General
- Target Software-v1.3.zip
- Size 570KB
- Sample260320-jbfm5ab19j
- SHA256 73ef3ec27bbfa00ea7cdf1aae7f69de6b284eb246ba915e1483c8dd0e627aced
Score
7/10
Malware Config
Targets
-
- Target Activate.cmd
- Size 25B
- SHA256 41c60c41f26b16d45584df791b0402a600a017701437c75df4fd720cdc3ee752
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lua.exe
- Size 852KB
- SHA256 0be1298198e9ba2fa22ddcd6f1f0ef4f239d97ec0767e0ba083ae97bcc18945f
Score1/10 -
- Target package.txt
- Size 301KB
- SHA256 8b6c79baa34dbbe59f932965d133644cebbcedc34afd7180bb3626bc69bdff7f
Score3/10