General
- Target ruby-nrp-v1.0-beta.5.zip
- Size 573KB
- Sample260320-jbfccsbw5x
- SHA256 0643278d5fcfb2bf8e7b4d02555e0b3ef5d4e4810fb07e678159175ca6988622
Score
7/10
Malware Config
Targets
-
- Target Application.cmd
- Size 31B
- SHA256 af6f59bd3caee5daa2d6765dd8c1bc167060a9681617ee1e2aff32f1eda3477c
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target luajit.exe
- Size 857KB
- SHA256 3595a6b226ce4daa0a28edea152b3a887c01f6323db1d082f6568c995cdefb55
Score1/10 -
- Target static.txt
- Size 301KB
- SHA256 59c2115caf3104184de6cbc64c4029886b7302e1fa58acc910a2c567222e8616
Score3/10