94181ff96062a3f6b39d03fa1a8ac32dbbf5db6b2901ff91ef0003821e85b880

Sharing

Copy URL Twitter E-mail

General

Target
RoPro Rex 1.7.zip
Size 3.3MB
Sample260916-3dz94atzev
SHA256 94181ff96062a3f6b39d03fa1a8ac32dbbf5db6b2901ff91ef0003821e85b880
MD5 1f90897220ee022835ed40d59d11a954
SHA1 7e2e0247663fab13dfe3eb672ca734cb8d016715
SHA512 ad3e1d6ef4a662c88a69605c633408afc03fb2042365d61d4dc02249e824d21b749815d6c1968accd5fd0a5de3f295af0cd5ddc8d1dffd876f0abf9843317443
SSDEEP 98304:9uIAcqrEXpsKL5ghvt23OtcBKsgX6oBeiBbEoKsMS6ciRXF0f18:9FFZI1gnBNuBeYbJKsMS6bv66
TLSH
T17BF523B9D7ED008BDD5A32B87CD82402F7B14339592AA906656BA7FC88877D8035C37D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  RoPro Rex 1.7/images/game_verification.svg
- Size 31KB
- SHA256 63110427725a398e60622ee63b0cd22a9f3dc4ec49bd71cbccd365d4e4e18bfd
- MD5 a5502f837cad33cf8c55474eb1c4ca8f
- SHA1 bb030846fd8c5c47e1eef8afd64bf61f3282acff
- SHA512 172d1ba74e0face508a266475202d81ac0e64e995bb765a9ebef144d11d12511c0a96a6670b4aee208085d666772e4514df10775f3adf3f3d74b64c2f09a0204
- SSDEEP 384:HCOzHGf5jXIHwanVUoAeeRF2Nfd7Gi4KkQVxFaDtp0FVQTXzij7+MUwqIB:H/Gf58QanV86GDKkHoFmTj8OIB
- TLSH
  T1F6E2B6CC2B7497F8FFC5E6FFEA1250187E1766F267848E21C3285E4A79854089DA18D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral1
- Target
  RoPro Rex 1.7/images/left_arrow.svg
- Size 190B
- SHA256 6fa291b8c397e71c7144f355d85b041efcf7d83049a382802d587c8f531e6d7c
- MD5 406916f08bd0424f3c1b1a43bff6b936
- SHA1 994e49559f05c4d259b9a2adfe5b8349477760a0
- SHA512 d98498672c538a745c46c737e37a8ee689ff705ad9e89656da51149ebb3a0da4e1082ff8dd2c8020a20db243ccc9020e13395a99374293c55db94c7e7e35c97b
- TLSH
  T167C022FC42044C28B1208B30EBA83221523A6143828C504CD4223133A1015AABC3B2AC
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral2
- Target
  RoPro Rex 1.7/images/offers_icon.svg
- Size 1KB
- SHA256 8e0cdb491e13a7000ba12fe6a8ac5fa527e6322a2db0a61966a3677fbbd7f7d0
- MD5 055d033ad928a72bbf4c516fe4b31fee
- SHA1 6b713c789f9278570b6746733a136a5fc3fbd60c
- SHA512 1f9623d58bf24be7ab01926208ff539a1fedf06e1beed0087b1610b54882716fc910d9ef81ba8d17d16af2007d98119e0e93864e097caa2331faeeac95427b91
- TLSH
  T11D21F1BF83594B76E445C7D9E96CC145743E50A0F1ACA0EC77F166D40C029B3A5F6801
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3
- Target
  RoPro Rex 1.7/images/play.svg
- Size 320B
- SHA256 b91c6eb03607725332eb93705c8af833a22898e340ec0d04d11dd7cf417d541a
- MD5 44ea0f8a7b844b73c7d27a974ebc5b6f
- SHA1 21ea78c49b4c3530f67d7e7f04e9f88f37823107
- SHA512 0d9b6ad4247e847e00fea057e68b7be6e0972599d6456d7b64d7060d8991869ea19b8c182dcfb0cf43071a009b390b53d12531111883aa83cee24c34b2e759aa
- TLSH
  T1F4E02DB943CCEA418B8093B8CC3E6061005BA2E282A020EC844875E7F028CEB1F53FA0
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral4
- Target
  RoPro Rex 1.7/images/profile_icons/donor2.svg
- Size 64KB
- SHA256 e89dadd431ca7233f6b248a343be21d526ada88b6699d9809b0440c7ce01c4bb
- MD5 3536d3cb30be408d0462fcddd643a447
- SHA1 38419f428b4faa17dd3a28f193db6f6e2a428e33
- SHA512 13df39743a161c3eec93140b3c5e08dee18c9d6bdf3cef2a105e10ca6441a5e75c6070a2b53c036b9628dd9778cf25385b4353a55faa648d53ee5adf4d2c0fc0
- SSDEEP 1536:+zKI+FaSq/lFSwE3o/G4JEWz1dHM8tJtfGsoLxOsRqdNHQUw/e:1aS2A3oO4LDLtiXlOsRqdBpB
- TLSH
  T18D530273216806BA30D187FEAFD81C275EEA612FB46271CA738176131B6C68756FE407
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral5
- Target
  RoPro Rex 1.7/images/random_game.svg
- Size 4KB
- SHA256 8fc34e878dc22a4297e5234a41943925c4036fbbe55688d7df8d6b936b8ba052
- MD5 39176bd85faec59b79b69308999e78c2
- SHA1 71fee670648875059d200d5c91212202e4ef435e
- SHA512 997ea5c055dcac984efebb6b4bb81e1367e72c08edf928fd7858934defc7340e6575439d99f956410c53cdbc8556d136dafaa9b15118bf2b4e5e092732cfa97d
- SSDEEP 96:yDvZMmneejSwlpn0z0CxG32JmOkyErO7GJWZrDSWImWxaCgCmGRe2+:yOmeejSsA0CxGA0r0tZrRGaCgCmGy
- TLSH
  T1BB9197EC27F21AC0C4C597DAFF2141EDBC1BE23799D4C914C32D8F6115828ADD952A82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral6
- Target
  RoPro Rex 1.7/images/random_server.svg
- Size 1KB
- SHA256 5d7edf4b52c965cc35e3e3fcbc1af81320c96d913e8e19fce72236a837b6491c
- MD5 b584dd9085a926e10c35d760f6c82549
- SHA1 9cfb1d3fc95442aac5082d975009475b67cbc564
- SHA512 25f70be64e888dc7bfb0038ce944d5bb7d77d608e7a46d222b0b11f42db2b92dad8d713385a8a3a0166e6b04b3e55a7528b2c1ef6be107cc42cdd5638209d14c
- TLSH
  T1123120EF7770DDE51B98CAD7BF0038ED314688369E0D8605C29E1E28186642DADA8A53
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7
- Target
  RoPro Rex 1.7/images/right_arrow.svg
- Size 189B
- SHA256 0b50f0200143586b3955505f125631a5cc72b59afe56e283fe1b95ce16988401
- MD5 eee3091e3085a6bd32d0cfcfb64c0c27
- SHA1 f5819badb6274d14fbbf72cf13796cda0a943b4f
- SHA512 cd1ccb7617264da5b80e56fdb65b4c82f832bdc5f0fc38698077e055339964c42d3588d4d4c4a52fc3039e0253d9d89b27c31fe345abb9586d74a2587d18df56
- TLSH
  T134C022FC81048C28B110C220E768322082271083828E5088D8723233A10669A383B2AC
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral8
- Target
  RoPro Rex 1.7/images/roblox_link.svg
- Size 646B
- SHA256 dcd5b5f3e409423ad1dab7dd7c87443c3585276de326f8dbdded501a9b98d335
- MD5 4bcce4d7e7a9b0dc52a3182f242f7431
- SHA1 71e4b4394a419edf46b9654d741987a9fc24f348
- SHA512 502ca90337e183fa085d1c26faf1828d7bbd87701c531adb1888a2a14bb5b11e2ab92e71de7d5c3bf63586ef799b137698fdc2ce6ccd5bcfb2a859e26ca66c9a
- TLSH
  T14CF0DD78484C0FE846038734E32C35E1A03ABCD6BD7D1294CA823DAA616186C1D2F6D4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral9
- Target
  RoPro Rex 1.7/images/robux_icon.svg
- Size 1KB
- SHA256 f40f16783facbd10157a49098aeabb000f670868fbb0b33100cf6ad86c45e925
- MD5 1fda4458e7f79753633b1430d0196eaa
- SHA1 3d3cbcd4f5605be8dacb9275fe782e33417bd149
- SHA512 03e42154b254000225007bd29ed8bedeabe2edad34882997896a44f074488751d21d5ca3fc91dbcea58117e0240b057381a35a761feaf0b875ff3ea66feed801
- TLSH
  T1582132A825CD9BB4FA18A4FDC545C6E85F292ACD718E9847C929BC01C3C04CE4AE84E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10
- Target
  RoPro Rex 1.7/images/sandbox_icon.svg
- Size 6KB
- SHA256 43ecba94dd8b605f2cd71580703ca5785371ab61d181b903034e7070b6a46331
- MD5 ec662bfdbc41f211141482a668b72ddc
- SHA1 6007c1404540e7bc2df916f4a99cd63db73be480
- SHA512 93f78994f930af1c78e006905b3a04ccee7a7374c5a718551ccbcd8d6cf73d055b07f7394174e48487873d81f975f6ea7e4f5cfe78aeea271bfe563fa3f3ced3
- SSDEEP 96:wJuXvfVnm3aXvY4B3ynpKrvdwCPb1wJgGYkq6ImvEVq2Vzi0ECz040m35fA5Sv/8:wJ41eMr3y4mZYkDl6Of
- TLSH
  T18BD10077438097DB86A0C75CDB64E88D32AC8282F0FA91C8FF5355978D264FB927C942
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11
- Target
  RoPro Rex 1.7/images/sandbox_icon_darkmode_active.svg
- Size 5KB
- SHA256 024c130ea31c6882e3757a3095c5b0dadf44d9819c17ad4ce245c143c14588c8
- MD5 07a44d14d30d23aeb181ef8c443a2321
- SHA1 69e25ae0dfce82268698cd95b68ed5138de80435
- SHA512 5711cfe8f9622a5c425483f1a532b6585145bfc9c784013767942f993a751a321b298c6c105141ea858819602bca0ce4b4b8a2da468258b991cb63c26baea442
- SSDEEP 96:zjHr/faCHr/dADOftqjYeNhgFbToSD3ouzsWT4vNIpwNP/:zjLXVL8OFqjNaHlD3yEkNKOH
- TLSH
  T1B6B133BB134487BF5660CB9C9738E18C32A59541B0FAA0E88F935695DC068F7D1B8C22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral12
- Target
  RoPro Rex 1.7/images/sandbox_icon_darkmode_inactive.svg
- Size 3KB
- SHA256 622bf62773676921f85eed2fb99206f27436769aa5c01ea4444aed0cd6ac0b5c
- MD5 b387f137e8602fbddf94ceac4e428982
- SHA1 c54f0bcadce850e72559af678c54d91146b3cb89
- SHA512 592353f781f4f5a9f6db675ca2a6425fd029061c8e82f5897f3b4479fb052fbf7366e36d85b778b819d2dcc6f65c4267373841aed8894455a9f49680259230ad
- TLSH
  T1CB7111FB53448BEFA290CB5CE724A18D37A15585B1FD60E88F976655EC008F7C278821
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral13
- Target
  RoPro Rex 1.7/images/sandbox_icon_lightmode_active.svg
- Size 4KB
- SHA256 be163e4629956f739b09493273a0fbd122a7a0d4f3bce4eda8e674e268587905
- MD5 11f7839b4e0ae85a574df52d1bed3a85
- SHA1 db8d57a0c8da20694d4e0ca4a8d8d89fb65cedf8
- SHA512 08ea7d792711b53e4647b5f9cbb1a2a2e03562f689596aa1a6ef18948ef21d45376e2728553f80b8b9e30d98780d4f937d498b29f7003164f82c60861172ce25
- SSDEEP 96:bkV/BvZYl4uo1X42VoBvZj3aKfQsgTd1IpKlRTc8JB8dgaU+rvT:bcZA+Zk5aiK1IUlRXJq1rvT
- TLSH
  T194A1F077431487EA86D0C7A86B48F48D76D489C1B0FA91D45F974592DC0A8F7E73C8A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral14
- Target
  RoPro Rex 1.7/images/sandbox_icon_lightmode_inactive.svg
- Size 3KB
- SHA256 4604c94b4a866ccaf54557dce4ca9f406c7c836a941329b9fdca7cf5ce6fd2dc
- MD5 dc135c32be2172a13bb540431b351d3c
- SHA1 45fedf46fccfa37092ca77ad78cdc130e824333d
- SHA512 f3fcc256fb07410e78b717323e2180065c44322c85b2304f2122780b6daf34a000fab1302ab561ea9ac303ee303b735fd24f1f24c797f3fb7e2f67105fe485c0
- TLSH
  T1FD51AB77031487AA96D0C7EC6B84F88D7AD589C1B0FB42C48FA31591DC498B7E73C8A2
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15
- Target
  RoPro Rex 1.7/images/speed_icon.svg
- Size 839B
- SHA256 58d8f829c161fcea17d4a79d7e548969d4081a05377ad5c8a80393f273fc843f
- MD5 404f50158faa1d6e2b845ab1b9eca107
- SHA1 50ec65cca7e5acafff36e0c53b8dd160e5f66156
- SHA512 9b86be0464d1533dd48a4614400c8ac38ce5d2921661f10a7551c3b4a0061462072b895c6892f626c845dfb7afa962729b39b9391c464bd7c8b10a19400c0385
- TLSH
  T1530144BFD6CCD290C938B3E9F1E0582A663B346232424DE9860CADC5574A369228E4D3
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral16
- Target
  RoPro Rex 1.7/images/themes_icon_darkmode_active.svg
- Size 1KB
- SHA256 786c83493e44e4af57c1f84cb6ef90f92b352fcb78089f94b3b8bd1daa00930c
- MD5 dc913d77ce7f19b7603f8b5c13c6074d
- SHA1 19b50b24dc0e1d51fdc3f3081587e3568cae4ed8
- SHA512 72b798d9a393fde5634b4eb29d552a4e0b58825f272b6f4e96cc2a85bb7154b5e1401584d7cdd1be9a48843a5c78f330848542b78c85ba258cb2f3536bd458b1
- TLSH
  T19F21477E0329AFB9819753AC1F12B98B7665B441B73243DC07C26113CE0BAF7602CB61
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17
- Target
  RoPro Rex 1.7/images/themes_icon_darkmode_inactive.svg
- Size 1KB
- SHA256 29e68e42a97bd64f3115a831a4165225855ffde032108096da7045d1d4e645ec
- MD5 270142551ddcd7f2eff3cc661570d402
- SHA1 e1cf414ff337b064175bfc65c3640fd87702fe74
- SHA512 eab18de61b1f13f82de63dad2bf2cea4e84fe5d83fd45a0e2e16d3232bb6ef1f3f5f0a39373f133bb04bcfe325b88df2798e23d8d4ac9cbe4dc6ec7d0db3053e
- TLSH
  T16921277D03296FB9819753A81F12A58B7655B481773253DC07C25113CD0BAF7601CB61
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral18
- Target
  RoPro Rex 1.7/images/themes_icon_lightmode_active.svg
- Size 1KB
- SHA256 2363002391f6f859a193a669a31d562de1343cd2e2bed2d959813bcb3fbbac2a
- MD5 0b9c025271c13645f6c493fea8089278
- SHA1 87d9267a8deda453bd62ffd73a8c359aeb23e886
- SHA512 a21a19b7bc157ed59dbc302dbd23932ec685718d24b937f0c26457012a2e8b1b2c9474b4434194c9052d55a9356d573cbe50e3486ec1cd16c8f877bb3e9d31fe
- TLSH
  T1A221247E0329AFB9819753A81F12A98B7655B441B73643DC07C26113CE0BAF7602CB61
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral19
- Target
  RoPro Rex 1.7/images/themes_icon_lightmode_inactive.svg
- Size 1KB
- SHA256 dd10765fbd046a04736a0dff89f874623ad3037e1b50db478c783dffec87d7ed
- MD5 127a35b01ec18f95eac66e252c09a860
- SHA1 f24ac54c25536b7b723b6e499120a82830aeeb44
- SHA512 f1565bcc6b6b464e347b21d3d1cda0c027c9983c9a62af397197f4f9cc3eb0efaf7c8f04fc9579f5bb5b07d9f01d5d0420db505a4a77ff4f04fa914e2d3668ee
- TLSH
  T17621477E0329AFB9819753AC1F12A98B7755B441B73243DC07C26213CE0BAF7602CB61
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral20
- Target
  RoPro Rex 1.7/images/timer_dark.svg
- Size 933B
- SHA256 68c29e6ed657522a7dbab3932e5d3955058333b2f6d42e38af19ed84831fcf9b
- MD5 6e5063616e0b77e7ccfd0105764ab9bf
- SHA1 74a0e0bee28408ef7fc6ce2a61c24255cd89f894
- SHA512 90933c7c4eae030c87e92fa29a3476c7f5a4de51cc1af0970fb2769358bfb9b47558f8ba3b3af02b09f6a991c9f57cbd7f85ecd2ccf0874c6ed87c4a8264fc0b
- TLSH
  T198119CBFAB581EFF98ABD2E5628153950057F077B24641F0C2E19A2B2CB15D92966C01
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral21
- Target
  RoPro Rex 1.7/images/timer_light.svg
- Size 919B
- SHA256 00c21e43f13ad841ac2032727e26b22b22bfae67fa9c762589bfc0e57bd5038f
- MD5 92b54295637fdc73fee5c3a241dbf820
- SHA1 87e5bf69ed644846d31543f174fbc7322ecbedd7
- SHA512 f841447559bc9520d222ae83cce198f8b2966f6cf5d7ed6413351ec831c35d6a7ddbb46e8d1bc8820e7b734067d29c0ab1560af2117b9f23e4c31b8e793d9a64
- TLSH
  T1CE1100BFABAC0DFB586BD2F5218252890047F0B362D241E0D7F1DA3A6C705DC1A35C02
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral22
- Target
  RoPro Rex 1.7/images/trade_notifier_device_notifications.svg
- Size 2KB
- SHA256 481f0932ad494fdc68afa0cd3ab79fef2795fbfaf0ed6f98666405a5f542ba0d
- MD5 e61ce7a6f01e88fba4d8224fc3e87c1e
- SHA1 461e336142a346099e231111a5941c1459ddd8de
- SHA512 9e80a85346343a9991f707d0dd942d01e624cdc8084eec857f66c01f6b2ea4a4b21ccf352785f0155c9bcb71ccccff2317c262508acbb5753635dba42923e00e
- TLSH
  T15241BD76A99C152BD644920D53AFF4B23A2DA0D72204CA60384C9E971E928FB5D9F3E0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23
- Target
  RoPro Rex 1.7/images/trade_notifier_focus_dnd.svg
- Size 2KB
- SHA256 1e4ab237aeeeeab0343179c2254ff7e3ad14ae945185854cefcfb73c422f78b8
- MD5 98f7c2c82cecba58894590822155d89d
- SHA1 8c74febdbbcf6dff2da38e659f320dfa41a09602
- SHA512 452e88178e2d4b9332ea691d0b8f5ab39b3bf43345b7d517d2259caacc763df525c50edeaf3000d7a23db42717e56695d038f522eef35d24ee565b6b1047470c
- TLSH
  T13E4100A171DC042EE942850C869FB5C63B5ED1DB03158601B454ECBB1B965BB2DAF3F8
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral24
- Target
  RoPro Rex 1.7/images/trade_offers_icon_darkmode_active.svg
- Size 1KB
- SHA256 8e0cdb491e13a7000ba12fe6a8ac5fa527e6322a2db0a61966a3677fbbd7f7d0
- MD5 055d033ad928a72bbf4c516fe4b31fee
- SHA1 6b713c789f9278570b6746733a136a5fc3fbd60c
- SHA512 1f9623d58bf24be7ab01926208ff539a1fedf06e1beed0087b1610b54882716fc910d9ef81ba8d17d16af2007d98119e0e93864e097caa2331faeeac95427b91
- TLSH
  T11D21F1BF83594B76E445C7D9E96CC145743E50A0F1ACA0EC77F166D40C029B3A5F6801
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral25
- Target
  RoPro Rex 1.7/images/trade_offers_icon_darkmode_inactive.svg
- Size 1KB
- SHA256 cf02b7b1beb2fb565f0a534111d48e577c6ab20fb93ce1b57e904cd75113e397
- MD5 dd38f68385eeb8f4d6286a2a0135d31a
- SHA1 9a2657ce83d0327c7273a69e97dd1cdaf0e1f779
- SHA512 77c6877f2a95de2de328a6a75230fac976bab98c822475a33c163318dd8e3fcd984b3dbdfc34b953f56f3f6a514be9a57de72a38d4c790d65e6849e65e00589e
- TLSH
  T12421CEBF43295BB5A409C7DAA9588141707EA0B2F2AD54DCB3E22AE01C02C73A5F5842
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral26
- Target
  RoPro Rex 1.7/images/trade_offers_icon_lightmode_active.svg
- Size 1KB
- SHA256 6904e6baec782ecccc03dadc7bda7b0b1041ed3651ec9d75d9f2f3495f4547f5
- MD5 c2578921b5bb67b2100c7a3789c07440
- SHA1 380e5399c206c6339df34b9ffcdf20915582edfe
- SHA512 02acb5a89571e5478cae895392194e9a37dffe5d9caf15626031d69fee9adb83765a199dd91dec77b000595b351141bac7aca553ee0eeddf3f5f1d8efe704b5b
- TLSH
  T12E21607F03689B75718AD7DE7F25864530A6A0F4F13A9290B7E36155DC02C73E6B09C1
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27
- Target
  RoPro Rex 1.7/js/libraries/jquery-3.5.1.min.js
- Size 87KB
- SHA256 f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b
- MD5 b61aa6e2d68d21b3546b5b418bf0e9c3
- SHA1 9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
- SHA512 5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b
- SSDEEP 1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8
- TLSH
  T13193F9DDB2C6702257A720BA007F510BF236199D6C4D8450F265D8E9BCB8A4E827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  RoPro Rex 1.7/js/libraries/semantic.js
- Size 741KB
- SHA256 b7eb6120e15b428977faf701dc2ee445b4b8f631b6fcb0b9744a7b34bc41a6e0
- MD5 d1ccd3d6baac5c8718d86156f0706252
- SHA1 9cf938ee2c7af6981c5430608ad8cb2f61a1e228
- SHA512 48f5d69a5cd89676c9b2fd735f57ddd685d06eb270257416334e504e2f9f4c2a82350883667200d5b9275622a57f3afeb5a738b654d4274a6517d9aa9b13235c
- SSDEEP 6144:0W/lkkkAVBW7+tBqw2a4MheUqMgWJvVqQiUg47jRZkdfb9pSkR4TbVvuqKKmpov5:1tJJvX1V/G4
- TLSH
  T183F41E4878A1212B85BF733AFB9B5216FEB605A7521056617E7C82C81FB2C4092D1FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  RoPro Rex 1.7/js/page/additionalMenuItems.js
- Size 70KB
- SHA256 5b6a2fdd90abec9cc2cc6af1b834d53ee73b49b60ab7764b771cdeb1f0d75c29
- MD5 f51da494783c98a098513bd7342bb686
- SHA1 698bd79774c5f812d7ae8f9a241272f5e1f99aa1
- SHA512 c24a9f137a16bc346987a3bd36c73fe09da20bf7855cec06be4081f29c813c384d91fe61eb958e596727a339643c6e3bd436282b783d191dd712749528e7a441
- SSDEEP 1536:rTd7gEZAf3Pg3pQGOjbenSjHWTyH8/Qektf8gbDyiP8TZrUiGBuigTPvbeZbnPuY:rTd7gEZAf3Y3OjHW+H8/Qektf8cP8TZk
- TLSH
  T1A463B894B79C053E6656206E5C6E21DCB57CFDA35D0C40BAA96CC86C24E1E7F20FBB90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  RoPro Rex 1.7/js/page/avatar.js
- Size 153KB
- SHA256 cd6d75293f7f60e91d6175dfa3993ca47a5185cd6d4538496edfe4a5d39197a0
- MD5 bcc587d493aa0584da1bf90d0f9b47b0
- SHA1 6caccd7166b5f9a177601af12c4d4d7aae982aa4
- SHA512 6020dcdb61f6aea2d3c92d1e073504c249dd6fb9e43bdc497d9ec8c54e17e0d5e6cda1c89b6039da2bdf30a85ec817c90e8608646423869a08da83ea32126e04
- SSDEEP 3072:/DvGtpbI4IPD7Up9hZHlbokgoTnnEuQqkzzJI60V:/zGtpbI4IPHUp9hZHRokgMnnEuQqkzz4
- TLSH
  T118F39454B28DC12E53823726C47C5285AC3DDAB65739D0B8FAACCC94B0B4D6831B7BE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  RoPro Rex 1.7/js/page/fetchAngular.js
- Size 8KB
- SHA256 7de59a2ce595f9912d94b3ae59ea2b9f369ca2c3351787ffbfee3e2483728128
- MD5 3089812efe6f0f30f2164ea73ce1a10c
- SHA1 fca97a8796e43eda8a87d7694fe5a786ed866e1f
- SHA512 660b62fb82fb0cbadc40c4f6a38b0e53de2fc920ab2835456fa4ec47aea1549d79668459ae4c547c85c99c3059a5d201217c88915a98d53daf821f678b26adf4
- SSDEEP 192:y6nS7jZGj6NpY8oq++E0Dpdga8Ht2+V26u0PBh96F2Fr5EjIMpcuLHV1w5g:hnSnZ46HYVq+L2pdga8N2o26u0PBKF2q
- TLSH
  T14402952CB68556F9047E3520E5BC05CD316EF963940EA956CF5CCCE428E096F293BF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32