General
- Target Software (1).zip
- Size 506KB
- Sample241104-heflvswhlr
- SHA256 00495259f22dbcd10b08e6d3ad884ba3fb2f5c576952ae6dce0ddc1cd183653e
Score
8/10
Malware Config
Targets
-
- Target Application.bat
- Size 6KB
- SHA256 0f31042be5c136b8e937138dd205f55d9bd6d7a005ec2b385d1f3818ee2e37fc
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lua.exe
- Size 89KB
- SHA256 1cf20b8449ea84c684822a5e8ab3672213072db8267061537d1ce4ec2c30c42a
Score3/10 -
- Target lua51.dll
- Size 592KB
- SHA256 ff976f6e965e3793e278fa9bf5e80b9b226a0b3932b9da764bffc8e41e6cdb60
Score3/10