fd94557b5d8b87d779fedc068a97621571
- SHA512 692d8a4a757b699b01cd154794a21b99ffd9a4dad7ce39a5d0fd4fa230fb4fa370e16f260c35ab5c9174f14b94a0b28843b0c71e31c1e3fe3a7140935191763a
- SSDEEP 6144:hZfYvfJp5SAdZH9kUbzEUGQqiXpmhM4CzsMWJsw/oF9zMxwmiW9YT:PKpSMZGYzjGnrgMxuT
- TLSH
  T17464E84A77A7A6B3A97B904D9F2B4905629B0083120CC07BFF3DAD996F54B1D01E36CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  nl_cloud/scripts/30_nyanza#20.lua
- Size 244KB
- SHA256 6a4490ce1cd7a4a3179f468abc47e00001696222503a882268042763d592e29e
- MD5 47e6270a19f55e7976e627561cc94964
- SHA1 e56a3a15f7f637f2dd0adfa4282c9a64aeba1900
- SHA512 911421345ec59e6da665872d8e48a4775589a6935f5a57a54c85961ed36534491fc46e5a83c8a65ce44cb91894e54cf4a27ad44a39d9d510c413c81a599f3ce8
- SSDEEP 6144:jBc3x4TYzmPSBAIPwg6NqAcCC5I3SFtAl+PfkW3:jHSFtAl+PfkW3
- TLSH
  T14934B81265B326B5DC3BF5AC2E070A113EDE8023710CC57B3A6E09AA5F54B4E51E36BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  nl_cloud/scripts/31_old gaza#21.lua
- Size 259KB
- SHA256 ace89553d4857fed6031c079ce59b791e19e2abd2f542f605c43dd4cb64fcccc
- MD5 f5d022ed51e180b11933998da7a6e298
- SHA1 6894fef2fef45e262560df6f381d10c17485b31d
- SHA512 ecfd26d72f5532b55850e51631208fd8d29d39b258c8dee35cda0599e556ca0f561719a9b37c57070cbece40cc08ac5f9b0efa68c6ae69334dab3fe71b90dcc8
- SSDEEP 6144:xD2ApL6tilLoZfsWsACb/Jplh+BeTHao2WA3xMV:xlY8LoSyCb/JplEMT55
- TLSH
  T166445927665716768CF2D688DD8B580AF731006311281A273EBE415ABFBD65CC2F4FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  nl_cloud/scripts/33_scoreboard equipment#22.lua
- Size 19KB
- SHA256 ee1cb9c7f00e4f3ac2899243cffaf28c0cb19730b7069b5d9e7bb1f447374e05
- MD5 63090480dcd351266c32d0ad027fa823
- SHA1 22c18417619f2adb661553618f166d357e13c5ac
- SHA512 f2ba7d4cbe6053868355345a7ddc1c775a335d6b108f11b75ece602d597f29d7b42a78ebdef8faac1ce07b054358299323489297628ac7b196077934e41e1c9e
- SSDEEP 192:UxoVw46K0qN0wUmOWa7CBaMBxuVQnyiqJZhWWMzTu+RRuFqT/MHt+vjKXZY3:g4sw6/26myiqJZhlCZcEvGXa3
- TLSH
  T1C492105B7A43B2768872E7D8CF679403FA5824430408C635B89E94D53F7466C92FABEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  nl_cloud/scripts/35_utilities rep#25.lua
- Size 290KB
- SHA256 28b16a530c06687db0e9b5b6cd2dcf4c91784b7cdce201455f1f33151d5db8fc
- MD5 03a09a1335e938a639a43fe24334cea6
- SHA1 a69a21c0889ac6fc0f21f1548a141cfd3e6b53f4
- SHA512 c9c8604a9b5b7372204ff06b048102e8785affdaca32e5e00d9e5381ff600946ff96a9aac74ab2168cf68253540139151a2854f84ef96edc8d6b69cce3bd9214
- SSDEEP 3072:aduJ/J8J/JvJKJIdJQ/G66666666666dYWnqKJRJgm1JqJuJfpJY:aMR6J14GqG666666666663qKLW6487K
- TLSH
  T14D5482B5950265318E9E5388844E7FB32DFC4CCB41657030761D00EDBB98BFBA9AD6E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  nl_cloud/scripts/36_utilities#26.lua
- Size 61KB
- SHA256 fcecb2d69d8afbf1a25b36fdce2d61c3df88748f68184d6caf95857c50291658
- MD5 3c787d9e8e3dc9e9578da12dba313df0
- SHA1 bc112f6447b4618dbe7cc84ad32b7597b4105921
- SHA512 a2ba5521b94cdb1e7b03309ef487573ee457cae1a6a47f991f6532f8a3197f3dddb46aae6f309837fdf9e1798001bbed0e4f3a83d1209813d69b4070cb2d8043
- SSDEEP 768:ymhzLwyvZJ2W6vbk6L/XJdYgW3aURf5LF5oiVoAnhs2C/H7zx46ILLG3:VVMOZJ2W6vbkI/ebYd
- TLSH
  T17953675ABA836AF698B5E7DADF430102F7A015934118813BB6BC01953F7924C52F5FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  nl_cloud/scripts/libraries/aa_handler.lua
- Size 4KB
- SHA256 8d3eeeef3f8276892f956dfc462706fb0abe544bbe81fb52aa24c83cbf0f03e9
- MD5 15e38f7fa407f5531008f345421dc504
- SHA1 beb57cb3378b6caeca14164be6a3ef061f266429
- SHA512 6fdaad062187ffa1030499b52b75ddb8b5c59f5620e4b98f9a3c71eb36e235ed96cf3d2e77f92c93c0ab3ccd757d580a5b388eb82e466ea0347b73eca7205f29
- SSDEEP 48:zfjPqd4ruPqsIoq1iG/V0GZE4hqae+4m9MoTCUmOrdNvJIP1og8Ng3O8bNoKolUT:fmWfPCVxPrp2ToNF8BxqoMwsHzHZ
- TLSH
  T1ACA17D72B75B80638AA0F53881338488729DD467C934E9737586D17CD8EB8AA41F1DFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  nl_cloud/scripts/libraries/animatables.lua
- Size 1KB
- SHA256 81b432308b98ac157e81a6e1ab8c7d364314dd993706e5f9cdb9fd110d197acf
- MD5 b7493268e8a78b94b4115ef1afecf201
- SHA1 ac9b4239c075a7a062500c2173321f102b8ce4f3
- SHA512 0037609287f7bbf49fd33ba839fe14a8d8c59d1c23c11cd0d32c9c1507223b171442555540b005141d220c12a0a264472504d0e27977b0883c57244d8a1a11bf
- TLSH
  T17731382A3F2135180F22B0BDC27E05801ED731A6165855A4B879D60DBF90DDEB47FA7D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  nl_cloud/scripts/libraries/animating.lua
- Size 131KB
- SHA256 c5135611f577454eff000e6ffaf5c06cf4168390870a433210b58d3a55cf0a82
- MD5 2fdb36b1e58e072364c45d5dafb55241
- SHA1 d20b389f8a1cef847604fdf01dc1395463d70580
- SHA512 514c6e0f783c0923d037de6fbb133ed5cf1be0bcc216e948c215a10f900f50e1c7166772064a4e40b7f02fea7c8c34e3f9608eb26b4e3021f5968cd8b0573366
- SSDEEP 1536:G0FjrDEDHjxuXMSytdAJQq2BUWc+AGExNumn5wFi+Lc+Sa+geCv1Gl7:SJAJWABNumn5wFi+Lc6vol7
- TLSH
  T1F9D382DC771E8A698D9723A8C84E1C06BD2EB073155D16A5FCA8207C158D50F92BFFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  nl_cloud/scripts/libraries/animations.lua
- Size 8KB
- SHA256 7b77dc1062bc57e4bd6f77e24f1f0ad53ec1f49b57c8c63c61070a23c068df56
- MD5 093b06caec7710e09166d2e47d5f473c
- SHA1 3a08a77a41760740291f9e8fa15f7f6079c510b5
- SHA512 f4a1c79409117833b79a6fc15dae08330805bc1dd14d0da8c205f6cc9c6ad8292a117bdadee4d0b49f106fa26423fd48a8b7a0032b0e4a714dd6156a8c39821d
- SSDEEP 192:Q9Ktntl1/tTTtpVtGpt3tStRIRtOtAtLdtdftCtBCYoW5HbUfe1Cc:5tl11ThpfGr9wmjUyTdVgB3Efe19
- TLSH
  T1E5029B7A740691A2ABC7F11496C9B3857FAAA233F65A25A0FC0D05206F34F1B73D9718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  nl_cloud/scripts/libraries/animations_aai.lua
- Size 3KB
- SHA256 2ea5b1b79e1deed7541bd89e6b723d6a90c5e25c00451b271b369d6a32563629
- MD5 0fc18e735213766745154c8f345832e4
- SHA1 2800bff4f61245c9f4de918ec1a075ce9d924888
- SHA512 6dc69c9fdfcfda68a8f1fcc22b82d6c8d3e3625c6a295e013eb546280174afd668c0525f75c8727f0f957c6627d777b65281201a7591579ce919b77ea661df7d
- TLSH
  T11E61DB673A21460C87756020496F21512EEE122AF67F1BE0F8BD88DE3DA9D75E47F134
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  nl_cloud/scripts/libraries/anti_aim.lua
- Size 8KB
- SHA256 e38ae26fe7bc35e42bf757a3bf379aa994959e89c17f4c87939bfad33cdb5a66
- MD5 c99d9544737b3ff727395f47f4bc7500
- SHA1 b452c7a3ead51684c44d1fe4d032c4f2f83140be
- SHA512 b5546bb3587697ef90ab36c7a7d672a8dbf57e605e5d06a7bcf7134b4afa668432775269368aef3f2f8ca59bdac8a2940112387bdb0fd4c48acab71e758efc87
- SSDEEP 96:Khoqm95ht5ld567Fm8ec1YjG37xY3owpMjfB/q9Yu7YDI1Y3HY+v9MyyIcFmSEL:Khoqm9ljG37iowIgD7YcYvMy/mREL
- TLSH
  T11702DD79FBB7C0018661ED34853A484965D8E48F4D7AE633B293906DE8C06DE48B2D7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  nl_cloud/scripts/libraries/avatar.lua
- Size 10KB
- SHA256 b94669ec380e5ab9616457f02ac628251435ca622cae891b117cb03a5162fe30
- MD5 1858a3af38dbc35aba9681e41b55c11c
- SHA1 7c11b4ce9b84c307560e8588d28b992f26ec101a
- SHA512 f648f214a5aa271d7c91ca24562d4be4ea65c337a37f731504c3c8f88b17b79844d6f417c5d348108f54810320e3e6994ce0599ad91419ffb635171f76d0d62e
- SSDEEP 192:LEgYteC782MzqaBuOwLTMEvnpdkxDJ+DVZdNgV4XGcROkUyGzZL:LE9KeTMEvnpdki0KUyG1
- TLSH
  T16822501B221428F067079597FD673C03357AE427139E190A76ED10602F9226EEAF9FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  nl_cloud/scripts/libraries/base64.lua
- Size 3KB
- SHA256 886f7b3348c8c6799bad65a569e7906f0955c96d2188d0cc1a5b7d8b5e94b21d
- MD5 bd7e39fed61a1fd3c2e03eb3091d5014
- SHA1 dec9cc20fb0d318359eac24e511b53d2195fd2fe
- SHA512 e2290aa48b1b9e9e548a55d04bd9303079cdb3b9fb0532cfb2b4695595d13f973e9dbd1d83014130cb0cfe104ee61fdc4aba9bc66587ecd9dad9b52a73f059c5
- TLSH
  T1CC71419A619B9E662C8D42F4E823DC0DFA7C7052952D02C57D7F23928C04F6E84F3A78
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  nl_cloud/scripts/libraries/beams.lua
- Size 6KB
- SHA256 41efccbb8c2aee62cfbc1f0caa2da91d91f7322c969a19b4f3a284016ff7f6ab
- MD5 e88b34c5ebfb15c1df7aac9dafb515cb
- SHA1 a0679db52446f4fec1fe033476dfacdaed8e8d09
- SHA512 b3fa774309dbb571bf77734f5b42174ce3ed9f1428a78520c6401a212ee47c9dd0f2512ff33a5ace0a7b0d17d12fe0fa851b1eb92d3ac525ecde94d498710bcc
- SSDEEP 96:CRJnIM4IPObm+xHHE0W/iSZUMioCOVG+p8l:CvrPOS+RkNqSZP1Al
- TLSH
  T15FD12274F733D461C6A2DF2490B5044E14A9D8435E39E232308AE41EE7C6AD9A1F6DBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  nl_cloud/scripts/libraries/better_avatars.lua
- Size 14KB
- SHA256 6577ed7c0d86e5a3d8f38b9d6962459cfe07baa50d8f4764994de37d643e0d06
- MD5 8d2e79303c24a14f34bdbc707049051f
- SHA1 b5ba9c0e69251e70079eb1543071f8f133b3db6d
- SHA512 232a0ec26ea47a424c01341a63601a9320f8f2f7662bdd7444aecf7b7769dff5e78cd016a39aac6d4b675f5eb0e70dd9a845936c64ce0647d95a0c0d7514417e
- SSDEEP 384:MgKubHI+gXCFt6iCLeBoeBjQbewmuad2OGEJ:MIlt6LeBoeBjQJaOEJ
- TLSH
  T1A162CCF6F727C0814A52DC349A36584554ECE01B4EB8E372B306E16EEBD11EA54B1CBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  nl_cloud/scripts/libraries/better_draglib.lua
- Size 6KB
- SHA256 f85ac48a656bc4dba5f4fc27fac5a08dd26200754202c9043d9b8cf18bf541ff
- MD5 3b31a8060f77e7c6b3422395fc3949d5
- SHA1 7552be9431e721a54e35698ef596c329eb8ba735
- SHA512 e1eab67a76ab4db0cd462aade379c2a6e879c3ae1d984c395bd087a0f76822a764002e2fe99807ccdb1d1c46ee45d017cd7c34a2333f61d940cb815ed9031cc3
- SSDEEP 192:RDphaRepGNDcg/CIMGS+cnV2hxdf7ccXAvcZzxlSR:RDPXGNDcgXMGS+2A+UZzxk
- TLSH
  T150E1D0AF550124781407F7AE88C32117363A71436A1D642EF6FD42246F6932E53FAFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  nl_cloud/scripts/libraries/better_json.lua
- Size 6KB
- SHA256 e84efdee731482a0a97258da9897b3258a9d5e8584a987345a6fc7497ce34587
- MD5 648e79313c2ac2be780e5f90b87f076f
- SHA1 b08a6db24ebeae42ac017ccb70d3646657885e44
- SHA512 08b6f99179ddd9e612a7825279dfc869ee79a31eee7d521901b80016ff520846f06ad9a8f043328f50852f3769b4202a87520f2f0d6bde8d3fbc74f907c69d25
- SSDEEP 96:6IKNOM+qW8RMObLVGl0aCVI9i1XZZeGss:6IKElqW8RMObL7aCV6iRJ9
- TLSH
  T1F7D11176FBB7C1528760DC348532440950E8E44F4968FB337643A8ACE6D89EF8472CB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32