Overview

overview

6

Static

static

3

application.cmd

windows10-2004-x64

6

application.cmd

windows11-21h2-x64

6

ico64.js

windows10-2004-x64

3

ico64.js

windows11-21h2-x64

3

luau.exe

windows10-2004-x64

1

luau.exe

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Software-3.2-beta.4.zip
  • Size 534KB
  • Sample260417-w1ehkshx3x
  • SHA256 020dd86a7c857435098ec1db260a40d4d4c3a9021386e2def8fc3da2ecb0cc2a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
execution

Malware Config

Targets

    • Target
      application.cmd
    • Size 24B
    • SHA256 037affc90a4bf1d6b5263756945fa92795f5a59630cab95ad17260711d023fd6
    • MD5 SHA1 SHA512
    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      ico64.txt
    • Size 300KB
    • SHA256 5762d9a95e545a70de685c3ae9e1d5bd6aeaae7615f5b8156da65e894a028009
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      luau.exe
    • Size 753KB
    • SHA256 5b2009af04c34eaa891b4fb57a7b79cb94b104ff7db2b3ba7eb66446db6bf929
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v16

Tasks