133a1a5a0e9aeba3ba199663a2265a7370e9901546e5676f868d314267cb72fb

Sharing

Copy URL Twitter E-mail

General

Target
[paste-co.de] Roblox Module (Legacy Version).rar
Size 22.2MB
Sample261104-v334aaes8n
SHA256 133a1a5a0e9aeba3ba199663a2265a7370e9901546e5676f868d314267cb72fb
MD5 7192b0cc087b9bb24e82e88218ed7df1
SHA1 0427ff3b6d2a50772c45f9a6beb44b36179293d1
SHA512 b2dd856d834194ddaa80717a7ed3a739303219d6591ecb82c06faaea12d5cc240672610a99529f770012862e55808b667409373bb2ed959b96526c49ea9fa227
SSDEEP 393216:C0JDEs2swmHISEBTCfcDJCHFuQkpEBZe5ALFl2BS7Iwwlh0Wo:TRERmHIS5cNCHFuQkGOmFlqSET0Wo
TLSH
T1A0373397F73C75A2AEF378609CD4D023C619A5E25583C46922A20BE681FF09491F377E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  EvolveInternal/Dependencies/Luau/Ast/src/Parser.cpp
- Size 190KB
- SHA256 4877f38331ed4399a6b5172b05b90465822ac0a1537a14a1c572a134a960a2f4
- MD5 ef8c4d87b3b6efc7844a2e067379a929
- SHA1 67b6c49cefa5996b4f48f7a0adb7cd5df2fa3fe8
- SHA512 460c1988575490632fa01832586ba84e3a2b68c714f91f93d9096632ac58db69481e8362b07497e168fb15841de6dbe7b25f39b7dbe4de5b0da981761a1b3e18
- SSDEEP 3072:1WXovBarmdvFxwY6iJh4o7uJMV7fe4P+HPdxf0buB9aG9q3HM/dm44ifnWlibDF6:1WXovBarmdAY6i1KnWl3TaqObtLsl
- TLSH
  T19514449A25A101339AE772AFCB8F8555723B904B7108CA90790F42E02F8557D5BB3FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  EvolveInternal/Dependencies/Luau/Common/include/Luau/DenseHash.h
- Size 26KB
- SHA256 5811e14c875f7118a78af9cad1fd3d7fa3902117c2cad1ade05f656464dd0f46
- MD5 da4272c79e5682f67ade0d6d835fa0e7
- SHA1 963646c989a46db5bcbd55b7159026caacba3196
- SHA512 8ff820d8b00fbcad1aa68591ea1a98a668b772d9341808a3561be345d3d35e32479f68d479b2baddb6e1c5b766c5320ba645003ef57134dd8d22b17ca8ec00cf
- SSDEEP 768:rhBx13LE/j2AYwncplOlvTkXKXHwR4qYWJDYCHYC:r/x17E/j2AYwncplOlvTkXwHwRTJhHYC
- TLSH
  T194C2A54621D736609367E2F58B8BD052FA00A003B25DCD987A9E4220FF13474EB76BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral2
- Target
  EvolveInternal/Dependencies/Luau/VM/include/lua.h
- Size 27KB
- SHA256 44c3cbe633d80cd002c2332ab7d8e39e578e9d1c1f80d8fd7b3bd443f8ba073a
- MD5 15fdaf8ebec937847dfdcbdc90b4cf19
- SHA1 754928171be329c178ea9c24232281fdde89fd5f
- SHA512 c969b1b14cebeb4c08680b13f02b776bae65f239548a77e46c1070f273682afcc6110ae8adbac3ec35256fd060ea53c674912fe288749c25855fa810c94fa8db
- SSDEEP 768:cEFEFRvpxijgq/yOkcMIayds7f1JmLeKvgrKdXlfmngqAzQLuk:tQJtJxKvgrdGzEuk
- TLSH
  T143C24E4DFAD03560CC62A319CA2D11D4D4AAF8DB36C0E494321E9D244BA57BF92BFED4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3
- Target
  EvolveInternal/Dependencies/Luau/VM/src/lapi.cpp
- Size 55KB
- SHA256 c35f0d6092cdc8a13cb353820af033eba563fecf1e7f140c81c2abbe51260b84
- MD5 289c03527faccf9db56b8dc84da3e620
- SHA1 6bacb6e49ad1fa2a0de4b78d289dc95a20d21a05
- SHA512 dd3690523940ed59c6597475464c1e49a99fb4356021e3706a1f3ae9626c9b8bc227b73fa87b4d63a8969891ad633e9088bc42b664248d33fa91e8d9aa19a9ab
- SSDEEP 768:jmvRQJ3GY4GmNEx1yjq3DlptoYD/SfWsmHJQl2YMFsek6q4rCb885I8mamQnzsck:yvRs3FKip9YAsekYCb7I3OL6
- TLSH
  T19D43418FA5A360248933E52D4F5FC4D8C21A68C31B8DD98074AD85546FA00BDE7BFBE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral4
- Target
  EvolveInternal/Dependencies/Luau/VM/src/lbaselib.cpp
- Size 11KB
- SHA256 6247c8bea23d6aeea74dc7bed6edc8543ae8515fb3a327b649e6988ac6bbd17a
- MD5 9e00553d8fe0224dae3569eab5d0fe44
- SHA1 426284c2fa7984bdec43ef3674ded5b554d39bc3
- SHA512 31fa4190790f70022d603efdfae546d9dcf79ad3676d0389cb612cec87518a44f055af793d51a43fe08ef2a6b2a406e8c70db447ba3d5c9d3ed5907e394d357b
- SSDEEP 192:njBZ8hjKw/abi7qqayiQWkHfXsPwoWhwWRFAM+2KWkokWbV+WfqyWbqYUGQWaWMc:njQd+yHk0CUzhYXStBJG
- TLSH
  T15A42444EE08274964463E53C47AFC79196595CC302CCEA40B66D8C61BF660BDE3FE6C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5
- Target
  EvolveInternal/Dependencies/Luau/VM/src/ldo.cpp
- Size 26KB
- SHA256 eec486cad2d643860757198623ceaf4221da2467acd72c16a2de58bc451ab1b4
- MD5 d4ec91ce5884e65664c72b29eb37f432
- SHA1 4c641ee25bb2bed936af4740560fbedd89644993
- SHA512 cc2ac9b382fc1f10e1f5df3241e4d018ed119e699a3ccc6b0b72309f275bbeaf78739934937554b9a59ece29fd1830da13f97e7608f9a86c4f99995dfcf53651
- SSDEEP 384:6aVNfl0bOJr5hO/X+shBycfXR/F7j/N59NGnGD6QCXv:T2bOJlhO/bl7bN7UnYhAv
- TLSH
  T1F9C2844E18A121528A52633817CFD3F4EB34D9D7526EC9C0B88DC2443F94179E66EBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  EvolveInternal/Dependencies/cpr/include/cpr/session.h
- Size 2KB
- SHA256 64d8e40a2642f77fdfd89e2bcdd050949f9b4e4530bf8a4852e2ede2e2c2e578
- MD5 6010d7df6a93b6f3ee6717b7c0900846
- SHA1 89392cb35602e5a7274c71522669eafec48eec9b
- SHA512 8bf2598d45c9fe1affbc4999a3ff554956543f7ee3588c77f58a6cd85d39ea95ba284d73449bf09928a96e646fd04b33e452661a238dd29dd0c751a2b4548334
- TLSH
  T14D513987EE1A2385D9F391F0EB734863903A35073A59C972360BA3449FA3799B457273
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  EvolveInternal/Dependencies/cpr/src/session.cpp
- Size 16KB
- SHA256 734468d05dcbd8a5b5fb5410983c918225e2535600d9a2897a87093ace033c15
- MD5 e21210ad071590f2ba9bb77a55da23b7
- SHA1 3e6199438348268add038c3bf340440ef314ccdb
- SHA512 0bbd7bc384d02044d317eb4339420ffb57f5aa19454e32ee0bd304a645f0a5838517ddf7ebc3f4bfc34ca7bc07b89e78f8dc71a1ee23fc36638d9dad49fa0d2b
- SSDEEP 192:t1UbcD2h9xyyHOj0exb7YDH9Llb7YnNudXkk/5kKKpk9fklzkRb1kIIkWi/2tJZQ:tibcDS9THNgiH68XFmWEqbTl/CkHtV
- TLSH
  T1D272FD131CA26A5721A6D59ED73F16CD7338B0133126C8A5FD4D63089FEEBB867B0221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  EvolveInternal/Dependencies/cryptopp/include/cryptopp/config_asm.h
- Size 20KB
- SHA256 62b2035dcb207a1889c046e9de46434dd89962939d067b50cd3b434549cc4bf3
- MD5 8d7e739ce5145773be59f7853d4bcc47
- SHA1 95f2bcbce0aaffbc2220af0eaaca92e15cc98a08
- SHA512 ec335d51f78aece882c4c89efef32fc7c91c6d67b4f56e020747494b0d5808f4d00cf0e17e57c493286758274861bcf22df8f10ea8b8e0b86dd52c61687c1b74
- SSDEEP 384:rE640z8UaMSvc8nEPKqgvm8Bk2meSKAYSQ9HxvfOYnB813tQTa8M1+tQaXtQa56N:rgh1nd3beLMDh0
- TLSH
  T13092D0273F6F2853037245B1D12C5497A260C75BEFC8E9F49821FCCEAA5D90837ACA95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  EvolveInternal/Dependencies/cryptopp/include/cryptopp/fhmqv.h
- Size 17KB
- SHA256 bcf8e4b0b7d2554c880c0eebe4e9dc9b3f9f0c1db1215f869feea5bb2ba26678
- MD5 3c09cb472489cae7b6604653b8a1b3d9
- SHA1 ad072b611350cdcac6a057a23f6bc4a7b3591f63
- SHA512 a79d64a0d04034428bdf914cf996b7e0f08fe560dddc2b1ee6a3a9c57492a116f9975b8ab0bba09a0da95e90ca881800079f3c4b3048d53f441ea4f87e25f788
- SSDEEP 384:BulD/5WNIU7pzZ499dYCJYL73AS2AwL8rUd:qK49IbL73AS2Aw4rUd
- TLSH
  T19082961A67F2C7608D9D02E8A352F542D30DA459F64DDA30B19E091C1F1FEB9E73C2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  EvolveInternal/Dependencies/cryptopp/include/cryptopp/hmqv.h
- Size 17KB
- SHA256 27ef8687619553584f1a8a5c3d01ac48942e860e02289fc1f127ab6e0156f2dd
- MD5 df3557add5101599617999a3ce64e77e
- SHA1 fd84dae80a11635f9e36e308ca6237204b8930d7
- SHA512 47079482bdd42e1abe9b826fb139e20a30ba0bf026261d93903e5f18850f48551ac2b097cac4f281dba43d673cb5bfacf3665a95dd61ae473f0094ffc0567dcb
- SSDEEP 384:JLudnDVgZ6AHPHZ499dYCJYL7eAUOAFgrLDxrWQ:JSe49IbL7eAUOAGZrWQ
- TLSH
  T12882851A67E2D7608D9D41E8A302B542D30D645DF74CDA30B19E0A1C1F1FEB9A73C2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  EvolveInternal/Dependencies/cryptopp/include/cryptopp/mqv.h
- Size 12KB
- SHA256 3df008d6eec2487fddac46f716212ff395989a72751e320f37f85b094ca09af8
- MD5 62f909d08dd2c7da019f157ad905b42d
- SHA1 728c8949b26f4d173777cb452b1c4896ec129042
- SHA512 48eb2f8aebae769641c8b98fa5b99c1115a84867b0015b1b0acbc9e464a006a42687eed183b4295ab91fe81bafed131b9bf8ae67b1c987e7e6ebb77e3a300f47
- SSDEEP 192:yG8yeFPx3p1XRXNybL402Pl2DcTBmx4ZccHCb0dGvpDgAUXG4:vzepx3Ph9TAcvcc60dA5gAU/
- TLSH
  T11042A419FF91C79048D821D8B4219683E71E74A8F25C0E71A5684D3D1A2FEB6F33C2E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  EvolveInternal/Dependencies/cryptopp/include/cryptopp/queue.h
- Size 9KB
- SHA256 0b1ba7c2a4859bc665a4a0c9fd137fe8c79ccd91251fd7e1f525af3394ed1403
- MD5 074ab85cd52a800b0a541595e4332021
- SHA1 790ea72ea6c9241f449de40e24fe3c911e5a778b
- SHA512 412a65690e68bad2b3dde779f085b74311048d7f12e0e1e61615f8c1076f63468cc2f8f8b5af12dda01cb8e06e85a5bbe80bacc6b5313291a124c50e4b0f30d7
- SSDEEP 96:43tcWfm0XrtOHv9mvqsvNmBd15bjVb7Wb7A9TcQ89ozeJLbDPFXY1NX9oUWs50/L:YOHv9nc+d15bjVGwTib5XY1NX9ok50/L
- TLSH
  T15A12836A3E59DBF99659F4D8022E40A2F3187085F3618BB5F0FD847D78A28736035E93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  EvolveInternal/Dependencies/curl/include/curl/system.h
- Size 18KB
- SHA256 8933eee495010267862744096910914211e40d43935a81864a3780a61299e44f
- MD5 0310e598fa46904e37fdddbcb9b538fc
- SHA1 d454e1339448974fb86b3386f0e9dad277f007ba
- SHA512 2d643cb052d7d2d38337684e89f6d809a0b471fe3ebe4d436eb35dc08ed6f94ae2a4b062d3ffd6002ff4dd3433609fee4ffcb26ec197d8be5f3f554a320b041e
- SSDEEP 384:jdeODo9QIsTqF6TOzbKQYH/nFkhRMw4BgqfWyj3xwZ4MMp3V1n+Xg5ZvZStfSqwe:j6W5Y
- TLSH
  T11E82AB811E9B989481E69521704C59EB83C08A73F1103EE1B1BF988C9F4D625F5E7EFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  EvolveInternal/Dependencies/zstd/include/zstd/xxhash.h
- Size 255KB
- SHA256 3b93d3e9d5ae536f05d25e8ff8717c105e2bcd151a802994d2e4870fde14b276
- MD5 338ff6f92d753f1865948174968100fd
- SHA1 3aa37b124b4dbbd7d385310aec4ac3b59ea40970
- SHA512 6b77fa6bb705e43dd129dc7dc9d367db9ef703da917140149010b56a66e99fabc0171e2be08d612df48188173949b62b4d2045eb58b59718d65bdfe9ccf599c7
- SSDEEP 3072:l41/m7GkGG/OetG8nuHVvP5N2ExfRDnWWQPwx5zfTtL1WM/TeXIoCH2J:jiebMP5N5tp7/T+I1H2J
- TLSH
  T16E44C84E39A24D220D8300F7339D13C3A315985BB35199E6744EB6293F0FDA593BAEE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  EvolveInternal/Roblox/Environment/Environment.cpp
- Size 12KB
- SHA256 c2a91213aa292bcefc725fc2fad1ef4d53d69a4798e623e81a39fb24fd825c67
- MD5 8f7b646a56eef1e171070fa45b52cc21
- SHA1 c3ebf583fd2e6addc60c5606f577cc3694d31d20
- SHA512 f8641b18180f0287ed44237a4248a8f2d6b496e605602a829f283d8cd12bdfd5a308d2d92b9c101e1e531c02146b3b64028a361e8ed201e78d6df3d29ad6b0f9
- SSDEEP 192:aTtGE1Vf+7YTSCFRZRPitqj6ZoTSpNrr5HvWjiCR7k65gorMlBkPOiQDdbtILS:sX+SRR9TSpNv9M8BIO
- TLSH
  T1B442526ADA5A7164957272284B6F8688EB341F93125ACF5376AC0C400FB617CC37DF8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  EvolveInternal/Roblox/Environment/Libraries/Http.hpp
- Size 26KB
- SHA256 96bbbbc806062cae54c619e8c53e8af8dfff0ecf45ecc6c536cdddb63abe2d25
- MD5 1a27337958d166e34882335fbaaf5179
- SHA1 8c6390717c3f3836ed6eb5eddf6f10bd883436bd
- SHA512 60da55a6ab88d490f993780ac1c84b74c3c98518c7a5e6d5f0cc3d526652a5ab425b1acf7c64abc88a71b92d36ea44fe25b8c4e6054db2b8ec603c06c15851ec
- SSDEEP 192:MFcfB3CCKwqJwwWK0RTEKrUfkol+SCKwHqJwz0RTEKIhfGl+RUq9w2OvsYAb/YGt:cWKwNf3PDWRAJafN1jLQXsuD
- TLSH
  T1D6C24549807338090693D07D8BB7A6856964184323A89EB5BFEDC7162FCD4DCC9BB6F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  EvolveInternal/Roblox/Environment/Libraries/Script.hpp
- Size 54KB
- SHA256 638a1f0b661028905a1dcc7bca6668a699965e2a18e37dea8b3a236995dd1f16
- MD5 a3e9fd371c40bcfdb6febf01c2d00efc
- SHA1 b66a953a34cc985f092eb69bc535dd06fd5d27b5
- SHA512 ae7e0cdbe95cb2c49b4855c5c1295cf86569c532fda11f20e2b6e318c09ad00ab3a1ee85f70532dde06c53a5797a2a0d60ee7be833b034c471a7fb7f4467db11
- SSDEEP 384:fPrmQKEZxVnmpixYEDlEn6gW6Mc3V5P1/4whz2SiB6bSPGDQ7gU/ea/U:fTmQKEZxKixYEDlEn6w1Rx27ES+EEUpM
- TLSH
  T18E43644EA466B456093362AD9F67C44CE796299323D48350BEDCCA803FB206CC77DE6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  EvolveInternal/Roblox/Environment/Libraries/Websocket.hpp
- Size 16KB
- SHA256 8750a04d181b09694fdded48f2d9e7d40b44c508add3055bb7263c3ed2eb1c62
- MD5 c58a8a60f4bdb2e37653206c92a654a0
- SHA1 02caa39c9223c01f96e5930c9a3c2ce4f1aa85dc
- SHA512 f1bd1bd33a7ad5deaa2b16621fdaf5ab6319c76b89475854d6bbd4b6aab1b49e61f6da1fd951bb565f1b3405f13b446eb3c7d89cca75041a5df12fb3ec8500db
- SSDEEP 384:xEepqW5IhIkMY48XCywpq3XP8OXwYXhEVojfoj2zEVHS:xEepdIhIkMgXCywpOXP7oVosioVHS
- TLSH
  T17C72648E5073345A2A73D13A8B9F874072695883678CCC417B6D0750AFD21BCDBBE79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  EvolveInternal/Roblox/Environment/WebSocket/Transport.hpp
- Size 33KB
- SHA256 6ab020236dbebbc8a1e4ee6cdeb563e792980d619d6c36636ee26117698332f6
- MD5 18bdd54a828350182bb5db0901da03f6
- SHA1 5ee5d4e34371df4ff59af505bb4e55354fbd6214
- SHA512 f754dc0e2a44cfaf2de579ac7909a5b613141f6aa82b6083b52ef3e3a209219d7e29c136742b6694ae34fa7816359711bbca7832fbb84ff13ef333af2b4cb449
- SSDEEP 384:nCAP28cF54p3F9uBW0s5NkSD18zgNPcVNLBsUc8IoTU00WzYAfGXLupVWtnW6933:nCApBPHvOCzdrt9nH
- TLSH
  T15AF2678578F33465A723607FDF979056B3269403634CCA74BD4D8290AFC8164AAF8FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  EvolveInternal/Roblox/Hyperion/Scheduler/Communication/Communication.cpp
- Size 6KB
- SHA256 c61aa87d15a4b9fc12ae9c29e5676bfc3306422b7d573f8b96c88865674e412d
- MD5 7bcc99358c7d0547c429d65e35eea815
- SHA1 bd96c09ac9f05f687506b18f92864e6d96094b60
- SHA512 a33179d516dcfd0737546b74ddf2045a4d6b9bce4dda7a0eb5c00de0595f156506b5902081ad76af95664769e788af82edf02b9c838f4567c8ac32fb3ea4b168
- SSDEEP 192:4y7Knv83N6ejtys6Z07yb/iAF8p2mEX7R:tKEId9
- TLSH
  T117D1309814FEB82512A7503F6BDB905A36A15403561D4B39FFAE8320AFC51289DB1BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  EvolveInternal/Roblox/Hyperion/TaskScheduler/Jobs/SyncCallJob/SyncCallJob.cpp
- Size 395B
- SHA256 3f12e9cf9f8424e1ba5a705ed043695bbb689b3bc4677ca7cf31bbb977c44aca
- MD5 85056b003db8d57eaa69064a75017d5b
- SHA1 61fdb41b54e54165708137d27ebbd5c4b03e9384
- SHA512 0ce511dd9d714adafc38e2cfca3b84b91c78463f6e0fb7b67897459ee4307fb3d7f7e929752dc5d661c675a1c1bef02b15b3f84f8e93f3d43ec9aaa08370d7b6
- TLSH
  T1B7E0ECF6F5B6606FBF26062A8E4794C2F69F7966493C0815C0156154B08C05EE66EA44
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  EvolveInternal/Roblox/Hyperion/TaskScheduler/TaskScheduler.cpp
- Size 9KB
- SHA256 9fad1ab654eea3be9a2f681fd2b333b06dbb794624c7cf642684e022e0d88c1f
- MD5 ecde5ba1934ad8fafa153f0a30801489
- SHA1 b0619ace948eaf4fb119f55537cc7c45ad84e8a4
- SHA512 04e83f58b7ac26f585fcfc7e00672d9d930d49a4711f009d7382d6c746e8838a8a89928ea1584682745a11e711c146d40ccf1c86753ada51ebdf0638145682cf
- SSDEEP 192:6y7oHvZL8rqJuBEMXZm2cpeN7kU1FfVdutevbJBGf/NwwP7/ligAgOgd9:3svKr2Mn5TJBGf/ewh1bBd9
- TLSH
  T1911273EAADEEE56BAF1742BCD80D90B1E4ED6470EAD8C871CC9DC19424D009FD9B424D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  EvolveInternal/Roblox/Shared/Shared.hpp
- Size 10KB
- SHA256 ef5cd9050c7344d43fac35e42396f540ba6bd5aa3a3e41a41aa523cdd7ab30be
- MD5 c00048c68b2570f851dfb08995a91450
- SHA1 a5b19b039a993f5f497edaefe14d3ccf986da714
- SHA512 4fb61d634303a2dc8cb0b4ec31f0a32bdeb1cfd81c3bbbc8f216d37b0afc89e03b97a4992acc7bd2d84008f2b2b90c9cfc3df0a66b97e97935c75f23dc9fa4f9
- SSDEEP 192:fcYGcc2hIWhqHU8djwsm6xo8udZ2pMHnLeIE:0Yq2hIW6s6xo842pMHna
- TLSH
  T19C32205DB47C7002997372B5AB639014C255347363948B60FB8D5498AF710ADE3BFBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  EvolveInternal/bin/x64/Release/Injector.exe
- Size 77KB
- SHA256 490bd3485b8915f82394950ccced164b51222b18133d933415b5ded5f1e0d6ce
- MD5 b269c309a5ac868f88cdb7317888a3e2
- SHA1 c4ee9f087eb7b2baa4df2ed7e443814fe8eba58e
- SHA512 1c30a036b4e84baa2aaacad7cb2d030a93f9ce9366348675c406491fa46330ad04886437724d1e29cfae7b9f28d47972498913149e10ea10be9eba41b61521c5
- SSDEEP 1536:Zy7f30ZU4t0WJvsKRVqdcoRcaYHzm018ooecMsHah:A7vCUBWJvsKRVqdlhDOXoKsH
- TLSH
  T15B73FA298E6950EAC37A8978C8436C07FF51B8954BA56BCF6B504DE31E13AD46F3B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  EvolveInternal/bin/x64/Release/volcano-desktop.exe
- Size 9.1MB
- SHA256 5475264969aa678f079301d51e93d47ee932bcd48f7af24dcb0d28f89a51f7d9
- MD5 6e2ab8eaed625557c2cff295f54f8d66
- SHA1 67509b00a1297b07ce47c7a069901a4bbb4c4ec3
- SHA512 c2c1b35ce0173710244d6d7a489f53cc931b78b8f6dd82dd906cef65019ae049f1dcdb4c38b02f131e80bf5df83e90fd2fe57ed25a6adf6508a1346555e8e856
- SSDEEP 98304:OFimH+rBtZczEvOOMb5y7QwaWvF0XXZZfkwA2DvdRMx/KON/DMPawIp:OFTH6BHczEvOOMb5y7QX9xNXPawI
- TLSH
  T1ECA608157B5F99ACD18BC47483878A62496030DB0B35B8FF4494923C2FAEBF56F28359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26